WayB EVENT WayB Clinic Events

Privacy Policy WayB Clinic (the “Clinic”) values your privacy and complies with Korea’s Personal Information Protection Act. This policy explains how your personal information is collected, used, protected, and managed. 1. Information Collected and Collection Methods 2. Purpose of Collection and Use 3. Retention Period 4. Disposal Procedures and Methods 5. Disclosure and Sharing 6. Processing by Service Providers 7. Rights of Users and Legal Representatives 8. Withdrawal of Consent / Account Closure 9. Cookies and Other Automatic Collection Tools 10. Privacy Officers 11. Security Measures 12. Notice of Policy Changes 1. Information Collected and Collection Methods The Clinic collects only the minimum personal information required to provide its services. Optional information, such as marketing email preferences, does not affect access to the service. A. Medical information: name, date of birth, address, contact details, and medical records ※ Certain identification and medical information must be retained under the Medical Service Act and does not require separate consent. B. Information collected for website registration - Required: name, user ID, password, address, contact details, and email address - Optional: date of birth, SMS and email preferences, and areas of interest - Information generated automatically: service usage history, access logs, cookies, and IP address C. Collection methods: website, written forms, fax, telephone, consultation boards, and email 2. Purpose of Collection and Use The Clinic uses collected information only for the purposes stated below. Prior consent will be obtained if the purpose changes. A. Medical information: medical services for diagnosis and treatment, and administrative services such as billing, payment, and refunds B. Website member information - Required information: online appointment booking and lookup, member services, and posts on online boards such as private consultations and reviews - Optional information: clinic news and health information, surveys, troubleshooting, personalized services, service statistics, and notices about new services The Clinic does not collect sensitive information that may infringe fundamental rights and collects additional information only when voluntarily provided. 3. Retention Period Personal information is deleted without delay once its collection or use purpose has been fulfilled, unless retention is required by law. A. Medical information: retained according to the medical-record retention periods specified by the Medical Service Act B. Website member information: retained until account closure or membership termination - Consumer complaints or dispute records: 3 years - Credit information collection, processing, and use records: 3 years - Identity verification records: 6 months - Website visit records: 3 months 4. Disposal Procedures and Methods Personal information is destroyed promptly after its purpose has been fulfilled. A. Procedure: information submitted for registration or other services is destroyed once its purpose has been completed. B. Method: electronic files are permanently deleted using methods that prevent recovery. Printed records are shredded or incinerated. 5. Disclosure and Sharing The Clinic does not use or disclose personal information beyond the stated purposes without consent, except where required by law. Exceptions may include: - Submitting medical records to the Health Insurance Review & Assessment Service for insurance claims - Providing anonymized information for statistics or academic research - Responding to lawful requests from investigative authorities 6. Processing by Service Providers The Clinic may entrust personal information processing to the provider below and requires appropriate safeguards under applicable law. Service provider: YourDev Services: website maintenance, access-log management, administration, and member management Information processed: name, address, and telephone number Retention period: until the service agreement ends 7. Rights of Users and Legal Representatives Registration by children under 14 uses a separate, easy-to-understand form and requires consent from a legal representative. The Clinic collects only the representative’s minimum information needed to obtain that consent. A legal representative may request access to, correction of, or deletion of a child’s personal information through the account settings or by contacting the Privacy Officer in writing, by telephone, or by fax. When correction is requested, the information will not be used or disclosed until the correction is completed. The Clinic does not share a child’s information with third parties. Information that must be retained by law cannot be corrected or deleted during the required retention period. 8. Withdrawal of Consent / Account Closure You may withdraw consent to the collection, use, or disclosure of personal information at any time. You may request account closure through My Page on the Clinic’s website. The request will be reviewed and completed within 10 days. You may also contact the Privacy Officer in writing, by telephone, or by fax for prompt action, including deletion where applicable. 9. Cookies and Other Automatic Collection Tools The Clinic uses cookies, which are small text files stored on your device by the website server. You may allow all cookies, receive a notice whenever a cookie is stored, or block all cookies through your browser settings. Some services may not function properly if cookies are blocked. 10. Privacy Officers The Clinic has appointed the following Privacy Officers to protect personal information and handle privacy-related concerns. Names: Haebeom Koo and Jisu Lee Title: Medical Directors Organization: WayB Clinic Contact: You may report privacy-related concerns arising from use of the Clinic’s services. The Clinic will respond promptly. For additional assistance, contact the relevant Korean privacy or law-enforcement authorities: ･ Personal Dispute Mediation Committee (http://www.1336.or.kr / 1336) ･ Privacy Seal Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533–4) ･ Supreme Prosecutors’ Office Cyber Crime Investigation Unit (http://www.spo.go.kr / (02) 3480-3573) ･ National Police Agency Cyber Terror Response Center (http://www.ctrc.go.kr / (02) 392-0330) 11. Security Measures The Clinic takes technical and administrative measures to prevent personal information from being lost, stolen, leaked, altered, or damaged. A. Password protection: passwords are encrypted and may be accessed only by the user. Identity verification is required before requested changes are made. B. Protection against hacking and malware: the Clinic uses backups, current security software, encryption, secure communications, and access-control systems to protect personal information. C. Limited staff access and training: access is restricted to authorized staff, credentials are updated regularly, and privacy training is provided. The Clinic is not responsible for incidents caused by a user’s negligence or circumstances beyond the Clinic’s reasonable control. 12. Notice of Policy Changes This policy was revised on the date below. Any additions, deletions, or revisions due to changes in law, policy, or security technology will be announced on the Clinic’s website at least seven days before taking effect. ･ Effective date: February 10, 2026