Cell K-Bio Co., Ltd. (“we”) operates cellkbio.kr (Medibridge Korea) and handles personal information in accordance with the Personal Information Protection Act of Korea. This English text is provided for convenience; if there is any difference, the Korean version prevails.
| Item | Details |
|---|---|
| Company | Cell K-Bio Co., Ltd. (주식회사 셀케이바이오) |
| Representative | Kim Cheol-young |
| Business registration no. | 512-81-25823 |
| Address | Room 3018, 3F, 37 Wolmyeong-ro, Heungdeok-gu, Cheongju-si, Chungcheongbuk-do, Republic of Korea |
| Privacy officer | Kim Cheol-young (CEO) · cellkbiocom@gmail.com |
| Purpose | Data | Use | Retention |
|---|---|---|---|
| Patient consultation request | Name or nickname, email, country of residence, language, specialty of interest, messenger ID (optional), question (optional), IP address, device info, consent time | Receiving the request, guiding you to a partner agent, confirmation email, abuse prevention (rate limits) | 1 year after the consultation is arranged |
| Partnership inquiry | Organization name, contact name, email, messenger IDs (optional), inquiry details (country, specialty, start timing), language, IP address, device info, consent time | Handling and answering the inquiry, confirmation email, abuse prevention (rate limits) | 1 year after the inquiry is handled |
| Membership (individual / agent / hospital) | Email, name, (organization for agents and hospitals), country, language, marketing consent and time, IP address, device info, sign-up and login times, verification-code records (hashed) | Identification and login (emailed code), providing the service, reviewing organization members and sending approval emails, marketing information (if you consented) | Until you withdraw. Information that must be kept by law or as contract evidence is kept separately |
| E-contract | Name, title, email, signature image, contract content (including entered organization details), signing time, IP address, device info, identity-verification (OTP) records | Concluding the contract, identity verification, evidence and dispute handling, sending the final copy | 5 years after the contract ends |
| Paper contract (signed on-site, scanned and registered) | Organization name, representative name and title, email (optional), contract date, scan of the signed and sealed contract, annexed documents (business registration, institution registrations), power of attorney and seal certificate if signed by an agent, name of the staff member who verified it and time of verification, record of staff attendance for on-site signing | Confirming and evidencing the contract, verifying the representative and authority, dispute handling, sending the completion notice | 5 years after the contract ends (the company keeps the original; the organization receives one copy) |
| Consultation chat (agents and hospitals) | Member details (organization, email), patient code, patient sex, age range and country, procedure of interest, consultation notes, messages and attached photos (may include health-related information), booking details (visit time, estimated fee, deposit amount and method), record of patient-consent confirmation, staff viewing log, IP address, device info | Connecting agents and hospitals for consultation and booking, staff mediation, quality control and dispute handling, preventing off-platform dealings, sending new-message and booking notification emails, translating messages the user asks to translate (only the requested message is sent to an external translation service in the United States and is not stored) | Messages and notes are deleted 1 year after the consultation closes (kept until resolved if a report or dispute is open). Booking and settlement records without health-related content are kept for the contract settlement period and the legally required period |
| Agent category information (agent members) | Category (registered / business partner / support assistant), business registration number (business partners), visa status (support assistants), work-permit status and related documents (as entered in the agreement) | Membership review, verifying the contracting party, checking permitted activities under immigration and other laws, assigning consultations and managing permissions | Until withdrawal or 5 years after the contract ends (contract and tax records follow the law). If no contract is concluded or it is discontinued, submitted documents and ID copies are destroyed or returned without delay |
| Hospital deposit account and payment information | Bank name, account number and holder in the hospital's (business) name, bankbook copy file, payment-link domains, approving staff member and time | Guiding deposit payment (the hospital receives deposits directly) and verifying accounts in advance to prevent impersonation and phishing | Until the hospital withdraws or the registration is cancelled |
| Admin login | Staff email, login time, IP address, device info | Admin authentication and audit trail | 1 year after collection |
| Partner agent listing (optional) | Only if the agent consents: organization name, countries, main specialties, languages | Showing the “Partner agents” section | Until consent is withdrawn or the partnership ends |
| Interpretation chat (optional) | Sentences you type for translation (may include health information) | Translating what you type | Not stored on this site’s servers after translation |
| Automatic collection | IP address, access time, requested URL (recorded by the hosting provider); chosen language (browser storage) | Site operation, security, remembering your language | According to the hosting provider’s policy |
We do not use advertising or analytics cookies or third-party analytics tools. Browser storage holds only your chosen language, your member login state (expires after 12 hours; removed on log-out) and the admin login state.
| Processor | Task | Location | Data |
|---|---|---|---|
| Supabase Inc. | Database and server functions (inquiries, contracts, verification records) | Data stored in Seoul, Korea; company headquartered in the US | Inquiry, e-contract and verification records |
| Resend, Inc. | Sending OTP, confirmation, notification and final-copy emails | United States | Recipient email, email content |
| Netlify, Inc. | Website hosting and access logs | United States (global servers) | Access logs such as IP address |
| Anthropic PBC | Translation for interpretation chat (optional) | United States | Sentences you type for translation |
| Google LLC | Identity check when you choose Google sign-in / sign-up (optional) | United States | Google account email and name (if you choose Google sign-in) |
Under Article 28-8 of the Personal Information Protection Act, personal information is transferred abroad as follows when you use the relevant feature. You may refuse, but then you cannot use that feature (partnership inquiry, e-contract, interpretation chat).
| Recipient | Country | Items | When / how | Purpose | Retention |
|---|---|---|---|---|---|
| Supabase Inc. | United States (stored in Seoul region; headquarters may access) | Inquiry, e-contract, verification records | On use, over encrypted connection | Storage and server operation | Per section 2 |
| Resend, Inc. | United States | Recipient email, email content | When emails are sent, over encrypted connection | Sending OTP, confirmation and final-copy emails | Per the provider’s policy |
| Netlify, Inc. | United States etc. | Access logs such as IP address | Automatically when you visit | Hosting and security | Per the provider’s policy |
| Anthropic PBC | United States | Sentences typed for translation (optional) | On each translation request, over encrypted connection | Translation | Not stored on this site after translation |
| Google LLC | United States | Google account email and name (optional) | When you use Google sign-in, over encrypted connection | Identity check via your Google account | Member data per section 2; on Google’s side per Google’s policy |
To refuse the transfer or ask about alternatives, email our privacy officer (section 1).
We do not collect health information, passport numbers or resident registration numbers through inquiries or e-contracts and ask you not to enter them. The interpretation chat may contain health information, so we notify you that it is sent to an external translation service (Anthropic, US) and ask for separate consent first. Input that looks like a passport, card or ID number is blocked.
We delete personal information without delay when the retention period ends or the purpose is achieved, unless the law requires retention (kept separately until then). Electronic files are deleted irrecoverably; paper is shredded or burned. Expired information is reviewed and deleted periodically by the administrator.
You may request access, correction, deletion, suspension of processing, or withdraw consent at any time by emailing our privacy officer; we respond without delay. A representative needs a power of attorney. Information that the law requires us to keep, and evidence of concluded contracts during the retention period, may not be deleted on request.
Privacy officer: Kim Cheol-young (CEO), cellkbiocom@gmail.com. You may also contact the Personal Information Infringement Report Center (118, privacy.kisa.or.kr) or the Personal Information Dispute Mediation Committee (1833-6972, kopico.go.kr).
Effective 27 Oct 2026. We announce changes on the website 7 days before they take effect (30 days for material changes to your rights).