This policy explains how 주식회사 시월기획, operating GREY Medical Concierge Korea and GREY Booking, handles personal information submitted through this website.
1. Who is responsible
Data controller: 주식회사 시월기획
Service: GREY Medical Concierge Korea / GREY Booking
Privacy contact: [email protected]
Office: 193 Hannuri-daero, Sejong-si 30064, Republic of Korea
2. Information we collect
Initial inquiry: name, reachable contact details, treatment or skin concern, preferred website language, source page, submission time and consent records.
Booking stage: preferred date and time, nationality, party size and other information a contracted clinic reasonably requires. Passport information is not requested in the initial form and is collected later only when necessary and explained in advance.
3. Why we use it
To respond to an inquiry, understand the requested treatment or concern, coordinate interpretation and appointment options, communicate booking details and help relay follow-up questions to the treating clinic.
4. Retention
GREY retains inquiry and coordination records for one year from the last consultation, then deletes or anonymises them unless a longer period is required by law or is necessary to handle an unresolved dispute.
5. Optional sharing with a contracted clinic
If you separately agree and ask GREY to proceed with a booking, GREY may provide the minimum necessary information to the selected contracted clinic: name, contact details, treatment interest, preferred schedule and booking-related information.
The clinic uses it to check availability, prepare the appointment, provide medical care and respond to follow-up questions. If you do not give optional consent, your initial inquiry can still be submitted; GREY will ask again before any information is sent to a clinic.
6. Storage and access
Website inquiries are stored in a restricted Google Sheet used for GREY operations. Access is limited to authorised GREY personnel. GREY applies reasonable access controls and does not sell personal information.
7. Your choices and rights
You may ask to access, correct or delete your information, or withdraw consent, by emailing [email protected]. Withdrawal does not affect processing that was lawful before the request.
8. Anonymous website analytics
GREY counts contact-button clicks as basic anonymous service conversions even if analytics is declined. Each click uses fresh, non-persistent identifiers and records only the page, channel and coarse country code; it cannot confirm whether a message was sent or read, and it never stores message content or a raw IP address.
If you allow analytics, GREY also stores an anonymous visitor ID and session ID, pages viewed, active time, referral host and campaign parameters. Analytics records are restricted to authorised GREY personnel and are automatically deleted after 180 days.
Internal enquiry counting
If you allow website analytics, GREY uses a random browser identifier to count repeated enquiry forms and Messenger contact actions from that browser once in the selected reporting period. We link that identifier to an enquiry receipt in restricted GREY systems. Only authorised GREY personnel can access the link; it is not sent to Google Ads, other advertising platforms or the enquiry delivery sheet.
The link is used for up to 180 days. Expired links are excluded from statistics and removed during routine website processing; the original enquiry record follows the separate retention period above. Declining or withdrawing analytics consent stops new browser links and does not prevent you from submitting an enquiry. You may request removal of an existing link through the privacy contact above.
This identifies a browser, not a verified person. Other devices, browsers or cleared storage can create separate identifiers, and people sharing a browser may share an identifier. Messenger clicks do not confirm that a conversation took place.
With your analytics consent, GREY uses Google Analytics 4 (GA4) to measure website visits, received enquiries and contact-channel actions. We send only limited metadata such as website language and Messenger channel. Names, contact details, dates of birth, enquiry text, receipt IDs, treatment interests, clinic names, detailed page addresses and page titles are not included in our GA4 events. Google processes this analytics data. Declining or withdrawing analytics consent stops new GA4 measurement and does not prevent an enquiry. You can change your choice in the website's privacy settings.
9. Changes
If this policy changes materially, the revised effective date and content will be published on this page.