PICKLS Privacy Policy

MCL Co., Ltd. (hereinafter referred to as the "Company" or "MCL") complies with the Personal Information Protection Act and is committed to protecting the rights and interests of our "Members" by establishing this Privacy Policy in accordance with relevant laws and regulations. Pursuant to Article 30 of the Personal Information Protection Act, "MCL" establishes and discloses the following Privacy Policy to protect Members' personal information and to handle related grievances promptly and smoothly. If "MCL" revises this Privacy Policy, it will immediately post the changes on its website (www.pickls.co) or notify "Members" individually via email (ID).

Article 1 (Purpose of Processing Personal Information)

"MCL" does not use the "Member's" personal information beyond the scope disclosed in this Article unless the "Member" provides consent or it is required by law. The purposes of using the collected personal information are as follows:

"Member" Management: Identity verification, confirmation of intent to join, personal identification, prevention of fraudulent use, handling civil complaints, and delivering notices.
Service Provision and Billing: Provision of services, payment processing, product delivery, booking affiliated hospitals (medical institutions), and mediating online consultations.
Marketing and Advertising: Development of new services, delivering advertising information such as events, providing customized services, and displaying advertisements.
Legal Processing and Accident Investigation: Responding to legal issues that may arise between hospitals and patients.
Service Improvement Research: AI feature development (Show me the face), analysis algorithm design, etc.

Article 2 (Items of Personal Information Processed)

The Company collects the following personal information. The Company collects personal information through "Member" registration, messenger/consultations, provision from affiliates, and automatic collection tools.

Required Items: Name, email (ID), contact number, verification information, telecommunication provider, residence, date of birth, gender.
Optional Items: Residence time zone, consent to receive notifications, occupation information, self-introduction profile, purpose of surgery/procedure.
Automatically Generated/Collected Information: Surgery/procedure information, progress photos or videos, chat history, connection IP information, cookies, payment history, device information.
Payment Information: Credit card information (card company name, card number, etc.), account transfer information.

Article 3 (Processing and Retention Period of Personal Information)

MCL retains personal information while the data subject maintains their membership status. Upon withdrawal, collected information is generally destroyed without delay. However, the following information will be preserved for the specified periods:

Company Internal Policy: Name, date of birth, email, and payment history are retained for 5 years after withdrawal to confirm duplicate applications and handle refunds.
Retention under Relevant Laws: Records on contracts/cancellation of subscriptions (5 years), records on payment (5 years), records on consumer complaints/disputes (3 years), website visit records (3 months).
Surgery/Procedure Progress Photos and Videos: Retained for 1 year from the date of surgery/procedure.

Article 4 (Provision of Personal Information to Third Parties)

"MCL" does not provide personal information to third parties beyond its original purpose without the prior consent of the data subject. However, information may be provided if the user agrees in advance, if necessary for fee settlement, or if unavoidably required to comply with legal obligations. (To ensure smooth consultation booking and consulting, the Member agrees that booking information, medical questionnaires, and uploaded facial photos may be provided to the affiliated hospital and attending specialist chosen by the Member.)

Article 5 (Outsourcing of Personal Information Processing)

To ensure smooth service provision, "MCL" entrusts the processing of minimum required information and periodically checks whether the trustee securely manages the data.

Google Cloud: Database server and storage rental for service provision (Operation of Cloud SQL for booking data and Cloud Storage for photo storage).
Google Analytics: Website traffic analysis and processing customized marketing data.

Article 6 (Rights of "Members" and Legal Representatives and How to Exercise Them)

"Members" may view, modify, delete, or suspend their personal information at any time, and may request to cancel their membership. Direct withdrawal is possible via "Settings > Account Management > Delete my account". Membership is only available to those aged 14 or older.

Article 7 (Right to Refuse Consent, etc.)

"Members" have the right to refuse consent. However, refusing required information will restrict the use of the service, and refusing optional information may result in disadvantages regarding benefits such as events.

Article 8 (Destruction of Personal Information)

Personal information whose purpose of collection and use has been achieved or whose retention period has expired will be destroyed within 5 days unless there is a justifiable reason. Paper records are shredded or incinerated, and electronic files (including data stored in the cloud) are deleted using methods that prevent recovery and restoration.

Article 9 (Measures to Ensure the Safety of Personal Information)

Password Management: Passwords are not collected; login is performed via an email verification link.
Other Measures: Installation of security programs against hacking, minimizing and training handling staff, access control, and operation of intrusion prevention systems.

Article 10 (Matters Concerning the Installation, Operation, and Refusal of Automatic Personal Information Collection Devices)

"MCL" uses 'cookies' to provide customized services. We analyze the access frequency and usage patterns of visitors to provide optimized information and utilize data collected through Google Analytics for customized marketing and advertising. "Members" can refuse to save cookies through their web browser options.

Article 11 (Chief Privacy Officer)

Chief Privacy Officer: Hanhyuk Cho
Department in Charge: Customer Team
Contact: contact@PICKLS.co

Article 12 (Remedies for Infringement of Rights)

For reports or consultations regarding rights infringement, inquiries can be made to the Personal Information Dispute Mediation Committee (1833-6972), Personal Information Infringement Report Center (118), etc.

Article 13 (Changes to the Privacy Policy)

This Privacy Policy applies from June 26, 2025.