개인정보 처리·위탁·보안·보관 정책

1. Important Information

This Policy outlines how we collect and process personal data of our users at veterinary hospitals or clinics, including clinic staff and authorized distributors (collectively, the "Clinic").

2. Special Provision on Animal Data

Medical images (DICOM) and clinical records pertaining to animals do not relate to an identified or identifiable natural person. Therefore, such data does not constitute "personal data" under the GDPR, CCPA, or PIPA. The Company processes animal data for clinical diagnostic purposes and AI research development while maintaining the highest standards of data integrity and security.

3. The Personal Data We Collect

• Identity Data: Name of representative, Clinic name, professional credentials
• Contact Data: Email address, business address, telephone number
• Technical Data: User ID, encrypted password, IP address, access logs, browser/device types

4. Use of Cookies

• Essential: System operation
• Analytics: Interaction analysis
• Functional: Preferences

You can manage cookies via browser settings. Disabling essential cookies may affect Service functionality.

5. How We Use Your Personal Data

• Performance of Contract: Deliver teleradiology reports, manage accounts
• Legitimate Interests: Improve AI algorithms, ensure system security
• Legal Obligation: Comply with tax, accounting, regulatory requirements

6. Data Security & Retention

• Encryption: AES-256 at rest and in transit
• Access Control: Strict role-based access controls

Retention Periods:

• Original DICOM & Charts: 5 years after final interpretation
• Diagnostic Reports: 5 years
• Backup Data: Up to 6 months
• De-identified AI Data: Permanent retention

7. De-identification for AI Research

The following items are permanently masked or deleted:

• Guardian and Veterinarian identities
• Clinic identifiers
• Technical identifiers (DICOM UID, Device ID, IP Address)

8. Cloud Entrustment & International Transfers

Partners: AWS, Google Cloud Platform, Microsoft Azure, Dropbox

Data may be transferred outside your country. We ensure compliance via Standard Contractual Clauses (SCCs) for EU/UK users.

9. Your Data Protection Rights

You may request Access, Correction, Erasure, and Portability of your personal data. No fee is usually required. We verify your identity and respond within one month.

10. Regional Disclosures

• EU/UK (GDPR): Right to lodge a complaint with a Supervisory Authority
• California (CCPA/CPRA): We do not "sell" or "share" personal information