Privacy Policy

D&D Medical Clinic and Infirmary ("the Clinic," "we," "us," or "our") operates this booking and patient-records platform ("the Site"). This Privacy Policy explains what personal and health information we collect from patients who use the Site, why we collect it, who can see it, and the rights you have over it under the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173, "the DPA").

1. Information we collect

When you register a patient account, we collect:

• Your full name, date of birth, and sex
• Your phone number and address (region, province, city, barangay, street)
• Your email address and a password (stored only in encrypted/hashed form — we never store or can see your plain-text password)
• A profile photo, used so clinic staff can confirm your identity at check-in

As you use the Clinic's services, we also collect and record health-related information generated during your visits — vitals, chief complaints, diagnoses, prescriptions, laboratory and ultrasound requests and results, and payment/receipt records for services rendered. This is "sensitive personal information" under the DPA, and we only collect it to provide you with clinical care and to keep an accurate medical record, as you consent to when you register.

2. Why we collect it

We use your information to:

• Create and manage your patient account and appointments
• Let clinic staff and your treating doctor provide you with care and maintain your medical record
• Process laboratory/ultrasound requests and record payments for services rendered
• Send you appointment- and results-related notifications
• Verify your identity and keep your account secure

3. Who can see your information

Access inside the Clinic is role-based and limited to what each staff member needs to do their job:

• Your treating doctor(s) can see your medical records and appointment history.
• Secretaries can see records for patients of the doctor(s) they are assigned to, unless a Secretary has been separately granted clinic-wide access by an Administrator.
• Medical Technologists/Radiologic Technologists can see the specific laboratory or ultrasound requests assigned to them.
• Administrators have oversight access needed to manage clinic operations.

We do not sell your personal information, and we do not share it with advertisers or data brokers. The only outside parties involved are infrastructure/technology providers that help the Site function (for example, the service that delivers our web fonts) — see our Cookie Policy for details. None of these providers use your data for their own advertising or analytics.

4. How long we keep your information

We retain your account and medical records for as long as your account is active and for as long as reasonably necessary afterward to comply with medical record-keeping obligations and to resolve any billing, legal, or clinical follow-up matters.

5. How we protect your information

• Passwords are never stored in plain text — only a one-way hash is kept.
• Access to patient records is restricted by role and, for staff, by assignment to specific doctors.
• Connections to the Site are encrypted in transit.

6. Your rights under the Data Privacy Act

As a data subject, you have the right to:

• Be informed that your personal data is being processed (this notice)
• Access your own personal and medical data held by the Clinic
• Request correction of inaccurate data
• Object to or request erasure/blocking of your data, subject to legal and clinical record-keeping requirements
• Data portability, where technically feasible
• Be indemnified for damages from unauthorized use of your data
• File a complaint with the National Privacy Commission (NPC)

To exercise any of these rights, contact us using the details below.

7. Contact us

For any privacy questions or to exercise your rights under the DPA, reach us at:

D&D Medical Clinic and Infirmary
Purok Duranta, Union, Monkayo, Davao de Oro
+63962-931-3446

8. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do.