Privacy Policy
How ShinHQ handles information
This policy describes how ShinHQ processes information when you visit our website, send an enquiry, or use our medical-tourism marketplace.
Effective and last updated: September 3, 2026
Organization & scope
1. Who we are
ShinHQ operates a marketplace that connects prospective patients, medical clinics, and medical-tourism agencies. Our registered office is Seoul #106-208, B1F, 10 Gangnam-daero 51-gil, Seocho-gu, Seoul 06627, Republic of Korea. Questions or privacy requests can be sent to privacy@shinhq.com.
2. Scope and our role
This policy applies to ShinHQ websites, applications, booking and coordination services, communications, and related marketplace features. Depending on the service, ShinHQ may handle information for its own purposes or on behalf of a clinic or agency. A clinic remains responsible for its medical records and clinical decisions.
Information collection & use
3. Information we collect
ShinHQ may collect the following information while providing its services.
- Identity and contact details that you provide directly while using the services, including name, email address, phone number, country, language, and organization.
- Account, clinic, agency, credential, and representative information.
- Enquiry, consultation, booking, treatment-interest, travel, scheduling, document, and communication information that you choose to provide.
- Health or other sensitive information only when it is needed for a requested service and there is an appropriate legal basis or consent.
- Transaction metadata, invoices, commissions, refunds, and payment status. Payment-card details may be handled directly by payment providers.
- Technical and usage information such as IP address, approximate location, device, browser, pages viewed, referral source, and security events. On the production website, Google Analytics may use cookies or device identifiers to help us understand visits and successful enquiry submissions; we disable Google advertising signals and do not send enquiry-form contents to Analytics.
Information collected when registering for ShinHQ Platform with Kakao
ShinHQ Platform is an invitation-only service. Only users invited in advance by an organization administrator may register and access that organization.
When registering for ShinHQ Platform through Kakao Login, we collect and use the following information.
| Collection source | Item collected | Collection condition | Purpose of collection and use | Retention and use period |
|---|---|---|---|---|
| Received from Kakao during the Kakao Login process | Kakao Account phone number | Required | Confirm the invited user by comparing the phone number with the invitation phone number registered in advance by the organization administrator; approve registration and organization access; and manage organization membership information | Until withdrawal from ShinHQ Platform or achievement of the applicable purpose. If retention is required by applicable law, the information is retained for the legally required period. |
We compare the phone number registered by the organization administrator when inviting a user with the Kakao Account phone number that the invited user agrees to provide during Kakao Login. Registration and organization access are approved only when the two phone numbers match.
The Kakao Account phone number is required for registration. If you do not consent to providing it, or if the Kakao Account phone number cannot be verified, we cannot confirm that you are an invited user, so registration for ShinHQ Platform and organization access will be restricted.
We do not receive a name from Kakao or collect a name as a Kakao consent item.
The phone number received from Kakao is used only to confirm the invited user, approve registration, grant organization access, and manage organization membership information. It is not used for consultations, bookings, marketing, statutory identity verification, or real-name verification.
4. How we use information
- Respond to enquiries and provide, coordinate, and support marketplace services.
- Match users with clinics or agencies, manage consultations and bookings, and communicate status updates.
- Administer accounts, transactions, commissions, customer support, and service communications.
- Authenticate ShinHQ Platform users, match their Google, Kakao, or Naver identity to the correct account, match the recipient of a phone-addressed invitation, enforce product access, and protect account security.
- Operate, secure, troubleshoot, analyze, and improve our services.
- Comply with law, enforce agreements, prevent misuse, and protect users and the public.
5. Legal bases
We process information as necessary to provide requested services or perform a contract, with consent where required (including for sensitive information), to comply with legal obligations, and for legitimate interests such as security and service improvement where those interests are not overridden by individual rights.
Sharing, transfers & protection
6. How information is shared
- With the clinic, agency, patient, or authorized representative involved in an enquiry or booking.
- With hosting, email, communications, analytics (including Google Analytics on the production website), payment, translation, and professional-service providers under appropriate obligations.
- Google, Kakao, and Naver process authentication requests under their own terms; ShinHQ does not share marketplace or medical information with these providers through basic sign-in.
- With authorities or other parties when required by law, to protect rights or safety, or in connection with a corporate transaction.
- We do not sell personal information for money.
7. International transfers
Marketplace participants and service providers may be located in different countries. Where required, we use contractual or other recognized safeguards for international transfers.
8. Retention
We retain information only for as long as needed for the purposes described above, including service delivery, invitation matching, legal, accounting, dispute, and security requirements. Retention depends on the information and relationship. Basic Google, Kakao, or Naver identity information used for authentication, including a consented phone number supplied for phone-invitation matching, is retained with the ShinHQ Platform account until it is deleted or no longer needed for these purposes. Enquiries submitted through this website are delivered to the relevant ShinHQ team mailbox; this website does not create a separate lead database record.
9. Security
We use organizational and technical safeguards appropriate to the nature of the information. No transmission or storage method is completely secure, and we cannot guarantee absolute security.
Rights, children & policy administration
10. Your choices and rights
Depending on your location, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent without affecting earlier processing. You may also complain to a competent privacy authority. Contact privacy@shinhq.com to make a request; we may need to verify your identity.
11. Children
Our services are not directed to children acting without a parent, guardian, or other legally authorized representative. Do not submit a child’s information unless you have authority and the submission is necessary for the requested service.
12. Third-party services
Clinics, agencies, payment providers, and linked services may apply their own privacy policies. ShinHQ is not responsible for their independent practices.
13. Changes and contact
We may update this policy as our services or legal obligations change. We will post the revised version with a new effective date. Contact privacy@shinhq.com or write to our registered office with questions.