KAMTOUR PRIVACY POLICY

Version 3.2
Effective Date: October 3, 2025
Updated Date: April 29, 2026

The Korea–America MedTour Association, Ltd. (“KAMTOUR,” “we,” “our,” or “us”) is a private, U.S.-based platform that supports bilateral institutional engagement between healthcare organizations in the United States and Korea. KAMTOUR works directly with hospitals, academic medical centers, clinics, research organizations, and supporting healthcare entities through institutional advisory and consulting services, the KAMTOUR Verified™ institutional identity and representation framework, and structured symposia and institutional convenings.
KAMTOUR respects the privacy of individuals who access its website, interact with its services, or participate in KAMTOUR Verified™ programs.
This Privacy Policy describes how KAMTOUR collects, uses, stores, and protects personal information in accordance with applicable data protection laws, including those of the United States and the Republic of Korea.

1. Scope and Role of KAMTOUR

KAMTOUR is not:

• A governmental authority or regulatory body;
• A trade association;
• An accreditation or certification organization;
• A healthcare provider, medical referral service, or clinical intermediary; or
• or A patient-facing organization.

KAMTOUR does not provide medical advice, diagnosis, or treatment, and does not refer, recruit, place, or coordinate patients between individuals and third-party institutions.

Submission of information to KAMTOUR does not establish:

• a physician–patient relationship;
• a clinical advisory relationship; or
• any form of healthcare provider engagement.

KAMTOUR’s services are provided exclusively to institutions and organizations and consist of three connected functions: institutional advisory and consulting (KAMTOUR’s primary service), administration of the KAMTOUR Verified™ institutional identity and representation framework, and coordination of symposia and institutional convenings.

2. Information We Collect

KAMTOUR may collect personal information when individuals:

• Visit or interact with the KAMTOUR website;
• Submit inquiries or contact forms;
• Apply for KAMTOUR Verified™ status, optional visibility tier participation, or institutional listing;
• Engage KAMTOUR for institutional advisory or consulting services on behalf of an organization;
• Register for symposia, institutional convenings, communications, or updates;
• Participate in surveys, testimonials, or institutional engagement activities.

Types of Information

Information collected may include:

• Name, email address, phone number;
• Organizational affiliation, title, and professional role;
• Authorized institutional representative information;
• Communication content and submitted inquiries;
• Application materials and supporting institutional documentation; and
• Event participation or registration details.

Medical Information

KAMTOUR does not request or require medical or health information for its services.

If individuals voluntarily submit health-related information to KAMTOUR:

• such information will be permanently deleted as soon as practicable once it becomes actually known to KAMTOUR as health-related information;
• such information is not used for any clinical purposes; and
• is not relied upon for medical evaluation or decision-making.

KAMTOUR does not operate as a HIPAA-covered entity or business associate.

3. Purpose of Data Use

KAMTOUR uses non-health related personal information solely for legitimate administrative and operational purposes, including:

• Processing applications for KAMTOUR Verified™, optional visibility tier participation, or institutional listing in the KAMTOUR Institutional Network;
• Administering institutional advisory and consulting engagements;
• Communicating with applicants, clients, partners, institutional counterparts, and stakeholders;
• Delivering newsletters, updates, and event-related information;
• Coordinating symposia, institutional convenings, and related programming;
• Conducting the KAMTOUR Verified™ institutional identity and representation review (non-clinical);
• Maintaining internal records and compliance documentation; and
• Improving website functionality, user experience, and program structure.

4. Legal Basis and Consent (Where Applicable)

Where required under applicable law, including the Republic of Korea’s Personal Information Protection Act (PIPA):

• Personal data is collected and processed based on consent or other lawful grounds;
• Individuals may withdraw consent where applicable; and
• KAMTOUR honors requests for access, correction, deletion, or restriction in accordance with legal requirements.

5. Data Sharing and Disclosure

KAMTOUR limits disclosure of personal information to the minimum necessary and only for defined administrative purposes.

Information may be shared with:

(a) Service Providers

Third-party vendors supporting:

• website hosting;
• data management; and
• communications or event administration.

(b) Institutional Verification and Engagement Context

Limited information may be shared with partner organizations or institutional counterparts solely for administrative purposes related to the KAMTOUR Verified™ institutional identity and representation review, institutional listing, or coordination of bilateral institutional engagement.

KAMTOUR does not share personal information:

• for clinical use;
• for treatment coordination; or
• for patient referral, recruitment, placement, or management purposes.

(c) Legal and Regulatory Requirements

Where required by law, regulation, or legal process.

All recipients are required to maintain confidentiality and use data only for authorized purposes.

6. International Data Transfers

KAMTOUR operates across the United States and the Republic of Korea in support of bilateral institutional engagement.
Personal information may be transferred across jurisdictions where necessary for administrative or operational purposes.

KAMTOUR implements reasonable safeguards, including:

• contractual confidentiality obligations;
• secure data handling practices; and
• access controls,

to ensure compliance with applicable data protection laws.

7. Data Retention

KAMTOUR retains personal information only for as long as necessary to:

• fulfill the purposes outlined in this Policy;
• maintain institutional records and compliance documentation; and
• satisfy applicable legal or regulatory requirements.

Data is securely deleted or de-identified when no longer required.

8. Data Security

KAMTOUR employs administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or misuse.
However, no method of transmission over the Internet or electronic storage is completely secure.
Users provide information at their own discretion.

9. Cookies and Analytics

KAMTOUR may use cookies or analytics tools to:

• improve website functionality;
• understand user engagement; and
• enhance user experience.

Users may adjust browser settings to manage or disable cookies.

For additional details, refer to the KAMTOUR Cookie Policy.

10. Your Rights

Subject to applicable law, individuals may have the right to:

• Access personal information held by KAMTOUR;
• Request correction of inaccurate or incomplete data;
• Request deletion of personal information;
• Object to or restrict certain processing activities; and
• Withdraw consent where applicable.

Requests may be submitted to: compliance@kamtour.org

KAMTOUR will respond within applicable legal timeframes.

11. Third-Party Websites and External Links

KAMTOUR’s website may contain links to third-party institutions or external websites, including external links to institutional websites of organizations listed in the KAMTOUR Institutional Network.

KAMTOUR does not control and is not responsible for:

• the privacy practices;
• content; or
• data handling policies

of third-party entities.

Users engage with external websites at their own discretion and are subject to the terms and policies of those entities.

12. Changes to This Policy

KAMTOUR reserves the right to update or modify this Privacy Policy at any time.

Updates will be posted at: www.kamtour.org/legal_privacy_policy

Continued use of the website constitutes acceptance of the revised Policy.

13. Contact Information

For questions regarding this Privacy Policy or data practices:

KAMTOUR Compliance Department

Korea–America MedTour Association, Ltd.

Email: compliance@kamtour.org

Website: www.kamtour.org