Privacy Notice

Last updated on August 06, 2024

1. Privacy Statement

   SeeYouDoc’s Promise

   Welcome to SeeYouDoc Corp.

   SeeYouDoc is an integrated healthcare platform that specializes in providing telemedicine solutions for healthcare providers, and a marketplace of healthcare services for patients in the Philippines. SeeYouDoc offers a full suite of solutions for healthcare provider networks, hospitals, clinics, doctors, and patients within a secured and patent-pending proprietary technology.

   To be an effective channel for your provisions and needs for medical and health service, we need to understand you better.

   We may ask you to create an account and sign in to use our service and we may require your personal data to ensure that we can provide our services to you. Throughout the process, we will help you make informed decisions about your personal data.

   Except when required by law or where you have given clear and explicit consent, we promise to keep your personal data safe and secure, never sell your personal data to anyone, and to use it only for purposes that we will identify in our data privacy statement. This Privacy Notice outlines how we collect, use, disclose, and protect your data when you use our services.

2. Purpose of SeeYouDoc’s Privacy Statement

   At SeeYouDoc, your trust is important to us, and we are committed to safeguarding your privacy and ensuring the security of your personal data. In compliance with the Data Privacy Act of 2012, its relevant rules and regulations, and the relevant issuances of the National Privacy Commission (“DPA”), his privacy statement applies to:

   • All past, present, and prospective users.

     This includes medical practitioners, patients, legal representatives or contact persons acting on behalf of our corporate customers.

   • Anyone that visits our website, channel, branch, or office, as there may be transactions with non-users that may need personal data.

3. Types of Personal Data We Process

   Personal data refers to information that identifies or can be linked to you, a natural person.

   The personal data that we process includes:

   • Identification Data, such as name, gender, salutation, date and place of birth, ID type and number, tax identification number, customer segment, nationality, email address, home address, province, city or municipality, district, ZIP code, mobile and telephone number, and specimen signature, photo, copy of government issued ID, relationship to a principal if applicable;
   • Professional Data, such as medical title, date started practicing, PRC License Number, PTR number, S2 number, medical specialties and proof thereof;
   • Data about what you love and need that you give us through surveys or any of our contact channels;
   • Location data if you are using location-based services;
   • Audio-visual data, such as recordings of in-App or regular messages or calls or chats with us where applicable and allowed by law.
   • Your interactions with us on social media and through our changes, such as Facebook, Twitter, Instagram, other social media platforms, our website and live chat.

4. Sensitive Personal Information

   “Sensitive Personal Information” is Personal Data about (i) an individual’s race, ethnic origin, marital status, age, color, religious, philosophical or political affiliations, health, education, genes or sexual life, or offenses or alleged offenses relating to that individual; and (ii) issued by government agencies peculiar to an individual which includes social security numbers, health records, license and tax returns.

   SeeYouDoc may collect Sensitive Personal Information. Among others as stated below, this information shall only be used by SeeYouDoc to establish patient profiles for reference of medical practitioners or doctors. Any diagnosis, findings, prescriptions, records of procedures and consultations made as a result of our services will also be stored by SeeYouDoc to be incorporated as part of the respective profile of a patient subject to access by the attending medical practitioner/healthcare provider and the patient.

   The processing of Sensitive Personal Information is necessary for purposes of medical treatment.

5. Collection of Personal Data

   We collect your personal data to fulfill our purpose of providing you with accessible healthcare services. We will use these to:

   • Validate your identity and establish your patient profile via a KYC process.
   • Book and manage appointments, consultations and encounters, including sending reminders through all supported channels, when necessary.
   • Help improve the web application system as well as our services.

   We will/may collect personal data about you:

   • When you sign application forms, register and/or use our Services or Site, or open an account with us;
   • When you enter into any agreement or contract with SeeYouDoc or provide other documentation or information or accomplish any other similar documents through any of our channels in respect of your interactions with us;
   • When you interact with us, such as via telephone calls (which may be recorded), letters, fax, face-to-face meetings, social media platforms and emails;
   • When you use our electronic services, or interact with us via our application or use services on our website. This includes, without limitation, through cookies which we may deploy when you interact with our application or website;
   • When you carry out transactions through our Services;
   • When you provide us with feedback or complaints;
   • When you participate in our research and surveys;
   • When you visit our stores (if available), apps, and websites;
   • When you submit your personal data to us for any reason.

   The above does not purport to be exhaustive and sets out some common instances of when personal data about you may be collected.

   We may also collect your personal data from our subsidiaries, affiliates and business partners, if you would give them consent to share your personal data with us.

   When you visit our Site, we may collect certain information by automated or passive means using a variety of technologies, which technologies may be downloaded to your device and may set or modify settings on your device. The information we collect may include, without limitation, your Internet Protocol (IP) address, computer/device operating system and browser type, the unique device identifier (UDID), the address of a referring website (if any), and the pages you visit on our website and the times of visit.

   For medical practitioners, we will use these data to validate your identity and verify your credentials and assure our patients that you are qualified and authorized to provide medical services.

   We will obtain your consent before using or processing your data for any purpose other than those mentioned above, or as required by law or our policy.

   We trust that you only provide us data, which is accurate, up to date and not misleading. You should also inform us should there be any changes in the information you supplied. We reserve the right to request for any needed documentation to verify the information you provided.

   If you do not want us to collect the aforementioned information/personal data, you may opt out at any time by notifying our Data Protection Officer in writing about it and sending it to our official email address indicated in the “Contact Us” section below.

6. Processing of Personal Data

   When we process your personal data, it means that we are collecting, recording, storing, modifying, organizing, using, disclosing, transferring, or deleting it according to the law. We can do these activities through computer media and on paper.

   Anyway, we only process your personal data:

   • To perform our contractual obligations to you. We use data about you, such as your name and contact details, when you sign a contract with us, or we must contact you. We also analyze your data to see whether you are eligible for specific products and services.
   • To improve our business and our operations. We analyze and process your usage of our network and facilities to help keep our services going, manage your account, provide you with customer care activities, receive, investigate, and resolve your service-related requests and concerns, monitor the quality and security of our network, train our staff, and plan for our future.
   • To improve our services. We analyze and process how you use and interact with our products and services so we can know how to improve them for you. For instance:
     • We study specific details about your usage, such as how often you use our services.
     • Sometimes, we analyze your personal data using automated processes, such as algorithms, to speed up decisions related to your healthcare services.
     • We also look at the data on transactions between you and our third-party service providers or partners so we can give them advice on how transactions can be improved. When we process personal data for this purpose, we may give aggregated data to these service providers and suppliers. Note that you cannot be identified using this aggregated data.
   • To secure your data and our operations. We have a duty to protect your personal data, as well to prevent, detect, and contain any possible data breaches. Moreover, we also have a duty to make sure that our operations remain secure. To do this, we process your personal data to perform IT security operations, business continuity operations, disaster recovery, and auditing.
   • To develop our relationship with you. We ask you for feedback about our products and services, or record your conversations with us through telephone, live chat, or social media. We may share this with certain members of our staff to improve or customize our products and services for you. We may send you newsletters, emails, calls, or mobile notifications to let you know about these products and services. While you will be given a chance to opt in to these notifications at the very first time we will be getting your personal data, you may later opt out if you no longer want to receive these offers or notifications.
   • To assist public authorities. We may process your personal data to generate statistics based on your use of our network and facilities to help public authorities in the areas of healthcare, disaster management, and other similar projects. As much as possible, we anonymize this information so you can never be identified as an individual. [ROR7]
   • To comply with our legal obligations. We process your data to fulfill our legal obligations under applicable laws and regulations, such as the Data Privacy Act of 2012 (Republic Act No. 10173) and other relevant healthcare regulations. This may include providing necessary information to government regulators and authorities, including compliance with the Department of Health (DOH) and National Privacy Commission regulations and reporting requirements.
   • To establish, exercise, or defend legal claims. We may process your data to prosecute or defend a legal claim.

7. Personal Information Controller

   SeeYouDoc is considered the Personal Information Controller (“PIC”) under the DPA.

   This means that we can determine the purposes for which your personal data can be used. In case your personal data is shared with your consent to a third party under a data sharing agreement, this third party will also be considered a PIC.

8. Disclosure of Personal Data or Sharing of Personal Data

   To ensure that we offer you the best possible service and that we remain competitive in our business, we may share data externally, i.e. outside of SeeYouDoc, with third parties. Whenever we do so, we ensure that this is shared on a confidential basis and only through secure means. All such disclosure will always follow applicable privacy laws and regulations.

   To provide the services you’ve requested, we will share your personal information with our Healthcare Partners/Doctors directly involved in your consultation. If you are one of our Healthcare Partners/Doctors, your personal information will be shared to other users such as patients and their legal representatives, if applicable.

   In some instances, we may need to share your personal data to our agents, subsidiaries, affiliates, partners, and other third parties as part of our operations and for the continued provision of products and services. This means that we might share your information with:

   • Our service providers, contractors, and professional advisors. We may have to share personal data and carry out certain activities in the normal course of our business. These service providers, contractors, and professional advisors help us with activities like:
     • designing, developing, maintaining, debugging, and optimizing our products, services, systems, tools, and applications;
     • providing application or infrastructure services;
     • marketing activities or events and managing customer communications, including mobile attributions and the generation of analytics;
     • preparing reports and statistics, printing materials, and designing products;
     • Performing legal, auditing, or other special services provided by lawyers, auditors or other professional advisors;
     • creating and placing advertisements on apps, websites, social media, and other modes of communication;
     • identifying, investigating, or preventing fraud or other misconduct; and
     • facilitating payment and transfer of funds;
   • Government, supervisory, judicial authorities. To comply with our own legal and regulatory obligations, we may disclose your personal data to the appropriate government, supervisory, and judicial authorities such as:
     • Public authorities, regulators, and supervisory bodies such as the Department of Health and the National Privacy Commission;
     • Judicial and investigative authorities such as the police, public prosecutors, courts, and arbitration and mediation bodies.

   You can see the list of partners here.

   *When using our products and services, you may happen to interact with the products and services of Over the Top (“OTT”) services providers, like media streaming services. While we will not be sharing your personal data directly to these OTT services, they will be collecting personal data through their own products and services. This is governed by their own privacy policies, statements, or notices, so we highly encourage you to read them.

9. Risks Involved

   Risk refers to the potential harm or adverse consequences that may arise from various activities or situations. It also pertains to potential threats to the security and confidentiality of personal information.

   To combat these risks, we implement robust security measures, including but not limited to encryption protocols, access controls, and regular audits. Additionally, we adhere to compliance with relevant privacy laws and regulations, along with continuous monitoring and updating of our privacy practices.

10. Data Protection and Security Measures

    We have been developing our application for some time now and take the security of your data very seriously. That's why we make use of Cloudflare technology to protect and secure our website from DDoS attacks, data breaches and even prevent malicious bots from causing damage to the site or application. As an added measure, we also encrypt the data we store in our database.

    

    Additionally, we are using Cookies to ensure that we provide the best experience for you while you are using SeeYouDoc. Please refer to our Cookie Policy to know more about how and why our website uses cookies.

11. Storage and Retention

    We ensure the secure storage and retention of personal and health information for both individual users and organizational accounts.

    Individual Users (Not Subscribed: Patients and Doctors)

    • Storage
      • Personal Information: Personal data, including user-generated content (UGC) such as photos, reviews, and basic account information (name, email, phone number), will be securely stored in encrypted databases.
      • Medical Records: Medical records and health-related data will be stored in compliance with applicable healthcare regulations and standards to ensure confidentiality and security.
      • Communication Data: Messages and interactions between users and healthcare providers will be stored to maintain a comprehensive history of user activities and interactions.
    • Retention
      • Active Users: For users who actively engage with the platform, their data will be retained indefinitely to provide continuous access to their medical history and related services.
      • Inactive Users: For users who have been inactive for a period of 2 years, their data will be archived. Data will be archived for an additional 1 year before being securely deleted, unless otherwise required by law.
      • Account Deletion: Upon a user’s request for account deletion, all personal data will be archived 30 days after the request. This archived data can be renewed within one year from the start of the archiving process. After one year, all personal data will be permanently deleted. Health data will be anonymized by removing personally identifiable information and assigning a unique row number to each record, unless a Data Processing Agreement (DPA) between SeeYouDoc and the medical institution is in place, or if required by law.

    Organizations (Subscribed)

    • Storage
      • Organizational Data: Organization-specific data, including subscription details, organizational profiles, and aggregated usage statistics, will be securely stored in encrypted databases.
      • User Data: Data related to the users of the organization, including doctors, network, facility, and clinic users, will be stored securely to facilitate the delivery of services and subscription management.
    • Retention
      • For organizations with active subscriptions, all related data will be retained for the duration of the subscription period and for 1 year after the subscription ends to support potential renewals and service continuity.
      • For organizations whose subscriptions have expired, data will be archived for one year following the end of the subscription period. During this one-year archival period, the archived data can be restored. After one year, any data not associated with a renewed subscription will be securely and permanently deleted, except for aggregated and anonymized data used for analytical purposes.

12. Know your Rights and How to Exercise your Rights

    As subject of the personal data, it is important to us that you are aware of your rights provided under the Data Privacy Act of 2012 and provide a convenient way for you to exercise these rights:

    • Right to be informed: You have the right to be notified and furnished with information before your personal information enters the processing system.
    • Right to damages: You have the right to receive compensation for any damages you have sustained due to inaccurate, false, and unlawfully obtained or unauthorized use of your personal data.
    • Right to Access: You have the right to request access to the personal data we hold about you. This allows you to verify the lawfulness of processing and to understand how your information is being used.
    • Right to file a Complaint: If you feel your personal data has been misused, maliciously disclosed, improperly disposed, or that any of your data privacy rights have been violated, you have the right to file a complaint with the National Privacy Commission (NPC).
    • Right to Rectification: If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request corrections or updates.
    • Right to Erasure or Blocking: Under certain circumstances, you have the right to request the deletion of your personal data.
    • Right to Object: As a data subject, you shall have the right to object to the processing of your personal data where such processing is based on consent or legitimate interest.
    • Right to Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to other controllers.

13. Updates and Revisions

    Whenever we make significant changes or update to this Privacy Notice, we will notify you through a prominent announcement on our website.

14. Contact Us

    If you have any questions or concerns about our privacy policy, please contact us at:

    • [email protected]
    • +63 (932) 883 6225
    • 16 Bronze Street, SSS Village, Brgy. Concepcion Dos, Marikina City, 1811

Thank you for choosing SeeYouDoc. We value your trust and look forward to providing exceptional healthcare solutions.