Centre Medical Internationale in compliance with Data Privacy Act 2012 (DPA), CMI protects and manages the privacy of our patients and employees.
Collection
CMI collects your personal information through multi-faceted collection channels including but not limited to physical personal collection, through website appointment portal, social media interaction, or through our affiliated third-party information processors.
Uses and Purpose
CMI uses the information contained in the database primarily for managing and administering the medical diagnostic tests requested by patients directly or via their employers to complete their requirements. It is necessary for our authorized employees and contractors to acquire your information to properly carry out their mandates which includes but shall not be limited to the following functions; actual medical treatment, evaluation and preparation of medical results, medical record storage, billing and payment purpose, legal and dispute settlement, regulatory compliance, and as applicable, marketing purposes considering that express consent is given by you, the data subject.
No persons other than CMI, or employees, agents, and CMI’s 3rd party health care providers of those persons are authorized to access patient information held in the program database. All persons who can access the information are required to maintain its confidentiality and comply with privacy laws.
Personal Data Collected
CMI in compliance with Data Privacy Act of 2012 abides to data privacy principle of Transparency, Legitimate Purpose and Proportionality. In collecting your Personal Information, it is our duty to inform you and make you aware that you are sharing personal information, that we collect only personal information for its intended purpose and we only collect information that is only necessary to carry out the service we provide to you.
Rights of Data Subject
As a Data subject, you have the following rights in accordance with the Data Privacy Act of 2012 as follows:
- Right to be informed (IRR, Section 34. a)
- Right to object (IRR, Section 34. b)
- Right to access (IRR, Section 34. c)
- Right to data portability (IRR, Section 36)
- Right to be corrected (rectify) (IRR, Section 34. d)
- Right to file a complaint (IRR, Section 34.a.2)
- Right to damages (IRR, Section 34.f)
- Right to erasure or blocking (IRR, Section 34. e)
- Transmissibility of Right (IRR, Section 35)
Protection
How do we protect your personal information?
We value your privacy, so we maintain, enforce, and implement organizational, physical, technical, electronic, and procedural security measures that ensure the integrity, confidentiality, and security of your personal information.
We protect your information by implementing safeguards, such as but not limited to the following:
- Access and use your personal information only to the extent necessary in order to administer the healthcare benefit;
- Use a secured server maintained with firewall, encryption, anti-virus, and other appropriate security controls;
- Restrict access to your information to only authorized personnel who will handle it with strict confidentiality;
- We have confidentiality agreements with contracted parties that receive, process, and store non-public personal, health, and financial (when applicable) information about you;
- We perform data privacy and security assessment with contracted parties to ensure that non-public personal, sensitive, and privileged information are secured and appropriate controls are enforced by the contracted parties; and
- Other security, organizational, and physical measures that we may introduce in the future further strengthen the protection and security of your personal information.
Retention and Disposal
Your personal data will be retained or stored for as long as the purposes for which they are being processed subsist and/or have not been satisfied. We will retain and use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Information provided to us shall be disposed of or discarded in a secure manner that would prevent further processing, unauthorized access, or disclosure to any other party, or prejudice your interest.
In your own volition, you may also request the deletion of your personal information by sending a written request addressed to our Data Protection Officer to which information is provided below. In the event of a request for deletion or withdrawal of consent, please be informed that CMI may no longer be able to provide you with continuous support depending on the extent of the request.
Risks
The data breach is inevitable in today’s times. We may not avoid it but we try to mitigate the risk by placing necessary security measure. Also by being compliant with the Data Privacy Act 2012 and by following standard data protection protocol.
Disclosure
In treatment or availing of CMI services, your personal information may be shared to
healthcare team members who are involved in the management of your care including CMI’s service providers and partners, authorized employees and to other applicable parties such as regulatory authorities, like the Department of Health; your employer, your Health Maintenance Organization (HMO), and/or insurance provider for the payment of my bills. CMI may share personal information with the Marketing Department for marketing and promotional campaigns as long as the same is relevant to your disclosure and considering that you have expressly consented to the same.
DPO Contact Information
For any queries, clarifications, or requests on any aspect of this Data Privacy Statement, the exercise of your rights pertaining to your personal information or to provide any feedback that you may have about our processing of personal information, you may also email us at dpo@cminternationale.com which is manned during business hours.
You may also complain to the National Privacy Commission (NPC). For further details, please refer to the NPC’s website.
CHANGES TO OUR DATA PRIVACY STATEMENT
We may modify or amend this Data Privacy Statement from time to time to keep up with any changes in relevant laws and regulations applicable to us or how we collect, use, protect, store, share or dispose of your personal information. Any relevant updates will be posted on the CMI website.
LATE POLICY
If you arrive more than 15 minutes late, you have missed your appointment. This is to prevent delays in the physician’s sessions and to ensure fairness for patients who arrived on time. You may choose to be moved to the end of the patient queue or you may rebook your appointment to another day.
We appreciate the effort our patients make to arrive on time and therefore do our best to run as close to booked appointment times as possible. When the clinician is running late due to long consult sessions our reception staff will advise you upon arrival.
CANCELLATION POLICY
If you need to cancel your appointment, please do so the the earliest possible time to free up the slot for other patients. Same-day cancellations or no-shows will be billed the full amount of the consult.
