Privacy Policy
Sway values your personal information and complies with relevant laws and regulations.
Effective Date: January 1, 2026 | Last Modified: February 1, 2026
Secure Storage
Personal information is securely stored using encryption technology.
Transparent Processing
We clearly inform you of the purpose of collecting and using personal information.
Rights Guaranteed
We guarantee your right to access, correct, and delete personal information.
Safe Disposal
We safely dispose of information after the retention period expires.
Table of Contents
SmartBeauty Korea Inc. (the "Company") establishes and discloses the following privacy policy to protect users' personal information in accordance with the Personal Information Protection Act and related laws, and to handle related complaints promptly and smoothly.
1. Items and Methods of Personal Information Collection
A. Personal Information Items Collected
Required Items
- Sign-up: Email, password, name (nickname)
- Identity verification: Name, date of birth, gender, mobile phone number, CI/DI
- Payment: Credit card information, account information, payment records
Optional Items
- Profile information: Profile photo, areas of interest in procedures
- Marketing information: Marketing consent status
Automatically Collected Items
- Service usage records, access logs, access IP, cookies
- Device information (device ID, OS version, app version)
B. Collection Methods
- Direct input by users during sign-up and service use
- Collection during customer service consultation (phone, email, chat)
- Automatically generated and collected during service use
- Received and collected from partners
2. Purpose of Collection and Use of Personal Information
The Company processes personal information for the following purposes.
Member Management
Member registration, identity verification, member identification, prevention of fraudulent use, confirmation of registration intent, age verification, record keeping for dispute resolution
Service Provision
Hospital information provision, reservation service, review service, product purchase and delivery, accommodation reservation, community service, content provision
Marketing and Advertising
Event and promotion notifications, personalized advertising, service usage analysis and statistics
Service Improvement
New service development, existing service improvement, user satisfaction surveys
3. Retention and Use Period of Personal Information
The Company processes and retains personal information within the personal information retention and use period prescribed by law or agreed upon when collecting personal information from the data subject.
| Retained Information | Retention Period | Legal Basis |
|---|---|---|
| Member Information | Until membership withdrawal | - |
| Contract or subscription withdrawal records | 5 years | E-Commerce Act |
| Payment and goods supply records | 5 years | E-Commerce Act |
| Consumer complaint or dispute handling records | 3 years | E-Commerce Act |
| Website visit records | 3 months | Telecommunications Privacy Act |
4. Provision of Personal Information to Third Parties
In principle, the Company does not provide users' personal information to external parties. However, exceptions are made in the following cases.
- When the user has given prior consent
- When required by law or when there is a request from an investigative agency in accordance with the procedures and methods prescribed by law for investigation purposes
Third Party Provision Status
| Recipient | Purpose | Items Provided |
|---|---|---|
| Partner Hospitals | Reservation service provision | Name, contact information, reservation details |
| Delivery Companies | Product delivery | Name, contact information, delivery address |
5. Outsourcing of Personal Information Processing
The Company outsources personal information processing as follows for service improvement.
| Outsourcing Company | Outsourced Tasks |
|---|---|
| AWS (Amazon Web Services) | Cloud server operation |
| Kakao Corp. | KakaoTalk notification delivery |
| NHN Corp. | SMS/Email delivery |
| Toss Payments Corp. | Payment processing |
6. User Rights and How to Exercise Them
Users can exercise the following rights as data subjects.
- Right to Access Personal Information: You can view the status of your personal information processing.
- Right to Correct/Delete Personal Information: You can request correction or deletion of inaccurate personal information.
- Right to Suspend Personal Information Processing: You can request suspension of personal information processing.
- Right to Withdraw Consent: You can withdraw consent to the collection and use of personal information.
You can exercise these rights through the settings menu in the service or the customer center (1588-0000, cs@sway.kr).
7. Procedures and Methods for Destruction of Personal Information
When personal information becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose, the Company destroys the personal information without delay.
Destruction Procedure
Unnecessary personal information is moved to a separate DB and destroyed after a certain period of storage according to internal policies and related laws.
Destruction Method
Electronic files: Permanently deleted in a way that cannot be recovered
Paper documents: Shredded or incinerated
8. Technical Measures for Personal Information Protection
The Company takes the following technical measures to safely manage users' personal information.
- Encryption of personal information: Important information such as passwords is encrypted and stored
- Measures against hacking: Antivirus program operation, intrusion prevention system operation, access control
- Restriction of personal information access: Minimization of personal information processing staff and training
- Access record retention: Retention of personal information processing system access records and prevention of tampering
9. Cookie Operation and Rejection
The Company uses cookies to provide customized services to users.
Purpose of Cookie Use
Maintaining login information, providing customized services, visit and usage analysis
How to Reject Cookie Settings
You can choose whether to allow cookies in your web browser settings. However, if you refuse to store cookies, you may have difficulty using some services that require login.
10. Personal Information Protection Officer
The Company designates a personal information protection officer as follows to oversee personal information processing and handle user complaints and damage relief related to personal information processing.
Personal Information Protection Officer
- Name: Kim Gaein
- Position: Privacy Protection Team Leader
- Contact: privacy@sway.kr
Personal Information Protection Department
- Department: Privacy Protection Team
- Phone: 02-1234-5678
- Email: privacy@sway.kr
If you need to report or consult about personal information infringement, please contact the following organizations.
- Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)
- Supreme Prosecutors' Office Cyber Crime Investigation Unit (www.spo.go.kr / 02-3480-3573)
- National Police Agency Cyber Safety Bureau (cyberbureau.police.go.kr / 182)
11. Changes to Privacy Policy
This privacy policy will be notified through notices 7 days before the effective date of changes when content is added, deleted, or modified due to changes in laws, policies, or security technology. This policy is effective from January 1, 2026.
Addendum
This Privacy Policy is effective from January 1, 2026.