Personal Data Protection Advisory
At MyHealth Medical Centre, we are committed to protecting your personal data in compliance with the Personal Data Protection Act 2012 (PDPA). Below are key points of our policy and practices regarding the collection, use, and disclosure of personal data.
​
​Thank you for trusting MyHealth Medical Centre. We are dedicated to safeguarding your personal data while delivering quality care.
1. Purpose of Collecting Personal Data
We collect your personal data to provide safe, efficient, and comprehensive medical care. This includes:
-
Registration and identification
-
Medical examinations, treatment, and follow-up care
-
Administrative processes, such as billing and claims submission
-
Communication regarding appointments and results
2. Consent
Your personal data is collected, used, and disclosed only with your consent. This includes deemed consent:
-
By conduct: When you provide personal data voluntarily for medical care.
-
By necessity: When required to perform services like referrals to specialists or hospitals.
You may withdraw your consent at any time by notifying us. Please note that certain uses of your data may still be required by law.
3. Data Use for Secondary Purposes
We may use your personal data for secondary purposes, such as:
-
Quality assurance and internal audits
-
Research, anonymized where possible
-
Notifications regarding services that may benefit your health
We will seek your express consent for secondary uses that are not directly related to your medical care.
4. Retention of Data
Your personal data is retained in accordance with:
-
Legal requirements under healthcare regulations
-
Guidelines for retention periods of medical records
We ensure that your data is securely disposed of when no longer needed.
5. Data Sharing
We may share your personal data with:
-
Other healthcare providers (e.g., for referrals)
-
Government bodies when mandated by law (e.g., for public health reporting)
6. Protection of Data
We employ stringent security measures to protect your data, including:
-
Secure electronic storage and data access controls
-
Regular reviews of data protection practices
7. Access and Correction
You may request access to or correction of your personal data. Please contact us for such requests, which will be processed in compliance with the PDPA.​
8. Do Not Call (DNC) Provisions
We will not send marketing messages to your contact numbers without your clear and unambiguous consent. Appointment reminders and care-related messages are exempted from the DNC Registry requirements.
9. Data Breach Notification
In the unlikely event of a data breach, we will promptly assess and notify affected individuals and the relevant authorities, as required by the PDPA.
10. Accountability
We have a designated Data Protection Officer (DPO) to oversee compliance with the PDPA. For queries or feedback, please contact our DPO at:
admin@myhealthmedctr.sg