privacy policy

DiaAd Co., Ltd. (hereinafter referred to as the "Company") processes personal information for the following purposes. The personal information being processed will not be used for purposes other than those listed below, and if the purpose of use changes, the Company plans to take necessary measures, such as obtaining separate consent. • Membership Registration and Management: Verification of identity, personal identification, prevention of fraudulent use, confirmation of intent to register, age verification, and handling of civil complaints, including grievance processing, in accordance with the use of membership services. • Service Provision: Provision of content, provision of hospital/doctor information, consultation reservation services, and provision of customized services. • Marketing and Advertising: Provision of event and promotional information, and analysis of service usage statistics.

The Company collects the following personal information to provide services: [Required Items] • Social Login (Google, Kakao, LINE, Facebook): Email address, profile image, nickname • Email Sign-up: Email address, password [Automatically Collected Items] • IP address, cookies, service usage history, access logs, date and time of visit, device information, browser type, country/region of access [Optional Items] • When booking a consultation: Name, contact number, information on procedures of interest • When using the Community: Written posts, comments, images

The Company processes and retains personal information within the retention and usage period stipulated by relevant laws and regulations or within the retention and usage period agreed upon by the data subject at the time of collection. • Member information: Until membership withdrawal (destroyed within 30 days of withdrawal) • Electronic commerce related records: 5 years (Act on the Consumer Protection in Electronic Commerce, etc.) • Access log records: 3 months (Protection of Communications Secrets Act) • Consultation and reservation records: 3 years (Framework Act on Consumers)

In principle, the Company does not provide the personal information of data subjects to third parties. However, exceptions apply in the following cases: • When the data subject has given prior consent • Providing reservation information to the relevant hospital when booking a consultation (name, contact information, procedure of interest) • When required by law or upon request from an investigative agency for investigative purposes in accordance with the procedures and methods prescribed by law

The Company destroys personal information without delay when it becomes unnecessary, such as upon the expiration of the retention period or the achievement of the processing purpose. • Electronic files: Permanently deleted using methods that make recovery and reproduction impossible. • Paper documents: Destroyed by shredding or incineration.

The Company is taking the following measures to ensure the safety of personal information: • Administrative measures: Establishment and implementation of internal management plans, regular employee training • Technical measures: Encryption of personal information, installation and updating of security programs against hacking, etc., retention of access logs • Physical measures: Access control to computer rooms, data storage rooms, etc.

The Company uses cookies to provide personalized services to users. • Purpose of using cookies: Maintaining login status, storing user preference settings (language, country), and analyzing service usage. • How to refuse cookie settings: You can set cookies to allow or block them in your web browser options. However, refusing to store cookies may cause difficulties in using some services.

Data subjects may exercise the following rights related to personal information protection against the Company at any time: • Request for access to personal information • Request for correction in case of errors, etc. • Request for deletion • Request for suspension of processing You may exercise these rights via My Page within the service or via email (diaad1004@naver.com), and the Company will take action without delay.

The Company assumes overall responsibility for matters related to the processing of personal information and has designated a Chief Privacy Officer as follows to handle complaints and provide relief for damages to data subjects regarding the processing of personal information. • Company Name: Diaad Co., Ltd. • Email: diaad1004@naver.com • Address: 2F, Wonneung Plaza, 15-7, Jamwon-dong, Seocho-gu, Seoul

This Privacy Policy is effective as of April 8, 2026. The previous Privacy Policy can be viewed below. In the event of any additions, deletions, or modifications to the content due to changes in laws, policies, or security technologies, we will notify you through service announcements starting 7 days prior to the effective date of the changes.