🔒 Privacy Policy

🏥 1. Overview & Our Commitment

St. Raphael Medical Center, Inc. ("SRMCI", "we", "our", or "the hospital") takes your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect the personal information you provide when you visit our website or avail of our services.

This policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, its Implementing Rules and Regulations (IRR), and relevant issuances of the National Privacy Commission (NPC) of the Philippines.

📋 2. Information We Collect

We may collect the following types of personal information when you interact with our website or services:

Information you provide directly:

• Full name, contact number, and email address (appointment requests, contact forms)
• Date of birth, gender, and medical concern (appointment booking)
• Feedback, testimonials, or inquiries you submit through the website
• Job application details submitted through our Careers page

Information collected automatically:

• Browser type, device type, and operating system
• IP address and approximate geographic location
• Pages visited, time spent on pages, and navigation patterns
• Cookie identifiers and session data (see Section 4)

🎯 3. How We Use Your Information

We use the personal information we collect only for legitimate purposes, including:

• Processing and confirming appointment requests
• Responding to your inquiries and providing information about our services
• Sending appointment reminders or follow-up communications (with your consent)
• Improving the functionality and content of our website
• Evaluating job applications for open positions
• Complying with legal obligations and hospital accreditation requirements
• Protecting the safety and security of patients and staff

We will not use your personal information for any purpose beyond what is stated in this policy without obtaining your separate, prior consent.

🍪 4. Cookies & Tracking Technologies

Our website uses cookies to enhance your browsing experience and ensure the proper functioning of our services. A cookie is a small text file stored in your browser.

Types of cookies we use:

• Strictly Necessary Cookies: Required for basic site functions such as navigation and session management. These cannot be disabled.
• Preference Cookies: Remember your cookie consent choice and other browsing preferences.
• Analytics Cookies: Help us understand how visitors use our website so we can improve it (only with your consent).

We do not use cookies for advertising or to sell your personal data to third parties.

🤝 5. Data Sharing & Third Parties

SRMCI does not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:

• Healthcare providers: Doctors, specialists, or partner institutions involved in your care, with your consent
• Government authorities: When required by law, court order, or regulatory mandate (e.g., PhilHealth, DOH reporting)
• Service providers: Trusted IT providers who assist in operating our website, under strict confidentiality agreements
• Emergency situations: When disclosure is necessary to protect your life or the life of another person

Any third party who receives your data is required to handle it in accordance with the Data Privacy Act and our privacy standards.

🗂️ 6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

• Medical records: Retained in accordance with DOH guidelines and applicable Philippine law
• Appointment inquiries: Retained for up to 1 year from the date of the appointment or last contact
• Website contact form submissions: Retained for up to 6 months
• Job applications: Retained for up to 1 year; or longer if you are hired
• Cookie data: Session cookies expire when you close your browser; preference cookies expire after 1 year

After the retention period, personal data is securely deleted or anonymized.

⚖️ 7. Your Rights Under the Data Privacy Act

As a data subject under R.A. 10173, you have the following rights with respect to your personal information:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 10.

🛡️ 8. Data Security

SRMCI implements appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, misuse, or disclosure. These include:

• Restricted access to personal data on a need-to-know basis
• Secure server configurations and regular security reviews
• Staff training on data privacy obligations
• Documented data breach response procedures in compliance with NPC Circular 16-03

In the event of a personal data breach that may seriously harm your rights and freedoms, we will notify the NPC within 72 hours and inform affected individuals as required by law.

👶 9. Children's Privacy

Our website is not directed at children under the age of 13. We do not knowingly collect personal information from children without parental consent. If you believe your child has submitted personal data to us without your consent, please contact our DPO immediately so we can take appropriate action.

When processing medical information of minors, we ensure that consent is obtained from a parent or legal guardian in accordance with applicable law.

📬 10. Contact Our Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact our designated Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) at www.privacy.gov.ph or call their hotline at (02) 8234-2228.

This Privacy Policy may be updated from time to time to reflect changes in our practices or legal requirements. We will post the revised version on this page with an updated date.