Privacy Policy

1. Information We Collect

We collect personal information you provide when submitting application forms, consultation requests, or contacting us. This includes your name, email, phone number, nationality, medical license information, and preferred training programs. If you use Mentorship Community, we also process your account details, membership status and access dates, posts, replies, uploaded files, and security and moderation records.

Payments (Mentorship Community membership, Aesthetic Fact Sheets and training): the name and email you enter, the item, amount and currency, PayPal order and payment IDs, the country of your PayPal account as reported by PayPal, and payment, refund and dispute status. We do not receive your card or bank details. Aesthetic Fact Sheets only: your consent to the sale terms and to immediate digital delivery, and the issue, expiry and download times of your personal copy.

2. How We Use Your Information

Your information is used to process training applications, schedule consultations, generate quotes and booking confirmations, issue certificates, and communicate about our programs. We also use account and membership information to control access to private community content, manage member requests and maintain security. We may use internal analytics to improve our services.

We use payment information to take payment, manage renewals, handle refunds and disputes, and keep the tax and transaction records the law requires. Aesthetic Fact Sheets only: we print your name, email and a Copy ID on your personal PDF copy, send and limit your download link, and use the Copy ID to trace unauthorised copies.

3. Data Storage & Security

Your data is stored securely using Google Workspace (Google Sheets, Google Drive) and our server infrastructure. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, or destruction. Community images and documents are kept in private server storage and a Google Drive sync folder. Videos are processed and streamed through Mux. Membership is checked before files or short-lived video playback tokens are provided; already issued video tokens may remain valid for up to 10 minutes.

Personal Aesthetic Fact Sheets copies are kept in private server storage and are only available through your expiring download link.

4. Third-Party Services

We use the following third-party services: Google Analytics (website analytics), Cal.com (appointment scheduling), Google Workspace (email, application records and file storage), Mux (video upload, processing and streaming), Cloudflare (website delivery and security), and PayPal (payment processing for memberships, Aesthetic Fact Sheets and training). Provider policies are available at Google, Cal.com, Mux, Cloudflare and PayPal.

5. Data Sharing

We do not sell your personal information. We may share your information with our faculty surgeons for training coordination, with partner clinics for procedure scheduling, and with service providers who assist in our operations. Posts, replies and attachments shared in Mentorship Community are visible to members who have access to that content and to authorized administrators. Do not upload identifiable patient information or material you lack permission to share.

6. International Transfers

To provide our services, personal information is transferred to the providers below, outside the Republic of Korea, when you use the related service, over encrypted network connections.

• PayPal Pte. Ltd., 5 Temasek Boulevard #09-01 Suntec Tower 5, Singapore 038985. Korean domestic agent: PayPal Korea Services LLC, +82-2-737-5775, [email protected]
  Country: Singapore, and other countries where PayPal group companies and payment processors operate
  Information: Name, email, item, amount, order ID
  Purpose: Payment, refunds, disputes
  Retention: As set out in PayPal's privacy statement
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Contact form at https://support.google.com/policies?p=privpol_privts
  Country: United States and countries where Google operates data centres
  Information: Application and consultation details, emails, stored files, site visit records and cookie identifiers
  Purpose: Email, records and file storage; website analytics
  Retention: Until the service ends or the data is deleted
• Mux, Inc., 88 Stevenson Street, San Francisco, CA 94105, USA. [email protected]
  Country: United States
  Information: Community videos you upload; IP address and device details when videos play
  Purpose: Video processing and streaming
  Retention: Until the service ends or the data is deleted
• Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. [email protected]
  Country: Mainly the United States and the European Economic Area
  Information: IP address and request records for every site visit
  Purpose: Website delivery and security
  Retention: As set out in Cloudflare's privacy policy

These transfers are necessary to provide the service you request. You can refuse by not using the related service or by contacting [email protected]. If you refuse, we cannot take online payments, deliver Aesthetic Fact Sheets, host community videos or serve this website to you.

7. Your Rights

You have the right to access, correct, or delete your personal data. You may also request a copy of your data or withdraw consent at any time by contacting us at [email protected].

8. Cookies

Our website uses cookies for analytics (Google Analytics) and essential functionality. At Aesthetic Fact Sheets checkout, essential cookies keep your order linked to your browser so that only you can view or complete it. You can control cookie settings through your browser preferences.

9. Email Click Tracking

Emails we send regarding your inquiry or training program may contain links routed through our domain so we can record when you click them. We log only the click timestamp, target URL, and a non-identifying token tied to the message we sent you. The data is used solely to coordinate our response (e.g., to know whether our reply reached you). You may opt out of click tracking by contacting us at [email protected].

10. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law.

Under the Korean Act on Consumer Protection in Electronic Commerce, we keep records of contracts, withdrawals and payments for 5 years and of consumer complaints and disputes for 3 years. Tax records are kept for 5 years. Aesthetic Fact Sheets only: the PDF file made for you is deleted 30 days after it is issued. If you need it again, we make a fresh copy with the same Copy ID (up to 3 times per order). The order record and Copy ID are kept for 5 years with the other transaction records.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date.

12. Contact

OLA Korea | CEO: Song Jennifer Kim
145 Bunpo-ro, Nam-gu, Busan, South Korea
Email: [email protected]
Business Registration: 775-81-03508
Mail-order Business Report No.: 2026-부산남구-0583

13. Professional Licence Verification (Mentorship Community)

When you apply for the Mentorship Community, we ask for the number of a professional licence, or a qualification issued or officially accredited by a government body (training or course certificates are not accepted), the issuing country or authority, and a copy of it (image or PDF) — for example a medical, nursing or state esthetician licence. We use them only to confirm your professional eligibility for membership.

The uploaded file is stored privately, is seen only by OLA's reviewing administrator, and is deleted as soon as the review is done (approved or declined). If the review is not completed within 30 days, the file is deleted and we ask you to upload it again. After the file is deleted we keep only a short text record of the check: the name and licence number as shown, the issuing country or authority, the expiry date if shown, how it was checked (the document itself or a public licence registry, with its address), who checked it and when.