Privacy Policy.

1.About Us & Our Role

V.LIF Global ("we", "us", "our") is a Korean-licensed Foreign Patient Attraction Business (외국인환자유치업자) registered with the Korea Health Industry Development Institute (KHIDI) pursuant to Article 27-2 of the Medical Service Act of the Republic of Korea (의료법 제27조의2) and its enforcement decree. Our role is to attract international patients to qualified Korean medical institutions and to provide associated information, marketing, language support, and concierge services.

This Website (vlif-global.com) operates an international event/promotion campaign on behalf of V.LIF Plastic Surgery — a Korean medical institution headquartered at Nonhyeon Station Exit 4, Gangnam-daero, Gangnam-gu, Seoul. We are not the medical provider. All medical assessment, surgery, and treatment are performed exclusively by V.LIF Plastic Surgery and its licensed Korean physicians. We market the event, collect inquiries, handle pre-consultation logistics, and forward qualified inquiries to V.LIF Plastic Surgery for medical follow-up.

For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, V.LIF Global is the "data controller" of personal data submitted through this Website. Once your inquiry is forwarded to V.LIF Plastic Surgery for clinical purposes, V.LIF Plastic Surgery becomes a separate, independent data controller in respect of medical (health) data; their handling of medical records is governed by their own privacy notice and the Korean Medical Service Act. For the purposes of the California Consumer Privacy Act (CCPA/CPRA), V.LIF Global is the "business".

2.Personal Data We Collect

We collect only the information necessary to respond to your inquiry, qualify your interest, and forward you to V.LIF Plastic Surgery if appropriate.

2.1 Information You Provide Directly

• Identification & Contact: Full name, country of residence, phone number (with country code), preferred messenger handle (WhatsApp / KakaoTalk / WeChat / LINE / Telegram / Viber / iMessage / SMS / Email), and email address (optional).
• Inquiry Details: Procedure of interest (e.g., Mini Lift, Deep Plane Face & Neck Lifting, Stem-Cell Therapy), preferred consultation date, and any free-text message or concerns you choose to share.
• Photographs (only if you submit): Pre-consultation photos that you voluntarily send by messenger or email. We do not require photos at the inquiry stage.

2.2 Information Collected Automatically

• Technical Data: IP address, browser type, device type, operating system, referring URL, pages viewed, and submission timestamps. We retain a truncated record of submission IPs for security and anti-abuse purposes only.
• Cookies & Similar Technologies: See Section 9.

2.3 Sensitive (Special-Category) Data

We deliberately limit collection of health-related data at the inquiry stage. The "procedure of interest" field describes a service, not your medical condition. Should you voluntarily share medical history, photographs, or symptoms, we treat that information as special-category personal data and process it under the explicit-consent legal basis described in Section 12. Comprehensive medical history is collected only after you proceed to consultation with V.LIF Plastic Surgery, under their own consent forms and privacy notice.

3.How We Use Your Data & Legal Bases

V.LIF Global processes your personal data for the following purposes, relying on the legal bases shown:

We do not sell your personal information. We do not engage in automated decision-making with legal or similarly significant effects. As a registered Foreign Patient Attraction Business, we are subject to oversight by KHIDI and the Ministry of Health and Welfare; reporting we make to those authorities is statistical and aggregate where possible.

4.Sharing with V.LIF Plastic Surgery & Other Recipients

We share personal data only with the recipients below, and only to the extent necessary:

4.1 V.LIF Plastic Surgery (Medical Provider — Independent Controller)

The most important recipient. When you express interest in proceeding to consultation, we forward your inquiry — name, contact, country, preferred messenger, procedure of interest, and any voluntary message — to V.LIF Plastic Surgery at Nonhyeon Station Exit 4, Gangnam-daero, Gangnam-gu, Seoul. From the moment of forwarding, V.LIF Plastic Surgery acts as an independent data controller for the medical relationship. Their processing of your medical records is governed by their own privacy notice (provided at consultation) and by the Korean Medical Service Act, including the 10-year medical-record retention obligation.

4.2 Our Service Providers (Data Processors)

• Hosting & infrastructure providers (e.g., Hostinger International Ltd.) that host this Website and database, under data-processing agreements.
• Authorized concierge / translation partners contractually bound to V.LIF Global with confidentiality obligations.
• Communication platforms (e.g., WhatsApp, KakaoTalk, WeChat) — only if you choose to communicate via that platform; their own privacy terms then apply.
• Professional advisers (lawyers, auditors, accountants, insurers) bound by professional confidentiality.

4.3 Public Authorities

• Korea Health Industry Development Institute (KHIDI) — periodic, statistical reporting required of all Foreign Patient Attraction Businesses under Article 27-2 of the Medical Service Act.
• Other public authorities when required by law, court order, or to defend legal rights.

Each external processor is contractually required to implement appropriate technical and organizational security measures and to process data only on documented instructions from V.LIF Global.

5.International Data Transfers

V.LIF Global is based in the Republic of Korea, which has been recognized by the European Commission as providing an adequate level of data protection (EU–Korea Adequacy Decision, December 2021). Personal data submitted from the EU/EEA, UK, or other jurisdictions is transferred to Korea under that adequacy decision. The same adequacy decision applies to our forwarding of personal data to V.LIF Plastic Surgery within Korea.

Where a transfer is to a country without an adequacy decision (for example, where a concierge partner operates outside Korea/EU), we rely on appropriate safeguards including:

• Standard Contractual Clauses (SCCs) approved by the European Commission;
• UK International Data Transfer Agreement (IDTA) where applicable;
• Your explicit consent for the specific transfer, where appropriate.

You may request a copy of the transfer safeguards by contacting our Privacy Officer (Section 14).

6.Data Retention

V.LIF Global retains personal data only as long as necessary for the purpose for which it was collected, plus any period required by law. Data forwarded to V.LIF Plastic Surgery is retained by them under their own retention policy.

Medical records held by V.LIF Plastic Surgery: 10 years from last treatment, as required by the Korean Medical Service Act, Article 22 — independent of our retention.

7.Your Rights

7.1 Rights under GDPR (EU/EEA & UK)

• Right of Access — obtain confirmation of and a copy of your data.
• Right to Rectification — correct inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten") — request deletion, subject to legal retention obligations.
• Right to Restrict Processing — pause processing in defined circumstances.
• Right to Data Portability — receive your data in a structured, machine-readable format.
• Right to Object — object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent — at any time, without affecting prior lawful processing.
• Right to Lodge a Complaint with your local supervisory authority.

7.2 Rights under CCPA / CPRA (California)

• Right to Know what personal information we collect, use, disclose.
• Right to Delete personal information we hold about you.
• Right to Correct inaccurate personal information.
• Right to Opt-Out of sale or sharing of personal information. V.LIF Global does not sell your personal information.
• Right to Limit Use of sensitive personal information.
• Right to Non-Discrimination for exercising your CCPA rights.

7.3 Rights under Korean PIPA

• Right to access your personal information held by V.LIF Global;
• Right to request correction or deletion;
• Right to request suspension of processing;
• Right to compensation for damages caused by violations.

7.4 Other Jurisdictions

Residents of Canada (PIPEDA), Japan (APPI), Australia (Privacy Act), Singapore (PDPA), and other jurisdictions enjoy substantially similar rights under their applicable laws. We honor those rights to the extent required by law. Rights regarding medical records held by V.LIF Plastic Surgery should be exercised against the clinic directly, since they are an independent controller for that data.

8.How to Exercise Your Rights

To exercise any of the rights described in Section 7, contact us at info@vlif-global.com with the subject line "Privacy Request". We will:

1. Verify your identity (to protect against fraudulent requests);
2. Respond within 30 days (GDPR) or 45 days (CCPA), with possible extensions where permitted;
3. Provide our response free of charge for the first request in any 12-month period.

You may also designate an authorized agent to make a request on your behalf, in writing.

9.Cookies & Tracking

vlif-global.com uses strictly necessary cookies and similar technologies for:

• Session security — to maintain login state on our internal admin dashboard.
• Form anti-abuse — server-side rate-limit counters (no tracking cookies).
• One-time popup tracking — a session-only flag stored in your browser's sessionStorage that prevents the consultation popup from re-appearing during the same browsing session. This data never leaves your device.

We do not currently use third-party advertising cookies, cross-site tracking, or analytics services that share data with advertisers. If we add analytics in the future, we will update this policy and obtain consent where required.

10.Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction:

• Encryption in transit — TLS 1.2+ across the entire site (HTTPS).
• Encryption at rest — database hosted on a secure, access-controlled environment with regular backups.
• Access control — administrative dashboard protected by salted password hashing (bcrypt) and CSRF tokens.
• Input validation — server-side prepared statements (PDO) preventing SQL injection.
• Rate limiting — IP-based throttling against form abuse.
• Staff training — staff handling international patient inquiries trained on confidentiality and Korean Medical Service Act obligations applicable to Foreign Patient Attraction Businesses.

In the event of a personal data breach affecting your rights, we will notify the relevant supervisory authority within 72 hours (GDPR Art. 33) and notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms. We will also notify the Korean Personal Information Protection Commission and KHIDI as required.

11.Children's Privacy

The V.LIF Plastic Surgery 2026 S/S Event is intended for adults aged 19 or older (the age of majority in the Republic of Korea) seeking adult facelift and anti-aging treatments. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact info@vlif-global.com and we will delete it promptly.

12.Sensitive (Health) Data

Although we deliberately minimize collection of health data at the inquiry stage, any health-related information you voluntarily share with V.LIF Global — for example, mention of medical conditions in the free-text message — is treated as special-category personal data under GDPR Article 9 and equivalent provisions globally. We process such data only:

• With your explicit, freely-given, specific, informed consent;
• For the purpose of forwarding to V.LIF Plastic Surgery so the clinic can prepare for your medical consultation;
• To comply with applicable legal obligations.

Once forwarded to V.LIF Plastic Surgery, that data is held by the clinic as an independent controller for healthcare provision purposes (GDPR Art. 9(2)(h)) and is governed by their own privacy notice and the Korean Medical Service Act.

Photographs you submit are never published, shared on social media, or used for marketing without separate, written, opt-in consent. Anonymized before-and-after cases shown on this Website are used only with patient consent obtained by V.LIF Plastic Surgery, and identifying features are masked.

13.Changes to This Policy

We may update this Policy to reflect changes in our practices, our regulatory status, or applicable law. The "Last Updated" date at the top of this page indicates when the Policy was last revised. Material changes will be communicated through a prominent notice on the Website and, where you have provided contact details, by direct notification.

Your continued use of the Website after changes become effective constitutes your acceptance of the revised Policy.

14.Contact & Privacy Officer

For any questions, concerns, or requests regarding this Policy or your personal data held by V.LIF Global, please contact us: