Privacy Policy

FTH Co., Ltd. (the "Company") complies with the Personal Information Protection Act of Korea and related laws, and processes users’ personal information as set out below.

The Company is not a medical institution and does not provide diagnosis, treatment or medical consultation, or refer or broker medical institutions.

A. General inquiries (website inquiry form)

Required: name, email, inquiry type, inquiry details

Optional: phone number

General inquiries do not collect sensitive information such as diagnosis, stage, test results or medical records, and users are asked not to include it.

B. Medical document translation and delivery service (only with the patient’s written consent)

Required: patient’s name, date of birth, phone number, email, name of the Japanese medical institution to receive the documents

Sensitive information: medical documents submitted by the patient, such as medical certificates, test results, imaging reports and medical records

If a legal representative applies: representative’s name, contact details, relationship to the patient and documents confirming it

C. Automatically collected information

Access logs, IP address, cookies and other information generated while using the service

A. General inquiries: reviewing and responding to inquiries

B. Translation and delivery service: translating medical documents submitted by the patient, delivering them to the Japanese medical institution designated by the patient, and translating and delivering that institution’s reply to the patient

C. Automatically collected information: service stability and prevention of misuse

Under Article 23 of the Personal Information Protection Act, the Company processes health information (sensitive information) only with the data subject’s separate written consent.

Sensitive information is used only for translation and delivery, and is not used for any other purpose or for marketing. You have the right to refuse consent; if you refuse, you cannot use the translation and delivery service but can still make general inquiries.

Personal information is retained for five years from the date of collection and destroyed without delay thereafter.

Even within the retention period, it is destroyed without delay if the data subject requests deletion or the purpose of processing has been achieved.

Where retention is required by law, it is kept for the period set by that law.

Electronic files are permanently deleted using methods that prevent recovery, and paper documents are shredded or incinerated. Personal information is destroyed after confirmation by the Chief Privacy Officer.

In principle, the Company does not provide users’ personal information to third parties. It is provided as follows only when the user applies for the translation and delivery service and gives separate written consent.

Recipient: the Japanese medical institution designated by the data subject

Purpose: delivering the medical documents and inquiry requested by the data subject

Items: patient’s name, date of birth, submitted medical documents and their translations

Recipient’s retention period: according to that institution’s privacy policy and Japanese law

You have the right to refuse consent; if you refuse, you cannot use the translation and delivery service.

When the translation and delivery service is used, personal information is transferred abroad, and the Company obtains separate consent under Article 28-8 of the Personal Information Protection Act.

Recipient: the Japanese medical institution designated by the data subject

Country: Japan

Timing and method: when the service proceeds after consent, [transmission method such as encrypted email to be confirmed]

Items: same as section 6

Purpose and retention period: same as section 6

You have the right to refuse consent; if you refuse, you cannot use the translation and delivery service.

The Company does not currently outsource the processing of personal information.

If processing is outsourced in the future, the contractor and the outsourced work will be disclosed in advance in this policy. Outsourcing contracts will specify compliance with data protection laws, restrictions on sub-outsourcing and security measures, and the Company will supervise the contractor.

The Company takes the following measures to protect personal information, especially sensitive information.

Administrative: internal management plan, minimising staff with access, regular training

Technical: access control, encryption of sensitive information and transmissions, retention of access logs

Physical: access control for storage locations and devices

You may at any time request access to, correction, deletion or suspension of processing of your personal information, or withdraw consent, by writing, phone or email to the Chief Privacy Officer below. The Company will act within 10 days of the request and notify you of the result.

You may also exercise your rights through a legal representative or an authorised person.

Personal information of children under 14 is processed only with the consent of a legal representative, and the translation and delivery service must be applied for by the legal representative.

The Company may use cookies for convenience. You can refuse cookies in your browser settings; some features may then be limited.

Name/Title: Kim Myeong-hoe / CEO

Email: 1004@109.co.kr

Phone: +82-2-517-5117

For reports or consultation regarding personal information infringement, you may contact:

Personal Information Dispute Mediation Committee: 1833-6972 (Korea), www.kopico.go.kr

Personal Information Infringement Report Center: 118 (Korea), privacy.kisa.or.kr

This policy applies from the effective date. Any additions, deletions or amendments will be announced on the website from 7 days before they take effect.