This page explains what information DermaRadar (the Service) processes, for what purpose, and when it is deleted. It is written to match how the Service actually behaves.
We collect information only when you enter it yourself. There is no account registration.
| Contact form | Name, contact details, message |
|---|---|
| Instagram listing request | Account or clinic name, Instagram handle, area, contact details, message |
| Content removal request | Instagram handle, contact details, reason (optional) |
| Collected automatically | Access records via Google Analytics — cookies, device and browser information, IP address, pages viewed and clicks |
Information submitted through the contact, listing, and removal forms is deleted automatically 180 days after we receive it, or earlier once its purpose is fulfilled. Deletion removes it from our stored files and is not reversible. Google Analytics records follow Google's own retention policy.
We do not provide your personal data to third parties. We may disclose it only to the extent required by law.
| Railway (USA) | Hosting and data storage — all items listed above |
|---|---|
| Google (USA) | Usage analytics (Google Analytics) — cookies, device information, IP |
| Telegram (outside Korea) | New-request notifications — we send only the number of requests, never names, contact details, or message content |
You may request access to, correction of, deletion of, or suspension of processing of your personal data. Contact us using the details below or the form on this site; we will act within 10 days of receiving the request and tell you the outcome. If we cannot grant it we will explain why. A representative may make the request on your behalf.
The Service uses Google Analytics cookies for usage statistics and a cookie that keeps an administrator signed in. You can refuse cookies in your browser settings; refusing them does not limit your use of the Service.
The Service collects and displays only promotional posts published by medical institutions on their public accounts, together with publicly available advertising information. We do not collect or display posts from personal accounts, and personal-account posts collected in the past are removed from our stored data. If a post of yours appears here and you would rather it did not, use the removal request form. We will exclude the account from future collection and delete the stored data and images we hold.
Administrative functions are separated behind a server-issued session, and credentials are exchanged only through request headers, never through the address bar. Stored data is held on an access-restricted server volume.
If this policy changes, the change and its effective date will be posted on this page.
