DOCUMENT VERSION · 2026.08.01 DRAFT
Privacy Notice
This notice explains how the LUCE operator handles creator, clinic and agency information. Health information is treated as sensitive information and is separated from marketing profiles.
This operational draft must be completed with the operator’s legal name, address, privacy contact, vendors, transfer details, retention schedule and counsel approval before real-customer submission is enabled.
1. Information we process
Account identity and contact details; creator profile and social metrics; audience and media-kit files; treatment interests and travel timing; organization verification data; campaign applications, messages and consent receipts; security, access and audit records. A separate Medical Vault may hold health history only after separate, specific consent.
2. Why we process it
To provide accounts, verify organizations, match and introduce parties, manage applications and contracts, maintain security, meet legal obligations, and send optional marketing only when separately agreed.
3. Visibility and recipients
Public profiles contain marketing information only. Private profile data is shared according to the creator’s selected visibility. Contact details and private files remain locked until authorized. Medical Vault access is limited to the selected clinic, stated purpose and expiry period.
4. Cross-border processing
The service may be accessed from outside Korea and may use approved cloud and communication providers. Before activation, LUCE will list each foreign recipient, country, purpose, data category, transfer method and retention period, and collect any consent required by law.
5. Retention
Draft profiles are deleted after inactivity under the published retention schedule. Applications, contracts and consent evidence are kept only as long as required for the service, disputes and law. Medical Vault data uses a shorter, purpose-bound expiry and is deleted or irreversibly anonymized when no longer needed.
6. Your choices and rights
You can correct or delete profile information, change visibility, withdraw optional consent, request access history, close your account and object to certain processing. Withdrawal does not invalidate earlier lawful processing.
7. Security
LUCE uses role-based access, least privilege, encryption in transit and at rest, private object storage, expiring access grants, audit logs, rate controls, backups and incident response procedures. No system is risk-free.
8. Children, changes and contact
The service is for adults 18 and older. Material changes will be presented before they take effect. The final notice will identify the legal operator, privacy officer, address and verified contact channel before live data collection is enabled.