Hanme Lab Privacy Policy

Article 1. Scope of Application and Legal Effect

Hanme Lab is operated by ChouK CO., LTD., a company duly incorporated under the laws of Taiwan.

This Privacy Policy (the "Policy") applies to all users (the "Users") who access or use any website, membership program, reservation system, consulting service, digital content, mobile services, or any related or derivative services provided by Hanme Lab (the "Platform").

By registering, logging in, using any service of the Platform, or otherwise interacting with the Platform in any manner, the User is deemed to have read, understood, and agreed to be bound by this Policy.

Certain services of the Platform, including but not limited to cooperation and reservation coordination with clinics in South Korea, may be provided by affiliated entities or partner companies of the Platform in accordance with local laws.

Article 2. Legal Basis for Data Collection and Processing

The Platform collects, processes, and uses personal data based on one or more of the following lawful grounds:

1. Performance of contractual relationships between the User and the Platform
2. Responding to User requests or providing requested services
3. Compliance with applicable laws or regulatory requirements
4. Legitimate operational needs and lawful business interests of the Platform
5. Explicit or implicit consent given by the User

Article 3. Categories of Personal Data Collected

Depending on the nature of the services used, the Platform may collect personal data including, but not limited to:

1. Identification and Contact Information:

Name (including passport English name), date of birth, gender and nationality, email address, mobile phone number, LINE or other messaging service accounts

2. Identity Verification and Medical Aesthetic Service Data (collected only when necessary):

Passport number

3. Membership and Transaction Data:

Membership level and enrollment date, points, rewards, and referral records, order records, payment history, deposits, and refunds

4. Medical Aesthetic Service and Usage Records:

Treatment needs, preferences, and budget descriptions, reservation records and clinic-matching information, pre- and post-treatment feedback, case-sharing text or images (subject to separate and explicit authorization)

5. Technical and Device Information:

IP address, device type, browser type, and operating system, Cookies, logs, and usage behavior records (Users may disable cookies through browser settings; however, doing so may affect certain functionalities of the Platform.)

Article 4. Purposes of Data Use

Personal data may be used within a reasonable and necessary scope for:

1. Membership registration, account management, and identity verification
2. Medical aesthetic needs analysis, clinic recommendations, and reservation arrangements
3. Operation of membership programs, points, rewards, and referral mechanisms
4. Customer support, notifications, reminders, and service communications
5. System security maintenance, risk control, and service optimization
6. Accounting operations, legal compliance, and dispute resolution

Article 5. Cross-Border Data Transfer and International Processing

Users acknowledge that personal data may be transferred to, stored, or processed in Taiwan, South Korea, or other jurisdictions due to cross-border services.

The Platform will endeavor to ensure reasonable security standards; however, Users agree to bear risks arising from differences in legal protections across jurisdictions.

Article 6. Sharing of Personal Data with Third Parties

Personal data will not be sold or leased unless expressly consented by the User. Data may be shared when necessary with:

1. Partner clinics (for service fulfillment)
2. Third-party service providers such as payment processors, invoicing, cloud, AI, and verification services
3. Authorities when required by law

Article 7. Data Retention and Security Measures

Personal data will be retained only as long as necessary for stated purposes and protected through reasonable technical and organizational measures, including encryption and access control.

Retention periods may be extended when required by law, contractual obligations, service needs, or dispute resolution.

Article 8. User Rights

Users may request access, correction, suspension of processing, deletion of personal data, or withdrawal of consent through official customer service channels (https://page.line.me/hanmelab).

Article 9. Amendments

The Platform reserves the right to amend this Policy at any time. Continued use after publication constitutes acceptance.