Privacy is important to us. We are committed to maintaining the confidentiality of our patients, visitors, associates/employees and other stakeholders' personal information that we obtain through these various channels. This statement sets out how we, Platinum Medical Centre Pte Ltd (henceforth, “Platinum Medical”), manage personal data in connection with the Personal Data Protection Act (No. 26 of 2012) (“the Act”).

By interacting, submitting information, enrolling or signing up for any products or services offered by us, you agree and consent to “Platinum Medical” collecting, using, disclosing and sharing amongst ourselves your Personal Data and disclosing such Personal Data to our authorised service providers, partners and relevant third parties in the manner set forth in this Privacy Statement.

This statement describes how we collect, use, disclose, process and protect your personal data. When you visit us or request a service from any entity within “Platinum Medical”, your use or continued use of our services shall be deemed as your acceptance and agreement to be bound by the provisions of this Statement.

This statement supplements but does not supersede nor replace any other consents you may have previously provided to us or our partners in respect of your Personal Data and your consents herein are additional to any rights which to any of us may have at law, to collect, use or disclose your Personal Data.

For the purpose of the Act, we are a data intermediary when we process personal data on behalf of and for the purposes of another organisation. At the same time, we also collect, use and disclose personal data in compliance with the Act for purposes that are lawful, reasonable and appropriate.

“Platinum Medical” may, from time to time, update this Privacy Statement to ensure that this Privacy Statement is consistent with our future developments, industry trends and/or any changes in legal or regulatory requirements. Please check back regularly for updated information on the handling of your Personal Data.

Personal Data

In this Privacy Policy, “Personal Data” refers to any data, whether accurate or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which the organisation has or is likely to have access, including data in our records as may be updated from time to time.

Examples of Personal Data you may provide to us include your name, NRIC, passport or other identification number, telephone number, mailing address, email address, transactional data, and any other information relating to any individuals which you have provided to us in any forms you may have submitted to us or through other forms of interaction with you.

1. Collection

We generally collect personal data that

(1) you knowingly and voluntarily provide in the course of or in connection with your medical treatment, employment or job application with us, or via a third party who has been duly authorised by you to disclose your personal data to us (your “authorised representative”), after

a) you (or your authorised representative) have been notified of the purposes for which the data is collected, and

b) you (or your authorised representative) have provided written consent to the collection and usage of your personal data for those purposes, or

(2) collection and use of personal data without consent is permitted or required by the PDPA or other laws.

We shall seek your consent before collecting any additional personal data and before using your personal data for a purpose which has not been notified to you (except where permitted or authorised by law).

We may collect Personal Data in the following ways:

a) When you submit any form, including but not limited to application, declaration, proposal, enrolment or referral forms;

b) When you respond or take part in our surveys, campaigns and other promotional activities;

c) When you interact with our staff or business partners, including patient servicing personnel, and other representatives via email, telephone calls, letters, memos, fax, face-to-face-meetings, digital platforms;

d) When you enter into any agreement or provide other documentation or information in respect of your interactions and transactions with us or when you use our services directly or through our insurance partners whether through our website or mobile applications or pen & paper forms or orally;

e) When you provide your Personal Data (directly or through your employer or our business partners) to use or access some of our services, whether provided in-person or through our website or mobile application(s), such as medical consultation, teleconsultation or claim administrative support;

f) When we receive references from business partners and third parties regardless if the referral came from you;

g) When you submit an employment application or when you provide documents or information including your resume and/or Curriculum Vitae in connection with any appointment under us;

h) When we are performing finance function, such as preparing for tax filing, processing payments, credit notes and refund, billing, accounting and auditing, and other related activities for the maintenance of proper book-keeping of our operations;

i) When your images are captured by us via CCTV cameras while you are within our premises or via photographs or videos taken by us or our designated partners when you attend events hosted by us;

j) When you submit your personal data to us for any other reason; and

k) When you submit personal data relating to a third party (e.g., information of your spouse, children), for the purpose of us offering our products and/or services to that third party. By submitting such information to us, you warrant that you have obtained the consent of the third party to you providing us with their Personal Data for the respective purposes.

l) We emphasise the accuracy of personal data by sighting original personal data whenever required.

1.1 Types of Personal Data We Collect about you

Depending on the nature of the transactions you have with us, the types of personal data we collect about you may include:

a) Your personal information such as name and NRIC;

b) Contact information, such as residential address, email address and mobile phone number;

c) Your medical information when you are using our medical care or claim administrative services, such as medical conditions, prescriptions, medical history and family history;

d) Your financial information such as bank account number, credit card details, insurance policy number and other related payment details;

e) Your personal government-issued identification document numbers such as NRIC/FIN/work permit/birth certificate and passport numbers; as required by healthcare sectoral law for purposes of medical treatment or necessary to accurately establish or verify your identity to a high degree of fidelity;

f) Personal background (such as nationality and race), family background (such as marital status and names of family members), personal profile (such as academic qualification and work experience) and other information necessary for the hiring process or for other special requests.

g) “Platinum Medical” may also collect non-personally identifiable information about you, such as use of our website, internet protocol addresses, browser and computer system information, cookies, invisible pixels, web beacons, and aggregated data related to your use of our platforms.

You are assured that “Platinum Medical” will not collect your Personal Data more than necessary to fulfil one or more purposes that the data is collected for. Whilst we will take reasonable precautions and verification checks to ensure that the Personal Data we have collected from you is reasonably accurate, complete and up-to-date, you should ensure that all Personal Data submitted to us is complete, accurate, true and correct. If there is a change to your contact information such as your address, email address, telephone number, do update us to ensure you will continue to receive communications from us without disruption or delay. Failure to do so may result in our inability to provide you with products and/or services that you have requested.

1.2 Obtaining Consent

Before we collect, use or disclose your personal data, we will notify you of the purpose for doing so. We will then obtain written confirmation from you of your express consent. As far as possible, we will not collect more personal data than necessary for the stated purposes within this notice.

Under certain circumstances, we may assume deemed consent from you when you voluntarily provide your personal data for the stated purpose, e.g. when you request for medical services, whether in-person or through other means.

If you request medical consultation with us on behalf of another individual, you must first obtain consent or show that you are authorised to act on behalf of that individual in order for us to collect, use or disclose his/her personal data. Where consent can be obtained, that individual must be notified of the purposes for the collection, use or disclosure of his/her personal data.

However, we may collect, disclose or use your personal data pursuant to an exception under the Personal Data Protection Act or other written law such as during the following situations:

• To respond to an emergency that threatens your life, health, or safety or that of another individual;
• Necessary in the national interest, for any investigation or proceedings.

We shall not be able to provide the medical service or offer you employment in the event of failure to provide the personal data as per the stated purpose or absence of your consent.

2. Purpose and Usage of Data

Personal Data may be shared among our subsidiaries, affiliates, partners and third parties to enable us to provide service to you and for our business purposes. We may use the Personal Data in one or more of the following purposes:

2.1 Provision and Improvement of Services

a) Providing you with our services, such as managed healthcare solutions, medical services and claims processing whether through our website, mobile application or otherwise;

b) Providing customer service and administrative support such as responding to, processing and handling your enquiries, requests, feedback and complaints, issuing letters of guarantee, administrating insurance coverage and processing claims and settlement of bills and other credit-related activities;

c) Providing you with information that may be of your interest, such as publications, events, news and promotional materials relevant to your business, potential needs and purchases;

d) Generating reports and performance of analytics for the purposes of developing or improving our products, services, security, service quality and marketing strategies;

e) Verifying your identity;

f) Requesting feedback or participation in surveys as well as conducting market research;

g) and/or purposes which are related to the aforesaid.

2.2 Other Business and Legal Purposes

a) Office management, operations, and administration purposes and for independent and conflict clearance, due diligence and background checks in accordance with legal, regulatory and professional requirements;

b) Performing human resource management, training, and career development;

c) Assessing your or your organisation’s suitability as an employee, external services provider, business partner, or vendor for “PLATINUM MEDICAL”;

d) Managing and preparing reports on incidents or accidents;

e) Managing the safety and security of our premises and services including but not limited to carrying out CCTV surveillance and conducting clearances;

f) Preventing, detecting, and investigating crime, including fraud and money laundering or terrorist financing and analysing and managing commercial risks;

g) Carrying out our obligations arising from any contracts entered into between you and us;

h) Complying with legal obligations and regulatory requirements;

i) Protecting and enforcing our contractual and legal rights and obligations;

j) and/or purposes which are related to the aforesaid.

These purposes may also apply even if you do not maintain an account with us or your account or relationship has been terminated with us. Arrangements are in place to ensure the security of any personal data shared.

3. Disclosure

Subject to the provisions of the applicable law, we may disclose your Personal Data to parties mentioned below (examples provided are not exhaustive) to achieve one or more purposes listed in section 2.

a) Parties to whom disclosure is necessary to provide our services to you:

• “PLATINUM MEDICAL” and its affiliates
• Clinics, hospitals, medical practitioners, and specialists
• Associated medical service providers such as laboratories, imaging and diagnostics services
• Our business partners such as insurance companies
• Banks, payment card processing companies and other financial institutions
• Providers of goods or services such as IT services and courier services

b) Parties to whom disclosure is necessary for the management, operation and administration of our business:

• Providers of professional services such as auditors, lawyers, and consultants
• Commercial service and training providers

c) Parties to whom disclosure is necessary or in our good faith belief that such disclosure is necessary to:

• Fulfill our contractual, legal, and regulatory obligations,
• Comply with legal process,
• Respond to any claim or investigation and protect our rights, property or personal safety:
• Government agencies and regulatory authorities such as court, tribunal, Ministry of Health, Ministry of Manpower, IRAS, Police Force
• Professional advisers such as accountants and lawyers

We will use our best endeavours to ensure that your personal data is protected by such third parties or cause them to be bound to hold your data in confidence such as by entering a legally binding instrument with them.

3.1 Overseas Transfers of Personal Data

If there is a need for us to transfer your personal data to an organisation outside of Singapore, whether it is within “PLATINUM MEDICAL” or not, we will ensure that the standard of data protection in the recipient country is comparable to that of Singapore’s PDPA. If this is not the case, we will enter into a contractual agreement with the receiving party to accord similar levels of data protection as that in Singapore.

4. Security

To safeguard your personal information, all electronic storage, hosting, processing, transmission and backup (for the purpose of disaster recovery or otherwise) of personal and other information is secured with appropriate administrative, physical and technical security measures.

While we take reasonable efforts to maintain the confidentiality and security of your personal data, we cannot guarantee that any information that is transmitted or stored electronically is completely secure or that no harmful code will enter our website (for example viruses, bugs, Trojan horse, spyware, adware).

For users with username and password login, you undertake to keep the username and password secure and confidential and shall not disclose or permit them to be disclosed to any unauthorised person and to inform us as soon as reasonably practicable if you know or suspect that someone else has access to your username and password or believe that the confidentiality has been compromised in any way or that actual or possible unauthorised transactions have taken place. We are not liable for any damage from any security breaches on unauthorised and/or fraudulent use of your username and password.

5. Retention

We will retain your personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required for legal or business purposes. Any personal data which is no longer needed for legal or business purposes will be destroyed or anonymised according to our document retention guidelines.

6. Usage of Cookies and Analytical Tools

Our website uses cookies. By using our website, you consent to our use of cookies which will provide you with a more personalised experience. You can choose to turn off all cookies. If you turn the cookies off, you will not have access to many features that make your user experience more efficient and some of our services may not function properly. Please refer to your browser’s documentation to check if the cookies have been enabled on your computer or to request not to receive cookies.

We use Google Analytics to analyse the use of our website. Google Analytics generates statistical and other information about our website use by means of cookies, which are stored on users’ computers. The information generated relating to our website is used to create reports about the use of our website. Google will store this information. In addition, Google Analytics is also used for remarketing and behavioural targeting. We advertise on third-party websites to you after you have visited our website. We, and our third-party vendors, use cookies to inform, optimise, and serve ads based on your past visits to our website. If you want to opt out of Google Analytics, you can download and install the add-on for your web browser at https://tools.google.com/dlpage/gaoptout.

We may also include third party links on our website for your convenience and information. These linked sites have separate and independent privacy policies and hence we undertake no responsibility or liability for the content and activities of these linked sites and we encourage you to consult the privacy notices of their sites.

7. Access, Correction and Withdrawal

We may, upon written request, allow you to view your stored personal information and how it may have been used and/or disclosed by us in the past year, subject to legal requirements. We reserve the right to charge a reasonable administrative fee for this service. We will respond to such request within 30 days of receipt of your written request.

Kindly write to DPO@PMCYMED.COM if any personal information which we hold about you needs to be corrected or updated.

You may, subject to applicable law, regulations, and professional standards, at any time give us reasonable written notice of your withdrawal of consent to collect, use, or disclose the personal information. If you choose to withdraw your consent to any or all or the disclosure of your personal data, we will not be in a position to continue providing our services to you. Withdrawal may also result in the termination of any agreement you may have with us.

8. Enquiries

If you require more information relating to handling enquiries, feedback or complaints regarding PMC’s personal data protection policies and procedures, or require amendments or wish to withdraw your consent, please contact us at:

Data Protection Officer

Platinum Medical

504 Yishun St 51,

# 01-02 MSCP,

Singapore 760504

Email: DPO@PMCYMED.COM

If your personal data was provided to us by a third party, kindly contact that organisation or your representative to make such a request or query on your behalf.