01 Who is responsible for your information?
World Aesthetic Anti-Aging Society (WAAS) is responsible for the personal information described in this policy.
- Contact
- waascongress@gmail.com
- Address
- WAAS Korea HQ, 5th Floor, 175 Suyeong-ro, Nam-gu, Busan, Republic of Korea
Contact us at the email above to request access, correction, deletion, restriction of processing, or withdrawal of an optional consent, or to ask a privacy question.
02 What we collect and why
We collect information directly from you and generate some information when you use our services. We use it only for the purposes below.
We process the information needed to handle your membership application and provide your account services. Optional profile information, WAAS updates, and disclosure to a product company are handled only with the separate choice or consent described below.
| Purpose | Information processed | Required or optional |
|---|---|---|
| Create and secure your account; verify your email | Name, email address, password hash, country, and city | Required to submit and manage an application. We store a password hash, not your original password. |
| Verify credentials and review your application | Professional specialty or qualification, license number, profile photo, and professional credential document | Required for the review. Without these items, WAAS cannot assess the application. |
| Manage your profile and application | Clinic name, WhatsApp, Instagram, website or social media links, professional introduction, application statement, and clinic logo | Optional. If you provide these details or files, we ask for separate consent to use them. |
| Record your interests and provide related services | Selected product and professional opportunity interests; product-specific interest selections; consent status and time; application and handling records | Optional information or a separate choice shown on the relevant product page. |
| Send WAAS updates | Email address and your marketing choice, including when it was recorded | Optional. We email updates only when you opt in. Declining does not affect your application. |
| Protect the site and measure site use | Access time, pages viewed, browser and device information, cookies or online identifiers, and approximate access region generated while using the site | Some pages use Google Analytics for site statistics. The membership application and this policy page do not load the analytics tag. |
You may leave optional fields blank and decline optional choices without affecting your membership application. You can withdraw an optional choice by contacting WAAS.
03 How long we keep your information
We keep information for the periods below, then delete it when it is no longer needed.
- Applications with an unverified email: 30 days from submission.
- Rejected or withdrawn account and application records: 1 year from the decision or withdrawal date.
- Credential documents and clinic logo files submitted with an application: 90 days after the review decision.
- Approved member account and profile information: while membership remains active and for 1 year after withdrawal.
- Marketing preference: until you withdraw your choice or close your account.
If a law requires us to keep specific records for longer, we keep only those records separately for the legally required period. Electronic files are securely deleted, and paper records are shredded or destroyed.
These are WAAS operational retention periods, not statutory retention periods. The scheduled deletion process must be configured and maintained before this policy is published for use.
04 When we share your information
Creating a WAAS account does not authorize us to give your identifying information or contact details to product companies. If a product company is to receive information about members interested in a particular product, the product page will identify the company, purpose, information shared, retention period, and effect of declining. We will ask for a separate choice before sharing.
We do not provide a member’s identifying information or contact details to a product company without that member’s consent for that product. WAAS administrators may review all applications for internal administration and statistics. We may share aggregate statistics that do not identify individual members.
When you consent to a specific disclosure, the information is provided for the product-related inquiry and follow-up described on that product page. The recipient company must delete it when follow-up is complete and no later than 12 months after receipt, unless applicable law requires longer retention. After transfer, the recipient company is responsible for its own subsequent processing.
05 Service providers and international processing
WAAS uses service providers for website operations, email delivery, security, and site statistics. The current project configuration confirms the following services:
| Provider / service | Task | Information involved | Location and retention |
|---|---|---|---|
| Google (Gmail SMTP) | Send email verification and account notices | Recipient email address and email content | Google service infrastructure. Contracting entity, processing countries, and service retention settings require confirmation. |
| Google Analytics | Measure visits on some website pages | Page views, browser and device information, online identifiers, and approximate access region | Google service infrastructure. Processing countries and the analytics property’s retention setting require confirmation. The membership application and this policy page do not load the analytics tag. |
| Website and database hosting provider | Host the website and database, store and back up files, and provide technical operations | Membership application information and information stored to operate the service | The provider and actual storage locations are not identifiable from the project configuration and must be confirmed from the hosting contract and server settings. |
If information is processed outside South Korea, WAAS will disclose the actual recipient, destination country, information, purpose, transfer method and timing, retention period, legal basis, and safeguards based on the provider contract and service configuration. The hosting provider and international processing details must be confirmed before this policy is published or membership applications are accepted.
06 Your rights and choices
You may request access to, correction of, deletion of, or restriction of processing of your information, and you may withdraw an optional consent. WAAS may need to verify your identity before responding. Send your request to waascongress@gmail.com.
If deleting or restricting required information would prevent WAAS from reviewing your application or providing membership services, we will explain the effect and any available options. Declining or withdrawing optional profile or marketing choices does not affect the required membership review.
Depending on the privacy law that applies to you, you may also have the right to data portability, to object to processing, or to complain to your local privacy regulator.
07 Security and automated decisions
WAAS limits access to authorized staff who need the information for their work and applies appropriate access controls and technical and organizational safeguards. Credential documents are restricted to authorized application reviewers.
WAAS staff review membership applications. We do not decide applications solely through automated processing.
08 Policy changes
We will post updates to this policy with the effective date. If a change materially affects your rights or the purposes for which we process information, we will provide notice or request consent as required by applicable law.
For questions about this policy, contact waascongress@gmail.com.