Medicus Philippines Inc. (MPI) is committed to protect your privacy and ensure that all personal data collected from you are processed pursuant to R.A. 10173 (Data Privacy Act of 2012) and other relevant legislation.
Personal data we process:
Depending on your transaction with MPI, we may collect your full name, contact details, address and e-mail. Our CCTV cameras may also capture your image, actuations and whereabouts while you are in our premises.
Purpose of Processing:
MPI processes your personal data for the purpose of providing you with the services you avail, assisting you through our customer service, sending you updates through our marketing activities, complying with regulations and regulations and ensuring the security of our premises.
Lawful Bases:
We process your personal information based on your consent or to fulfill our contract with you. Further, in certain situations, we may process your personal information when its necessary for our legitimate interests, provided those interests are not overridden by your fundamental rights and freedom
Storage:
Physical records containing your personal data are securely stored within company premises while digital records containing your personal data are stored in our computers and hosted in a secure server facility.
Data Transfer:
We may share your personal information to our head office and our authorized personnel in relation to the Purposes declared in this Privacy Notice. We may also share your personal data in compliance with applicable laws or when required by a competent court, relevant government office or agency pursuant to DPA legislation and other applicable rules and regulations pertaining to data privacy.
Retention:
We will keep your personal information for a maximum period of five (5) years from the transaction date unless certain government regulations (e.g. BIR) require us to keep your data for a longer period. CCTV footages are kept for a maximum period of two (2) weeks unless it is necessary to preserve and maintain the same for a longer period in line with an investigation or a case.
Risk:
It is the chance that a harmful incident may happen. In the context of personal data risk, refers to the chance that someone might collect, use, disclose or access your personal data in an authorized manner or in a way that may cause you harm. Nonetheless, we have implemented security measures to minimize, monitor, and control the risk of exposure of your personal information.
How We Protect Your Personal Data:
We implement industry – standard organizational, technical and physical security measures to protect the confidentially, integrity and availability of your personal data. These include, among others, appointing a Data Protection Officer, conducting data privacy training, instituting policies for data protection, storing physical records in a locked and secured place accessible only to authorized personnel, implementing role-based access in our systems, performing periodic reviews of access rights, deploying firewalls equipment and similar network devices to protect our systems and network, regularly running vulnerability scans and using only secure channels for transmission.
Disposal:
Physical records are shredded or buried for disposal, while electronic files are securely erased. When appropriate, anonymization techniques are performed to permanently remove identifiable information from our records. In all cases we will make sure that the personal information is destroyed in a way that prevents unauthorized people from accessing, processing or retrieving it.
Your Data Privacy Rights:
You have the right to be informed, to access, update or correct your personal data, withdraw your consent, request the disposal of your personal data subject to regulatory limitations, request a copy of your data in an electronic format, claim damages for violations of your data privacy rights and raise data privacy concerns. If you intend to exercise any of your data privacy rights, feel free to reach out to our Data Protection Officer through: medicusphilsdpo@medicus.ph.