Privacy Policy

1. Scope of Application

This Policy applies to the personal information of Seolle members, prospective users, and collaboration partners (including bloggers, photographers, and influencers), as well as personal information collected by us through the Seolle website (www.seolletrip.com) and mobile app.

When you navigate to a domain or app that does not belong to Seolle, we are unable to maintain the security of your personal information; we therefore recommend that you review the privacy policy of that service before proceeding. Where you purchase products listed or sold by a Supplier, or provide information directly to a Supplier, the processing of that information is governed by the Supplier's own privacy practices.

2. How We Collect Information and What We Collect

We obtain information that you directly enter or provide, information received through third-party service providers, and information automatically collected through your online activity.

• Member data: identifying information, account credentials and password, and frequently used user information.
• Order data: information about the person placing the order, recipients, users, and contact details (e.g., passport name and number in English for overseas itineraries); payment and financial information (card numbers, expiry dates, and security codes are processed by our payment provider — we do not store full card numbers); and documents supporting refund requests (e.g., medical certificates or family relationship certificates).
• Sensitive information: health status, pre-existing conditions, allergies, and similar data for special orders (e.g., dermatology procedures or diving experiences) — collected and processed with separate consent in accordance with applicable law.
• Collaboration partner, event, customer inquiry, and review data: identifying information, contact details, credential documents, and review content (including name and photographs). Phone consultations may be recorded.
• Third-party account login (Kakao, Naver, Facebook, LINE, Google, Apple, WeChat, etc.): name, profile image, email address, UID, and other information you have made available through those platforms.
• Automatically collected data: IP address, device information and identifiers, page view and click history, traffic data, and inferred location information (via cookies and similar technologies). For more details, please see Section 9 of this Policy.

3. Purposes and Legal Bases for Processing

• Member management: managing member information following registration, and identity verification — based on performance of the contract (Terms of Service).
• Order management: processing bookings, payments, delivery, confirmation notices, cancellations, and refunds — based on performance of the contract, pre-contractual steps taken at your request, our legitimate interests, and/or your consent.
• Collaboration partner, personalised itinerary, and event management: eligibility review, communication, remuneration, product recommendations, and prize notifications.
• Customer service: handling enquiries and complaints, and using communication records (emails, recordings) as evidence in the event of a dispute.
• Product marketing: where consent has been obtained, informing you of new products, discounts, and news, and serving advertisements on third-party platforms. We do not use your information for direct marketing purposes without consent to the extent required by applicable law.
• Research, statistics, and analysis: improving services and products, evaluating interest in products, and making recommendations — based on our legitimate interests, consent, and/or the contract.
• Exercising rights and fulfilling legal obligations: responding to disputes, breaches of contract, infringements, or criminal conduct, and complying with statutory obligations.
• Use of artificial intelligence: improving service quality through algorithms and machine learning (including generative AI) for chatbots, personalised search, and similar features. Decisions with legal effect are not made based solely on automated processing.

4. Third-Party Recipients

The following categories of third parties may receive the personal information necessary for their respective purposes.

• Cloud storage service providers (for storing personal information).
• Messaging and system providers (for facilitating communications).
• Payment processors and logistics providers (for completing transactions).
• Customer service support providers (for operational efficiency and quality improvement).
• Suppliers (for information necessary to establish, fulfil, or cancel orders, including medical certificates or family relationship certificates in the case of force majeure cancellations).
• Joint marketing partners (e.g., prize-winner data) and data analytics and advertising platforms (sharing cookie data and hashed information).

5. Storage and International Transfers

Seolle stores personal information on servers operated by trusted cloud storage service providers. Depending on the nature of the products you order, your data may be transferred to recipients in other countries or regions (e.g., local itinerary or ticketing Suppliers).

The laws of the jurisdiction where a recipient is located may differ from those of your jurisdiction; however, we will take reasonable measures to ensure that personal information is effectively protected. Where information collected under the GDPR or similar frameworks is transferred outside the EEA or your country of residence, and the receiving jurisdiction is not recognised as providing an equivalent level of protection, we will put in place appropriate safeguards recognised under applicable law, such as Standard Contractual Clauses (SCCs).

6. Retention Period

Seolle retains and uses personal information for as long as the purposes for which it was collected exist. Where you cease using the service or your membership is terminated or withdrawn, we may de-identify or anonymise the information and retain it in accordance with industry standard practices, unless applicable law requires otherwise. Where applicable law (such as the Act on Consumer Protection in Electronic Commerce) requires retention for a specified period, we will retain the information for that period.

7. Security Measures

• We apply administrative and technical safeguards including encryption of data in transit (HTTPS), access controls, and audit logging.
• We carefully select Suppliers and processing sub-contractors and oversee their personal information security through contracts and other means.
• However, no network or electronic storage environment is completely secure, and we cannot guarantee absolute security.

8. Your Rights

To the extent permitted by applicable law, you may exercise the following rights: access to and a copy of your information; correction or supplementation; objection to or restriction of processing; erasure; withdrawal of consent; opt-out from marketing; data portability; and the right not to be subject to decisions based solely on automated processing. You may access or update your information directly through your member account, submit a request to our customer support team, or lodge a complaint with your local supervisory authority.

9. Cookie Policy

We use cookies and similar technologies to collect information about website visitors for purposes such as maintaining login sessions, usage analytics, and measuring advertising effectiveness. You may disable cookies through your browser settings; however, some features may be limited as a result.

10. Personal Information of Minors

If you are a minor under the law of your country of residence, your parent or legal guardian must read and agree to this Policy, and you must complete registration and submit personal information under their supervision and with their consent. In most cases we are unable to identify whether information we collect belongs to a minor and will process it in accordance with Section 3. If a parent or legal guardian believes that a minor's information has been inadvertently collected, please contact us.

11. Messaging Platform Data (Meta/Instagram, etc.)

Seolle operates a unified inbox that enables partner Suppliers to manage customer conversations across multiple messaging platforms from a single interface. When a partner connects an account (such as Instagram, WhatsApp, Facebook Messenger, WeChat, LINE, KakaoTalk, Naver, or similar) and you send a message to that partner, we receive and process, via the official API of each platform, the message content (text and attached media), the platform-scoped sender identifier and public username, and the message timestamp and read/delivery status.

We use this data solely to deliver your messages to the partner's inbox, to enable the partner to reply, to provide translation, and to maintain conversation history. We do not use Meta/Instagram data for advertising purposes or sell it, and our use of data obtained through Meta platforms complies with Meta's Platform Terms and related policies.

Deletion: You may request deletion of your messaging data at any time. Please refer to 'Data Deletion Instructions' below or submit a request to medicaltrip.kr@gmail.com. We will delete the requested data within 30 days, except where retention is required by applicable law.

12. AI Skin Analysis and Facial Photos

We collect facial photos - taken with the in-app camera or selected by you - only when you use the AI skin analysis feature. The camera is not activated until you have signed in and completed a separate, explicit consent step. If you do not use this feature, no facial photo is collected.

Facial photos are transmitted to our AI processing provider to perform the analysis. The current provider is Anthropic, PBC (United States), which constitutes a transfer of personal data abroad. The item transferred is the facial photo, the purpose is skin condition analysis, and it is retained for the period required to perform the analysis.

Once the analysis is complete, the original facial photo is deleted from our storage and the database reference is removed. What we retain afterwards is the analysis output - per-area scores, skin type and skin age. Photos attached to a consultation request submitted to a partner clinic are retained while that clinic is handling the consultation.

Only if you submit a consultation request are the analysis results and your description of skin concerns provided to a partner clinic, and only to the extent you choose. If you use the analysis without requesting a consultation, no clinic can see it, and externally shared links never include the facial photo.

AI analysis results are reference information and do not replace medical diagnosis, prescription or treatment. Whether a treatment is suitable for you must be decided in consultation with the clinic's medical staff.

You may request deletion of this information by deleting your account in the app (My Page > Settings > Delete account) or by writing to medicaltrip.kr@gmail.com.

13. Product Analytics Tools

We use the product analytics tool PostHog (PostHog, Inc., United States) to improve the service. It collects interaction records such as page views and clicks, in-app search terms, device and browser information, approximate location inferred from the IP address, error and performance metrics, and an anonymous identifier.

PostHog session replay is disabled on the AI skin analysis screens and the chat screens.

We do not embed advertising tracking SDKs in the app, and we neither use analytics data for ad targeting nor sell it. For cookies and similar technologies, see Section 9.

14. Policy Updates and Contact

Seolle may update this Policy from time to time. In the event of a material change, we will provide advance notice through appropriate means (such as email, a pop-up notice, or an in-app push notification). If you do not agree to the updated Policy, please contact our customer support team immediately.