Data Privacy Notice
PRIVACY STATEMENT
Health Metrics, Inc.'s Commitment to Data Privacy
As a healthcare organization HMI seeks to uphold its commitment to protection of our patient's
personal information in compliance with requirements of the Data Privacy Act of 2012, its
Implementing Rules and Regulations, National Privacy Commission issuances, and other
relevant laws. HMI also commits to practicing utmost medical professionalism and ethics in
recognizing that patient's data is considered private and is bounded by the physician-patient
privilege of confidentiality.
Health Metrics, Inc. collects your personal data to be used for the following purpose/s:
- To meet your medical and ancillary needs
- To liaise with other health professionals and HMOs;
- For collaboration with other medical health provider, where necessary, and upon your consent;
- In aid of processing your application to any job opportunity you may have applied to
- For purposes required by law.
- Basic personal information such as name, age, sex, birthday, nationality, citizenship, religion, occupation, current employment, address, email address, telephone/mobile number, photograph, thumbmark;
- Current medication or treatments used by patients;
- Previous/current medical history, including where relevant, a family medical history;
- The name of Health Maintenance Organization (HMO)
- The name of any health service provider or medical specialist, where applicable;
- The results of any laboratory tests and ancillary services which you provide; and,
- Any other information that will assist us in providing you with better health care.
As such there are circumstances that will necessitate for HMI to do share your personal
information if:
- When it is required or permitted by law
- Shared with service providers designated as Personal Information Processors (PIP) acting on HMI's behalf and have agreed to protect the confidentiality of the data
- Shared with other HMOs and/or Companies that you have been informed will be shared with your personal information and that you have given your consent to
The confidentiality and security of your information is important to us. All information captured by
the Clinic is always stored securely and will not be provided to any unauthorized third parties. We
also put in effect safeguards such as:
- Keeping your information using a secured server behind a firewall, encryption, and security controls.
- Restricting access to your information to qualified and authorized personnel.
- Using Secure Socket Layer (SSL) to establish an encryption link between a web server and a browser ensuring your information remains private and integral.
- We engage with accredited third-party providers for the safekeeping of physical patient records. Such engagement is governed by a written Data Processing Agreement, requiring the third party to implement organizational, physical, and technical security measures.
- All physical patient records that have reached the end of their retention period shall be disposed of through secure shredding using cross-cut shredders. Disposal is being supervised by the Records Custodian and documented in the Destruction Log to ensure compliance with the Data Privacy Act and protect patient confidentiality.
- Your information may continue to be stored, processed, and/or shared for seven(7) years from the conclusion of your last consultation with the Clinic or until the expiration of the retention limits set by applicable law, whichever comes later.(DOH Department Circular No. 2021-0226)
We recognize and uphold the following rights of data subjects:
- The right to be informed about how their data is collected, used, and stored.
- The right of access to their personal data.
- The right to rectification of inaccurate or incomplete data.
- The right to erasure ("right to be forgotten") where applicable.
- The right to restrict processing under certain conditions.
- The right to data portability.
- The right to object to data processing.
- The rights in relation to automated decision-making and profiling.
- By providing your electronic signature, you acknowledge and consent to HMI's use of such electronic signature for purposes related to your medical evaluation and healthcare transactions. This includes the affixing of your electronic signature to your medical certificates, medical clearances, consent forms, and other PEME-related medical documents where your signature is required or appropriate to document your acknowledgment, consent, authorization, or acceptance.
- Depending on the electronic-signature system used, HMI may process your signature, name, date and time of signing, document details, and authentication or audit information for purposes of identity verification, documentation of consent or authorization, maintaining transaction records, and compliance with legal and regulatory requirements.
- Electronic signatures and related records shall only be accessed by authorized HMI personnel and service providers who have legitimate business purposes for processing such information. These records shall be securely stored, retained only for as long as necessary for the purposes stated above and in accordance with applicable laws and HMI's records retention policies, and securely disposed of when no longer required.
For your concerns regarding data privacy, you may reach our Data Privacy Officer at
dpo@healthmetrics.com.ph or at 0917 805 4601.
Revisions to policy
This policy is reviewed regularly and may be revised from time to time, as we alter the way we use
your information, new features are added to the site, or the legislation changes.
Patient Registration