Last updated: August 18, 2026. This Privacy Policy explains how Newve Clinic (“we”, “us”, “the Clinic”) collects, uses, and protects your personal information in connection with this website and our services.
1. Data Controller
Newve Clinic, 4F, Gunwoo Building, 548 Gangnam-daero, Nonhyeon-dong, Gangnam-gu, Seoul, Republic of Korea (Business Registration: 741-60-00411). For privacy requests: newvecompany@gmail.com.
2. Information We Collect
Consultation inquiries are not stored on this website. When you submit the inquiry form, the information you provide — your name, contact number, email address, preferred language, preferred date and time, treatment of interest, how you heard about us, and your message — is delivered directly to our clinic email inbox. It is not saved to our website database and we do not retain it on our web server.
- Inquiry & health-related information you voluntarily provide when requesting a consultation, such as your treatment of interest and any relevant medical history you choose to share. This is transmitted by email only, is processed solely to respond to your request, and is not stored on this website.
- Account data: if you register an account to access certain sections of the site (e.g., before & after galleries), we store the credentials necessary to authenticate you. If you choose to sign in with Google, Google shares your name and email address with us for the purpose of creating and authenticating your account.
- Usage data: IP address, browser/device type, pages viewed, and referring site, recorded in our web server access logs. We do not record or store the IP address of inquiry form submissions, and this website does not run analytics or advertising trackers.
We do not process payments on this website and do not collect payment card information.
3. Legal Bases (GDPR Art. 6 & 9)
We process personal data on the basis of your consent, performance of a contract (responding to your request/booking), our legitimate interests (site security, service improvement), and legal obligations. Health-related data is processed only with your explicit consent (Art. 9(2)(a)).
4. Cookies & Tracking
We use strictly necessary cookies (session management, login) and embedded third-party services (Google Maps and Google Reviews). This website does not use analytics or advertising cookies. You can manage cookies through your browser settings.
5. Sharing & Third Parties
We share data with service providers acting as processors under contract:
- Hosting: Amazon Web Services, which operates the server for this website.
- Email delivery: Brevo (Sendinblue), used to deliver inquiry emails from this website to our clinic inbox.
- Sign-in: Google, if you choose to sign in with a Google account.
- Embedded content: Google Maps and Google Reviews. Review ratings and author names shown on our site are public information published on Google.
- Interpretation services: Personal information may be shared with a third-party interpretation service provider when necessary to provide language assistance for consultation, treatment, or reservation services.
- Affiliated medical providers, only as needed to serve your request.
We do not sell your personal information.
6. International Data Transfers
We operate from the Republic of Korea. Your data may be transferred to or processed in countries outside the EEA/UK (including the Republic of Korea, the United States, and the European Union for hosting and email delivery). Where required, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) as approved by the European Commission.
7. Data Retention
We retain personal data only as long as necessary for the purposes described above or as required by applicable law. Specifically:
- Inquiry data: not retained on this website or web server. Inquiry emails received in our clinic inbox are kept for up to 1 year from last contact, or until you request deletion, whichever is earlier.
- Account data: for the duration of your account, plus 30 days after a deletion request.
- Web server access logs: retained on a short-term rolling basis for security and troubleshooting.
- Legal/tax records: as required by Korean law (typically 5 years).
8. Your Rights
- EU/UK (GDPR): access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent at any time. You may lodge a complaint with your local supervisory authority.
- California (CCPA/CPRA): right to know, delete, correct, and opt out of sale/sharing of personal information, and to non-discrimination for exercising these rights. We do not sell personal information.
- Republic of Korea (PIPA): you have the right to access, correct, delete, and suspend processing of your personal data under the Personal Information Protection Act.
Because consultation inquiries are not stored on this website, a request to delete inquiry information is carried out by deleting the corresponding email from our clinic inbox. To exercise any right, contact newvecompany@gmail.com. We respond within the timeframes required by applicable law (typically 30 days).
9. Security
We implement reasonable technical and organizational measures to protect personal data, including encrypted connections (TLS/SSL), access controls, and secure hosting. Collecting and storing as little as possible is part of this approach: consultation inquiries are delivered by email and are not kept in our website database. No method of transmission over the Internet is 100% secure.
10. Children
Our services are not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided us with personal information, please contact us for removal.
11. Changes & Contact
We may update this Policy; the “Last updated” date reflects the latest version. Questions or requests: newvecompany@gmail.com or call +82-2-546-2926.