Effective: October 11, 2026 · Website: thegoodmorningdc.kr
1. Controller and contact
The controller is The Good Morning Dental Clinic. Its existing official website identifies Kang Jong-seung as the business representative, registration number 204-96-61655. This business role is distinct from the clinical profile of Dr. Kang Do-wook.
For privacy enquiries, access, correction, deletion, suspension or withdrawal of consent, contact 02-969-3776 or the clinic reception at 2F, 123 Wangsan-ro, Dongdaemun-gu, Seoul. You may also request connection to the person responsible for privacy through this contact.
2. Information, purposes and retention
Online submissions are processed with your collection-and-use consent. Patient registration is not required to browse public pages.
Job applications: name, email or telephone number and desired role are required to review and respond to applications. Vacancy, message and PDF resume are optional. Submission language, consent version and submission time are also recorded. Retention is 90 days from submission.
Visit and language-support requests: name, email or telephone number, preferred visit date and required language are mandatory to check availability and respond. The message is optional. Submission language, consent version and time are recorded. Retention is 30 days from submission.
Do not submit diagnoses, medicines, resident registration numbers, passport numbers, identity documents or health information in forms or resumes. You may refuse or withdraw consent; online submission will then be unavailable, but telephone enquiries remain available. Children under 14 should contact the clinic by telephone with a guardian instead of using these forms.
3. Expiry and deletion
When retention expires, administrator access to submissions and attachment downloads is immediately blocked. Expired records and files are deleted on subsequent submission or administrator inbox requests. Physical deletion may be delayed when there are no requests, but expired information remains inaccessible. Electronic records and stored attachments are erased.
Identity or authorised representation may be checked when handling deletion or withdrawal requests. If legislation requires separate retention, the basis and period will be explained and unrelated use restricted. Clinical medical records are separate from website submissions.
4. Administrator security and connection data
Administrator login uses an HttpOnly, SameSite session cookie (gm_session), expiring after eight hours. Hashed identifiers for login rate limits are cleaned on a 15-minute basis; hourly submission rate-limit hashes are deleted on the next relevant request after expiry. Administrator accounts, permissions and change histories support operation and access control.
Cloudflare may process IP addresses, request times, browser and technical request data to deliver and protect the site. Application error logs do not include submitted form contents, passwords or tokens.
5. Optional analytics and browser storage
Contact-button and performance analytics are currently disabled. If enabled, aggregate daily public-path counts of phone, booking and Kakao clicks, related-treatment navigation, submission success and LCP/INP/CLS performance bands are retained for up to 180 days. No identifying analytics cookies, search terms, form contents, raw performance values or DOM elements are collected. DNT/GPC preferences are respected. This notice will be updated if settings change.
The browser may store display preferences such as motion and video playback settings, which you can remove in browser settings. Symptom-guide selections are not stored on the server.
6. Processors, external services and overseas processing
Cloudflare, Inc. supplies the technical infrastructure: Pages/Workers for delivery and security, D1 for submission and operational data, and R2 for attachments. Cloudflare is based in the United States and uses global infrastructure, so connection data and submissions may be processed or stored outside Korea. Data is transmitted over an encrypted network when visiting or submitting. Submission purposes and retention are described above.
Cloudflare processing information and contact details are available in the policy linked below. If you do not wish to use online submission involving overseas processing, do not submit the form and contact the clinic by telephone.
Submissions are not shared for advertising. They are not automatically sent to outside interpreters, and Naver bookings or Talk conversations are not imported into this administrator system. Automated email notifications are not connected.
Google Fonts may receive connection data when fonts load; YouTube and Google Maps may receive it when you choose playback or map display. Naver booking, maps and Talk, Kakao and official social channels are external services governed by their own policies after navigation.
7. Safeguards and remedies
Safeguards include HTTPS, role-based access, private attachments, session expiry and submission retention limits. For privacy complaints contact the Korea Privacy Infringement Report Center (118, privacy.kisa.or.kr); for mediation contact the Personal Information Dispute Mediation Committee (1833-6972, kopico.go.kr).
8. Updates
If information collected, purposes, retention, processors or external services change, this page and its effective date will be updated, with separate notice where additional consent is required.