1. Overview
This Privacy Policy explains how MedicalPro collects, uses, and protects information when clinics and healthcare professionals use the Platform.
MedicalPro is committed to protecting personal data in accordance with:
- Singapore Personal Data Protection Act (PDPA)
- Philippine Data Privacy Act of 2012
- Applicable healthcare confidentiality laws
MedicalPro may collect:
Clinic Information
- Clinic name
- Business registration details
- Clinic address
- Authorized representative details
- Billing information
User Information
- Staff accounts
- Login Credentials
- Activity logs
Patient Data (Uploaded by Clinics)
- Name
- Contact Details
- Medical History
- Prescriptions
- Laboratory results
- Consultation notes
- Clinical documentation
Patient data is provided and controlled by the Clinic.
3. Purpose of Processing
Information is processed for purposes including:
- Healthcare record management
- Appointment coordination
- Patient communications
- Secure document storage
- System security monitoring
- Operational analytics
MedicalPro does not sell patient data.
4. Data Security
MedicalPro implements administrative, technical, and physical safeguards to protect data.
These may include:
- Encrypted data transmission
- Secure authentication systems
- Role-based access controls
- Monitoring and logging mechanisms
- Secure cloud infrastructure
Security safeguards are periodically reviewed.
5. Data Sharing
MedicalPro does not disclose patient data to third parties except:
- Cloud infrastructure providers
- System service providers bound by confidentiality obligations
- Legal compliance requirements
6. Data Subject Rights
Patients may request:
- Access to their data
- Correction of inaccurate records
- Deletion where legally permissible
Requests should normally be directed to the Clinic, which acts as the data controller.
MedicalPro may assist the Clinic in responding to such requests.
7. Data Retention
Patient data is retained only as long as necessary for healthcare services and legal compliance.
Upon termination of services, data may be deleted according to contractual obligations.
Privacy inquiries may be directed to:
MedicalPro Group Pte Ltd
Email: privacy@medicalprosoftware.com
1. Overview
This Privacy Policy explains how MedicalPRO collects, uses, and protects personal data when a Patient uses MyHealth. MedicalPRO is committed to protecting personal data in accordance with the Singapore Personal Data Protection Act (PDPA), the Philippine Data Privacy Act of 2012 (RA 10173), and, where applicable, the General Data Protection Regulation (GDPR).
Consistency across the Platform — MedicalPRO applies the same data protection standards across the entire Platform — Clinic, MyHealth, Association Hub, Vendor Platform, and Network — rather than different standards for different modules. Where GDPR-equivalent protections (such as the right to data portability, described in Section 6) exceed what Philippine or Singapore law strictly requires, MedicalPRO extends them to all Patients as a matter of policy, not only to those located in the European Economic Area.
Account Information
- Name and contact details
- Date of birth and sex
- Login credentials
Health Information Shared by a Clinic
- Consultation notes and diagnoses
- Prescriptions and medication history
- Laboratory and diagnostic results
- Medical certificates and other clinical documents
Health Information Entered Directly by the Patient
- Self-reported medical history, allergies, or medications
- Records of care received outside the MedicalPRO network of Clinics
Usage Information
- Appointment booking activity
- Activity logs and access history
3. Purpose of Processing
Information is processed for purposes including providing the Patient with access to their own health records, facilitating appointment booking and communication with Clinics, enabling document delivery, maintaining system security, and, where the Patient has provided separate, specific consent, supporting anonymized, aggregated health data analytics as described in Section 9.
MedicalPRO does not sell patient data.
4. Data Security
MedicalPRO implements administrative, technical, and physical safeguards to protect personal data, including encrypted data transmission, secure authentication systems, role-based access controls, monitoring and logging mechanisms, and secure cloud infrastructure.
MedicalPRO operates a single-tenancy architecture: each Clinic's data environment is fully isolated, and a Patient's MyHealth account draws only the records that Clinic has been authorized to share with that specific Patient. Security safeguards are periodically reviewed.
5. Data Sharing
MedicalPRO does not disclose a Patient's personal data to third parties except:
- To the Clinic(s) the Patient has an active care relationship with
- Cloud infrastructure and system service providers bound by confidentiality obligations
- Where required by legal compliance
MedicalPRO does not share a Patient's identifiable health information with the Association Hub, Vendor Platform, or Network modules. Any use of health information in connection with those modules occurs only in anonymized, aggregated form, as described in Section 9.
6. Data Subject Rights
A Patient has the right to request:
- Access — a copy of their personal data
- Correction — updates to inaccurate records
- Deletion — removal of their data where legally permissible
- Portability — a copy of their data in a portable, commonly used format (consistent with GDPR-equivalent protection applied across the Platform)
Requests relating to a Patient's MyHealth account, or to information the Patient entered directly, may be submitted to MedicalPRO at privacy@medicalprosoftware.com.
Requests relating to clinical records originally created by a Clinic should be directed to that Clinic in the first instance, as the Clinic is the data controller for records it created. MedicalPRO will assist the Clinic in responding to such requests where appropriate.
7. Data Retention
A Patient's MyHealth account and the data associated with it are retained for as long as the account remains active. If a Patient closes their MyHealth account, their personal data will be deleted within 30 days, except where MedicalPRO is required to retain certain records for legal compliance purposes.
This does not affect the Clinic's independent obligation to retain its own copy of the clinical record in accordance with applicable healthcare record-keeping law.
8. Automated Communications
MyHealth may send automated messages including appointment reminders, confirmation of new documents being available, and account security notifications. These are operational communications necessary for the functioning of the service and are not marketing communications.
9. Anonymized Data Analytics
With a Patient's separate, specific, and freely given consent, de-identified and aggregated data derived from the Patient's health information may be used by MedicalPRO to support healthcare analytics, research, and platform improvement.
Data used for this purpose is anonymized such that it cannot reasonably be used to re-identify the Patient. This consent is optional, is not required to use MyHealth, and may be withdrawn by the Patient at any time without affecting their ability to continue using the Platform.
Privacy inquiries may be directed to:
MedicalPRO Group Pte Ltd
Email: privacy@medicalprosoftware.com
