This Privacy Policy explains how MedFrontLabs, operating the Wellisia service, collects, uses, stores, and shares personal information when you use wellisia.com.
1. Who is responsible for your information
Service: Wellisia
Operator: MedFrontLabs (매드프론트랩스)
Office: 252, Cheongna Canal-ro, Seo-gu, Incheon, Republic of Korea
Privacy inquiries: contact@wellisia.com
2. Information we process
| When | Information | Purpose |
|---|---|---|
| Account creation and sign-in | Name, email address, password hash or Google account identifier, nationality, age range, phone number, country of residence, interests, visit purpose, marketing preference, session and login records | Create and secure your account, identify you, prefill requests, and manage My Page |
| Personalized or package quote request | Contact details, nationality and residence, preferred dates, party details, travel plans, treatment interests, requested support, selected package/add-ons, and your free-text notes | Review your request, prepare a personalized quotation, communicate with you, and coordinate approved support |
| Partner inquiry | Name, email, country, language, organization or topic, message, and any document you choose to attach | Review and respond to partnership inquiries |
| Reviews and service use | Rating, review text, account identifier, IP address, device/browser information, cookies, session data, access time, and privacy-safe analytics events | Publish and manage reviews, maintain security, troubleshoot, and improve the service |
| Payment, if separately offered and completed | Transaction reference, amount, currency, payment provider, payment status, card brand and last four digits where supplied by the provider | Confirm payment, issue records, prevent fraud, and meet legal obligations. Wellisia does not store full card numbers. |
Treatment interests and free-text requests may reveal health-related information. Please provide only information necessary for your request. Where separate consent is required by applicable law, we will request it before processing such information.
3. How information is collected
We collect information directly from forms, account and review features, quote communications, and service interactions. If you choose Google sign-in, Google provides your verified account identifier, name, email address, and profile image where available. Technical data may be collected automatically through security logs, cookies, and analytics tools.
4. Retention and deletion
- Account information: until account deletion, unless retention is required by law or needed to resolve an active request.
- Quote and coordination records: generally three years after the request is closed or the last material interaction.
- Partner inquiries and attachments: generally three years after the inquiry is completed.
- Authentication sessions: up to 30 days; Google profile-completion tokens expire after 20 minutes.
- Human-verification challenges: expire after five minutes and are periodically deleted.
- Transaction records: retained for periods required by applicable Korean law, including up to five years for contract or payment records and three years for consumer complaint records where applicable.
When the retention period ends, electronic records are deleted or irreversibly anonymized using methods designed to prevent recovery, unless continued retention is legally required.
6. International processing
Wellisia uses global infrastructure. The following processing may involve an overseas transfer by encrypted network transmission when you use the relevant feature. Information is retained for the period described in Section 4 or the shorter provider contract period.
| Recipient and location | Purpose | Information | Timing and retention |
|---|---|---|---|
| Vercel Inc. United States and global edge locations | Frontend hosting, content delivery, security, and access logging | IP address, device/browser data, access time, requested URL, language and currency preferences | Transferred when the website is accessed; retained under the service contract and security-log period |
| Render Services, Inc. United States and the configured hosting region | API and application infrastructure | Account, quote request, contact, service, authentication, and technical-log data | Transferred when an API feature is used; retained for the applicable Wellisia record period |
| Google LLC and affiliates United States and Google processing locations | Optional Google authentication, analytics, and translation | Google account identifier, name, email, profile image, privacy-safe usage events, and text submitted to a translation feature | Transferred when the relevant Google feature is used; retained under Google settings and the applicable Wellisia record period |
| Stripe, Inc. / PayPal group companies United States and provider processing locations | Payment processing and fraud prevention, only when a payment option is separately used | Transaction reference, amount, currency, payment status, payer identifiers, card brand and last four digits where provided | Transferred at payment; retained for provider and legally required transaction periods |
Amazon Web Services media and attachment storage is configured for the Seoul region where used and is not treated as an overseas transfer unless that configuration changes. You may refuse overseas-transfer consent, but account creation and online quote submission cannot be provided because the core service uses the infrastructure listed above. You may instead contact contact@wellisia.com to ask about an alternative communication method.
7. Your choices and rights
You may request access, correction, deletion, suspension of processing, or withdrawal of consent, subject to legal limitations. You may also withdraw marketing consent at any time without affecting essential service communications. Contact contact@wellisia.com. We may need to verify your identity before completing a request.
9. Security and children
We use access controls, password hashing, expiring sessions, encrypted transmission, rate limits, and restricted administrative access. No online system is completely risk-free. Wellisia is not directed to children under 14, and we do not knowingly create accounts for them without legally valid consent.
10. Changes and version history
We do not overwrite the version attached to a recorded consent. A new version receives a new effective date, while previous versions remain in the legal document register and deployment history. Material changes will be announced before taking effect where reasonably possible.