Hanme Lab Privacy Policy
International & Legal Version
Last Updated: May 25, 2026
1. Scope and Legal Effect
Hanme Lab is operated by ChouK Co., Ltd., a company duly established under the laws of the Republic of China (Taiwan).
This Privacy Policy ("Policy") applies to all users ("Users") who access or use the Hanme Lab platform ("Platform"), including but not limited to its website, membership program, reservation system, consultation services, digital content, mobile services, and related functions.
By registering, logging in, using any services provided by the Platform, or otherwise interacting with the Platform, Users acknowledge that they have read, understood, and agreed to be bound by this Policy.
2. Legal Basis for Personal Data Collection
The Platform may collect, process, and use Users' personal data based on one or more of the following legal grounds:
- Performance of contractual obligations between the User and the Platform
- Responding to User requests or providing requested services
- Compliance with applicable laws, regulations, or governmental requirements
- Legitimate business interests and operational needs of the Platform
- The User's explicit consent or other legally permissible basis
3. Types of Personal Data Collected
Depending on the nature of the services provided, the Platform may collect the following categories of personal data, including but not limited to:
(1) Identity and Contact Information
- Full name (including passport English name)
- National ID number (for member identification, duplicate account prevention, payment verification, or compliance with applicable legal requirements)
- Date of birth
- Gender and nationality
- Email address, mobile phone number, LINE account, or other communication account information
(2) Information Required for Medical Aesthetic Services
(Collected only when Users proceed with actual reservation or medical aesthetic services)
Passport number
(3) Membership and Transaction Information
- Membership tier and enrollment date
- Points, rewards, and referral records
- Orders, payment records, deposits, and refund history
(4) Medical Aesthetic Service and Usage Information
- Treatment preferences, requests, and budget descriptions
- Reservation history and clinic matching information
- Pre- and post-treatment feedback, case-sharing text, photos, or videos (subject to separate explicit authorization from the User)
(5) Technical and Device Information
- IP address
- Device type, browser, and operating system
- Cookies, logs, and usage records
Users may disable cookies through their browser settings; however, certain functions of the Platform may become unavailable as a result.
4. Purposes of Personal Data Use
The Platform may use personal data within a reasonable and necessary scope for the following purposes:
- Membership registration, account management, and identity verification
- Medical aesthetic consultation, clinic recommendations, and reservation arrangements
- Operation of membership programs, reward systems, and referral mechanisms
- Customer support, notifications, reminders, and service communications
- System security, risk management, and service optimization
- Payment processing, legal compliance, and dispute resolution
5. Cross-Border Data Transfer and International Processing
Users understand and agree that their personal data may be transferred, stored, or processed in Taiwan, South Korea, or other jurisdictions as necessary for the provision of cross-border services.
The Platform will make reasonable efforts to ensure that such international data transfers comply with applicable security standards under this Policy. However, Users acknowledge that data protection laws and regulatory requirements may vary between jurisdictions.
6. Sharing of Personal Data with Third Parties
Unless otherwise expressly consented to by the User, the Platform will not sell or rent personal data to third parties.
However, the Platform may share personal data with third parties within the necessary scope under the following circumstances:
- Partner clinics (limited to reservation and medical aesthetic service arrangements)
- Third-party service providers, including payment processors, electronic invoicing providers, cloud service providers, AI service providers, and identity verification providers
- Compliance with applicable laws or governmental requests
7. Data Retention and Security Measures
The Platform will retain personal data only for the period necessary to fulfill the purposes for which the data was collected, unless a longer retention period is required or permitted by law.
The Platform implements reasonable technical and organizational security measures, including but not limited to encryption, firewalls, and access control mechanisms, to prevent unauthorized access, disclosure, alteration, or destruction of personal data.
The Platform may retain personal data for extended periods where necessary for legal compliance, contractual obligations, service operations, or dispute resolution.
Certain information may be retained where required by law, taxation, dispute resolution, fraud prevention, or legitimate business operations.
8. User Rights
Subject to applicable laws, Users may request the following regarding their personal data:
- Access or review of personal data
- Supplementation or correction
- Restriction of collection, processing, or use
- Deletion of personal data or withdrawal of consent
Requests may be submitted through the official customer service channel: Hanme Lab Official LINE Support.
9. Policy Revisions
The Platform reserves the right to revise this Policy at any time. Updated versions will be published on the Platform's website.
Continued use of the Platform after such revisions become effective shall constitute acceptance of the revised Policy.
Certain services may involve AI-assisted customer support or automated recommendation systems. Such tools are intended to improve service efficiency and user experience, but final medical decisions should always be made in consultation with licensed medical professionals.
10. Minors
Users under the age required by applicable law must obtain consent from their parent or legal guardian before using the Platform's services.