Good Morning Doctors Co., Ltd. ("we", "us", "Good Morning Doctors") respects your privacy. This policy explains what personal information we collect through this website, why we collect it, how long we keep it, and the rights you have. We process personal information in accordance with the Personal Information Protection Act of the Republic of Korea (PIPA) and other applicable laws.
1. What we collect
Patient inquiries and Patient Story Program expressions of interest are sent through your chosen messenger or email. This website does not collect these requests through an online form. If additional information is needed later, we explain its purpose and obtain any required consent before collecting it.
| Channel information | Items | Purpose |
|---|---|---|
| Messenger or email | The profile name, account identifier or email address visible to us on that service, and the message you choose to send | To read and respond through your chosen channel |
| Visit or program interest | The clinic or department you are considering, planned visit dates, and program-related preferences you choose to share | To provide clinic information or discuss possible production participation |
LINE, WhatsApp, KakaoTalk, Instagram, Facebook and your email provider handle messages under their own privacy policies and account settings. Opening a channel link takes you to that external service; no form submission is sent from this page.
Our website itself does not use tracking cookies for advertising at this time. Our hosting provider may automatically record standard access logs (IP address, browser type, access time) for security and service operation.
2. Why we collect it
- To respond to your consultation or program-interest request in your preferred channel
- To review possible participation in the Patient Story Program and discuss production timing, language and accessibility needs
- To understand which treatments or check-ups you are interested in and prepare relevant information
- To coordinate appointments with partner medical institutions, when you ask us to proceed
- To confirm that our facilitation service applies to you (patients not covered by Korea's NHI), as required by the Act on Support for Overseas Expansion of Healthcare Systems and Attraction of International Patients
- To keep records required by applicable Korean law
3. How long we keep it
We keep your personal information until the purpose above is fulfilled, and then destroy it without delay. Exceptions:
- If you ask us to delete your information, we delete it without delay unless a law requires us to keep it.
- Records that must be retained under Korean law (for example, records related to international patient facilitation and its annual reporting obligations) are kept for the period required by that law and then destroyed.
Partner staff accounts: Unlinking a clinic removes only that connection; the login account remains. A non-admin staff account with no clinic connections is scheduled for deletion after 30 consecutive days without a connection. Reconnecting a clinic cancels the scheduled deletion. Existing unlinked accounts receive 30 days from policy rollout. Administrator accounts are excluded.
Administrative audit logs: Retained for one year from creation, then deleted by periodic cleanup. Credential verification results, document processing evidence and publication consent attestations follow their separate partner-administration retention purposes.
Responsibility and advance visibility: Privacy Officer Jeongjin Park is responsible for disposal. Before deletion, administrators can view account, document-original and audit-log targets and due dates in the automatic cleanup panel. Viewing is not an approval requirement; eligible records are removed automatically in batches.
4. Sharing with third parties
We do not sell your personal information. We share it only in these cases:
- Partner medical institutions: when you ask us to arrange a consultation or appointment, we share the minimum information needed (name, contact, relevant health interests, visit dates) with the specific registered medical institution, with your consent.
- Legal obligations: when disclosure is required by Korean law or a lawful government request.
5. External services and processing outside Korea
We use services provided by overseas businesses, and information may be processed outside Korea. The provider's country below is not necessarily the country where information is stored or processed.
| Service | Processing purpose and scope | Provider country |
|---|---|---|
| Supabase | Serving published clinic information. For the partner portal and Korean-language service: staff authentication and storage of accounts, clinic pages, user stories, audit records, publication consent confirmation records, images and private verification documents. | Singapore (Supabase Pte. Ltd.) |
| Netlify | Website hosting, server functions and access logs. Patient inquiries and program-interest messages are sent through external messengers or email rather than Netlify Forms. Partner portal functions also check completed document uploads and issue authorized viewing links. | United States |
| Maps and clinic address searches, with related access information. When Google Translate is selected, translation of page content and processing of related access information. | United States | |
| OpenAI | Automated review of published clinic page content, including public clinic and physician descriptions, names and photographs. In a separate document verification process, images masked on the submitter’s device and submitted after acknowledgment of overseas AI processing are analyzed for document type, legibility, physician name/specialty or clinic name, representative and business registration number. | United States |
Private verification documents and publication consent confirmation records are not included in public clinic pages or automated page review. Verification document originals are scheduled for deletion 90 days after verification. Unverified documents are scheduled for cleanup 30 days after submission or the latest correction request; unfinished uploads, 30 days after reservation; cancelled onboarding documents, 30 days after cancellation is recorded. Periodic cleanup removes eligible originals while retaining verification results and processing history for partner administration purposes. Document AI verification is a separate process using masked images after the submitter acknowledges overseas processing. New submissions accept JPG/JPEG/PNG images only and enter the AI review queue after masking and acknowledgment. PDFs and other formats are not accepted. If masking is uncertain, prepare the image again before submission. AI mismatches, unreadable documents and processing errors remain subject to administrator review. Documents may be submitted through the authenticated portal or a limited upload link issued by an administrator; link submissions are recorded by link ID and require administrator intake confirmation even after an AI match. Administrators currently send staff notices manually through KakaoTalk; automated Alimtalk delivery is planned after channel verification and provider selection. Patient messenger and email conversations are not part of automated clinic page review.
Partner sign-in uses browser storage, and invitation information may be stored temporarily during registration. Google Translate may use a language preference cookie when selected. You can delete or block cookies and site storage in your browser settings, although sign-in persistence or translation may be limited. For services specific to the Korean-language site and partner portal, see the Korean Privacy Policy.
OpenAI transfer for document checks
| Recipient and country | OpenAI · United States |
|---|---|
| Information transferred | JPG/PNG document images with unnecessary sensitive information masked by the submitter. Visible verification fields may include clinic name, representative, business registration number, physician name and specialty. |
| Timing, method and purpose | After masking and acknowledgment of the AI processing notice, automated review sends the image through an encrypted API connection to check document type, consistency with registered information and legibility. It does not authenticate documents or guarantee that they are genuine. |
| Recipient retention and use | Requests disable response storage (store: false). OpenAI API data is not used for model training by default unless the customer opts in to sharing. Abuse-monitoring data may nevertheless be retained for up to 30 days by default, with exceptions for legal obligations and safety review. Immediate deletion after processing is therefore not guaranteed. See OpenAI API data controls. |
The separate 90-day/30-day periods apply to originals in our private storage. Contact the Privacy Officer before submission if you do not wish to acknowledge the transfer notice; automated document review does not transmit images without that acknowledgment.
6. Your rights
You may at any time request to access, correct, or delete your personal information, or withdraw your consent. To do so, contact us at goodmorningdoctors@gmail.com. We will act on your request without undue delay. Withdrawing consent does not affect the lawfulness of processing before withdrawal; note that we cannot provide the consultation service without a way to respond to you.
7. Security
We limit access to personal information to staff who need it to handle your consultation or program application, use encrypted connections (HTTPS) for the website, and destroy information that is no longer needed.
8. Privacy officer
Privacy Officer, disposal officer / Representative (개인정보 보호책임자·파기 담당자 / 대표): Jeongjin Park (박정진)
Business Reg. No.: 769-86-02775
Address: 57 Sambong-ro, 801-ho (Hosu Building), Jongno-gu, Seoul, Republic of Korea
Email: goodmorningdoctors@gmail.com
If you believe your privacy rights have been infringed, you may also contact the Korea Personal Information Dispute Mediation Committee or the Privacy Call Center (privacy.go.kr, ☎ 118 in Korea).
9. Changes to this policy
If we change this policy, we will post the updated version on this page with a new effective date.