Privacy Policy
Effective 10 September 2026
The Korea Ginseng & Herb Clinical Research Institute ('the institute') complies with the Personal Information Protection Act of the Republic of Korea and processes personal data as set out below.
1. Data collected and how
| Context | Items | Method |
|---|---|---|
| Research commission | Organisation, contact name, e-mail, telephone, content of the enquiry (test material, target function, budget, schedule) | Website request form, e-mail, telephone |
| General enquiry | Name, e-mail or telephone, content of the enquiry | E-mail, telephone |
| Collected automatically | IP address, time of access, browser information | Web server access logs |
The institute does not collect sensitive data such as beliefs, health or genetic information. Where a human trial or similar study is carried out, personal data of research participants are processed under a separate protocol and consent form approved by an Institutional Review Board and are not governed by this policy.
2. Purpose
- Receipt, assessment of and reply to a research commission
- Conclusion and performance of a research services agreement, and settlement of fees
- Response to general enquiries
- Stable operation of the website and prevention of misuse
3. Retention period
| Category | Retention |
|---|---|
| Research commission records | Three years after the consultation ends |
| Records where a contract was concluded | As required by law (five years for contract and payment records, and similar) |
| General enquiry records | One year after the enquiry is answered |
| Web server access logs | Three months |
Data are destroyed without delay once the retention period expires. Electronic files are deleted irrecoverably; printed material is shredded or incinerated.
4. Disclosure to third parties
The institute does not disclose personal data to third parties, except where:
- the data subject has consented in advance; or
- disclosure is required by law, or is requested by an investigating authority following the procedure prescribed by law.
5. Outsourcing of processing
The institute does not currently outsource any personal data processing. Should it do so, the processor and the scope of the work will be published in this policy and consent obtained where required.
6. Rights of the data subject
Data subjects may at any time exercise the following rights:
- access to their personal data
- correction of errors
- erasure
- suspension of processing
Requests may be made by e-mail or in writing to the data protection officer below, and are acted on without delay. They may also be made through a legal representative or an authorised agent.
7. Security measures
- Administrative — minimising the number of people with access; an internal management plan
- Technical — access control, encryption in transit (HTTPS), retention of access logs
- Physical — controlled access to where records are held
8. Cookies and automatic collection
This website uses no advertising cookies and no third-party analytics. Only the minimum information needed to use the site may be stored in the browser, and visitors may refuse this through their browser settings.
9. Data protection officer
| Item | Detail |
|---|---|
| Officer | Kwang Jo Lee, Director, KGHCRI |
| [email protected] | |
| Telephone | +82-70-4070-3369 |
| Address | Rm 101, 1F, Bldg A, 8-18 Jangmokdong-gil, Geumseong-myeon, Geumsan-gun, Chungnam, Republic of Korea |
10. Remedies
Advice and complaints about the handling of personal data may be directed to the following bodies in Korea:
- Personal Information Infringement Report Centre — 118 (privacy.kisa.or.kr)
- Personal Information Dispute Mediation Committee — 1833-6972 (kopico.go.kr)
- Supreme Prosecutors' Office, Cyber Investigation Division — 1301
- National Police Agency, Cyber Bureau — 182
11. Changes to this policy
This policy takes effect on 10 September 2026. Any addition, deletion or amendment will be announced on the website at least seven days before it takes effect.