Privacy Policy

1. Personal Information Collected

Email address, password (stored encrypted), name, nationality, country of residence, self-declared non-enrollment in Korea’s National Health Insurance, facial photos submitted during the reservation process, reservation and settlement information, 1:1 inquiry (chat) messages and attached photos exchanged per reservation, and profile information provided via social login (email, name).

2. Purpose of Collection

Member identification and verification, eligibility screening under the Medical Service Act, processing hospital quotes and treatment scheduling, commission settlement, fulfilling statutory reporting obligations, supporting communication with the hospital and administrator regarding a reservation (1:1 inquiry), service improvement, and (with consent) marketing communications.

3. Retention Period

Retained until account deletion and destroyed without undue delay thereafter, except where applicable law requires longer retention.

4. Disclosure to Third Parties

Disclosed to the relevant partner hospital only to the extent necessary to process a reservation and facilitate 1:1 inquiry (chat) communication; not disclosed to other third parties except where required by law.

5. Cross-Border Handling of Personal Data

This service uses cloud infrastructure outside Taiwan, and, to process reservations, personal data including facial photos and 1:1 inquiry (chat) attachment photos is also disclosed to partner hospitals located in Korea (see Section 4) — both constitute cross-border processing and transfer of personal data. Any such cross-border transfer is subject to protective measures at least equivalent to those set out in this policy.

6. Outsourcing

Operations such as image storage (cloud storage) may be outsourced to external providers, with protective measures required by applicable law applied to such outsourcing.

7. User Rights

Users may request access to, correction of, deletion of, or suspension of processing of their personal data at any time.

8. Protection of Facial Photos, Inquiry Attachment Photos, and Other Sensitive Data

Facial photos and attachment photos exchanged via 1:1 inquiry (chat) are stored encrypted in a separate secure storage location, accessible only to the user, the counterparty to the relevant reservation (the hospital or the user), and administrators, for a limited time.

9. Security Measures

Access control, data encryption, and access-log retention are among the technical and administrative safeguards in place.

10. Marketing Communications Consent

Optional; consent may be withdrawn at any time after it is given.

11. Data Protection Officer and Contact

If you have any questions about this Privacy Policy, please contact us at consulting@zangchengtech.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect as soon as they are posted on our website. We recommend reviewing this policy periodically.