Privacy Policy

Effective Date: January 1, 2026  |  Last Updated: June 2026

K-Medical Tours, operated by Jungil Tour Co., Ltd. (주)정일투어 ("we", "our", "us"), is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use kmeditours.net.

1. Information We Collect

• Basic personal data: Name, email address, phone/WhatsApp number, nationality, and details submitted via inquiry or consultation forms.
• Sensitive medical information: Health status, past medical history, surgical history, current medications, and allergies — collected only when voluntarily provided for the purpose of arranging appropriate medical services.
• Identification documents: Passport copies or national ID, collected only when required to facilitate medical appointments or travel bookings.
• Usage data: Pages visited, browser type, IP address, and referral source (via Google Analytics).
• Session data: Cart items stored temporarily in your browser session (no account required).

2. Sensitive Medical Information

We treat medical information as highly sensitive data. It is:

• Collected only with your explicit consent and solely for arranging your requested medical services.
• Shared exclusively with the specific partner clinic or hospital providing your treatment.
• Never used for marketing, profiling, or any purpose beyond direct service coordination.
• Stored in encrypted form and permanently deleted within 2 years of your last interaction, or upon request.

3. How We Use Your Information

• To respond to consultation and inquiry requests.
• To arrange medical appointments, transportation, and accommodation.
• To send service information and personalized medical tour proposals.
• To improve our website and user experience.
• To communicate via email or WhatsApp as requested.

4. Third-Party Data Sharing

We do not sell or rent your personal information. We share data only as follows:

• Partner hospitals & clinics: Medical information and basic personal data shared only with the specific provider(s) delivering your treatment. Each partner is bound by confidentiality obligations and Korean medical privacy law.
• Interpreters: Name and appointment details shared to facilitate in-clinic interpretation. No medical history is shared without your consent.
• Transportation & accommodation providers: Name and contact details only, as required to complete bookings.
• Technology service providers: Email delivery and analytics tools, operating under strict data processing agreements.

All third parties are required to handle your data in compliance with applicable privacy laws and are prohibited from using it for any other purpose.

5. Identification Document Handling

Passport copies or equivalent identification documents:

• Are collected only when strictly required (e.g., hospital registration, visa-required bookings).
• Are stored with AES-256 encryption.
• Are shared only with the specific institution requiring them.
• Are permanently and securely deleted within 30 days of your service completion.

6. International Data Transfers & Global Compliance

Our servers are located in South Korea. If you access our services from the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws, please note:

• GDPR (EU/UK users): By submitting your information, you consent to the transfer and processing of your data in South Korea. We apply data protection standards consistent with GDPR principles, including lawful basis, data minimization, and your right to erasure.
• Other jurisdictions: We comply with applicable local laws to the extent required for international data transfers.
• You may withdraw consent for international data transfer at any time; however, this may limit our ability to provide services.

7. Cookies & Analytics

We use cookies to maintain session data (e.g., your cart). Google Analytics is used to understand visitor behavior anonymously. You may disable cookies in your browser settings at any time.

8. Data Retention & Deletion

• General inquiry/consultation data: retained up to 2 years, then securely deleted.
• Medical sensitive information: retained only for the duration of active service coordination, then deleted.
• Identification documents: deleted within 30 days of service completion.
• You may request immediate deletion at any time.

9. Your Rights

Regardless of your location, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion ("right to be forgotten").
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority (EU users: your national DPA).

To exercise these rights, contact us at thisiskoreacc@gmail.com.

10. Security

We use SSL/TLS encryption for all data in transit, AES-256 encryption for sensitive data at rest, and access controls limiting data to authorized personnel only.

11. Changes to This Policy

We may update this policy periodically. The updated version will be posted on this page with a revised date. Continued use of our site constitutes acceptance of the updated policy.

12. Contact Us

Jungil Tour Co., Ltd. (주)정일투어 / K-Medical Tours  |  thisiskoreacc@gmail.com  |  WhatsApp: +82 10-8275-7750