Privacy Policy

01

Introduction

GC Wellbeing Co., Ltd. (hereinafter referred to as "GC Wellbeing," "we," "us," or "our"), the owner and operator of the Gcelle brand, values your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit the Gcelle website, submit an inquiry, or otherwise interact with our products and services. This Privacy Policy has been prepared in accordance with the Personal Information Protection Act of the Republic of Korea (PIPA) and other applicable Korean laws and regulations.

02

Responsibility

GC Wellbeing is responsible for processing the personal information collected through the Gcelle website and related services.

We process personal information in accordance with applicable privacy and data protection laws and implement appropriate measures to safeguard your information. GC Wellbeing has designated a Chief Privacy Officer ("CPO") to oversee matters relating to the protection of personal information. The CPO’s contact details are provided in the "Contact Us" section below.

For inquiries or complaints regarding personal information, please contact the CPO directly or submit your request through the Inquiry page on the Gcelle website.

03

Why We Process Personal Information

We process your personal information only for legitimate business purposes and in accordance with applicable laws.

We may process your personal information to:

Provide our products and services
Respond to your inquiries and requests
Improve our website, products, and services
Comply with applicable legal and regulatory obligations
Send marketing communications and promotional information, where you have provided your consent

The purposes and legal bases for processing personal information are as follows:
I. Responding to inquiries and providing requested information: Your consent obtained through the Inquiry form or, where applicable, processing necessary to take steps at your request prior to entering into a contract
II. Operating, maintaining, and improving the website: GC Wellbeing's legitimate interests, to the extent such interests clearly override the rights of the data subject and the processing is reasonably related to those interests
III. Sending marketing and promotional communications: Your prior consent
IV. Complying with legal and regulatory obligations: Processing necessary to comply with applicable laws and regulations
We will process your personal information only for the purposes described in this Privacy Policy or as otherwise permitted by applicable law.

04

Information We Collect

Depending on how you interact with the Gcelle website, we may collect the following categories of personal information:
I. Information submitted through the Inquiry form:
- Required information: Full name, email address, subject and content of inquiry
- Optional information: Telephone number and attached files, if such fields or functions are provided
II. Information collected automatically during website use: IP address, browser type and version, operating system, device information, access logs, cookie identifiers, and website usage information

05

How We Collect Your Information

We collect your information through the following means:
I. Information you provide directly when you submit an inquiry through the Gcelle website
II. Information collected automatically through cookies, access logs, and similar technologies when you access or use the website

06

Sharing Your Information

GC Wellbeing does not provide your personal information to third parties for commercial purposes beyond those described in this Privacy Policy.

We may share your personal information with third parties only in the following circumstances and to the extent necessary:

Affiliates and Group Companies
- Recipient: GC Wellbeing affiliates
- Purpose: Internal business operations and service improvement
- Items shared: Contact information, inquiry information
- Retention period: Until the purpose is fulfilled or as required by law

Service Providers (Data Processors)
- Recipient: IT service providers, website hosting providers, analytics providers
- Purpose: Website operation and maintenance
- Items shared: Cookie and device information, website usage information
- Retention period: Duration of the service agreement

Legal and Regulatory Authorities
- Recipient: Government authorities or regulatory agencies
- Purpose: Compliance with applicable laws and regulations
- Items shared: As required by applicable law
- Retention period: As required by applicable law

All third parties are contractually required to protect your personal information and use it only for the specified purposes. Where required by applicable law, we will obtain your prior consent before sharing your personal information with third parties.

07

Cookies

The Gcelle website uses cookies and similar technologies. We use the following types of cookies:

Essential Cookies: Required for the basic operation of the website. These cookies cannot be disabled.
Analytics Cookies: Used to analyze website traffic and usage patterns to improve our services. [Retention period: 3years]
Marketing/Advertising Cookies: Used to deliver relevant promotional content. These cookies are only placed with your prior consent. [Retention period: [3years]

08

Your Rights

Under applicable privacy laws, including the Personal Information Protection Act of the Republic of Korea, you have the following rights regarding your personal information:

Right to access and review your personal information
Right to correct inaccurate or incomplete personal information
Right to request deletion of your personal information
Right to restrict or object to certain processing activities
Right to withdraw your consent at any time (without affecting the lawfulness of processing prior to withdrawal)
Right to opt out of receiving marketing communications at any time
Right to request the transmission of personal information, only where and to the extent applicable under Korean law

How to Exercise Your Rights:
You may exercise the above rights by:
- Submitting a request through the Inquiry page on the Gcelle website; or
- Contacting our CPO directly at sunjinlee@gccorp.com
We will respond to your request within 10 business days in accordance with applicable privacy laws. We may request verification of your identity before processing your request.
If you are not satisfied with our response, you may lodge a complaint with the Personal Information Protection Commission of Korea (www.pipc.go.kr) or the Korea Internet & Security Agency (privacy.kisa.or.kr)

09

Data Security

GC Wellbeing implements the following technical, administrative, and physical measures to protect your personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction:
- Technical Measures: Encryption of personal information during transmission (SSL/TLS), access control systems, intrusion detection systems
- Administrative Measures: Internal privacy policies and procedures, employee training on personal information protection, access logging and monitoring
- Physical Measures: Restricted access to data processing facilities

While we strive to protect your personal information, no method of electronic transmission over the Internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security.
In the event of a personal information breach, we will notify affected individuals and relevant authorities in accordance with applicable laws.

10

Children's Privacy

The Gcelle website is intended for adults and is not directed toward children. Under the Personal Information Protection Act of the Republic of Korea, 'children' refers to individuals under the age of 14. We do not knowingly collect personal information from children under 14. If we become aware that we have inadvertently collected personal information from a child under 14 without verifiable parental consent, we will take prompt steps to delete such information.

11

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy or to comply with legal, regulatory, or business requirements.
The following retention periods apply:
- Inquiry information (name, email, telephone number, inquiry content): 3years from the date the inquiry is resolved
- Website usage and analytics data: 3years from the date of collection
- Cookie data: As specified in the cookie settings for each cookie type (see Section 7)
- Records retained for legal compliance: As required by applicable law (e.g., records related to consumer disputes: 3 years under the Act on the Consumer Protection in Electronic Commerce)

Destruction of Personal Information:
Once the retention period expires or the processing purpose is fulfilled, we will destroy personal information without delay using the following methods:
- Electronic files: Permanently deleted using technical methods that prevent recovery
- Physical records (if any): Shredded or incinerated

12

Changes to this Privacy Policy

GC Wellbeing may update this Privacy Policy from time to time to reflect changes in our
business practices, legal requirements, or applicable regulations.

Any changes will become effective upon posting the updated Privacy Policy on this page together with the revised effective date. For material changes that significantly affect your rights or the way we process your personal information, we will provide prior notice of at least 14 days before the changes take effect, by posting a prominent notice on the Gcelle website or by sending an email notification where we hold your contact information.

We encourage you to review this Privacy Policy periodically.
The current version of this Privacy Policy is effective as of August 31, 2026.

13

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal information, please contact us:

Chief Privacy Officer (CPO)
GC Wellbeing Co., Ltd.
Department: Medical Aesthetics, Marketing
Email: sunjinlee@gccorp.com
Phone: +82 102085 5350
Address: 4F, Seoul Forest The Sharp, 241 Wangsimni-ro, Seongdong-gu, Seoul, Republic of Korea

You may also submit your inquiry through the Inquiry page on the Gcelle website.
If you are not satisfied with our response, you may contact the following authorities:
- Personal Information Protection Commission (PIPC): www.pipc.go.kr / 182
- Korea Internet & Security Agency (KISA) Privacy Center: privacy.kisa.or.kr / 118
- Supreme Prosecutors' Office Cyber Investigation Division: www.spo.go.kr / 1301
- National Police Agency Cyber Bureau: ecrm.cyber.go.kr / 182

CONTACT

Have a question about Gcelle?

Reach out and we'll be happy to help.

Products I'm interested in *
0 / 3000
[Privacy Policy]