Personal Data Protection Policy

Amaris B. Clinic values the privacy of every individual and are committed to protect the personal data we collect in accordance with the principles set out in this Policy.

In accordance with the Personal Data Protection Act (“PDPA”), this Personal Data Protection Policy (“Policy”) describes how we may collect, use, disclose and manage your personal data. For general information on Personal Data Protection, please visit the Personal Data Protection Commission (“PDPC”) website.

Should there be other regulatory or statutory requirements, such as Human Organ Transplant Act, Infectious Diseases Act, etc. which Amaris B. Clinic have obligations or mandated to comply with them as well and in the event of inconsistencies between those written laws and PDPA, the provisions of those other written laws shall take precedence over PDPA.

Any terms used in this document, such as “individuals”, “personal data” or “reasonable”, which are also defined in the PDPA, should be understood to take on the definition or interpretation as provided by the PDPA or PDPC’s Advisory Guidelines documents.

Personal data is defined as “data, whether true or not, about an individual who can be (i) identified from that data, or (ii) from that data and other information to which the organisation has or is likely to have access to.” This may include your full name, identification number, passport, photograph, video, mobile, telephone number, personal email address, thumbprint, DNA profile, as well as name and residential address of any individual which you may have provided us.

The PDPA does not apply to: (a) Business contact information, defined as an individual’s name, position name or title, business telephone number, business address, business electronic mail address, business fax number and any other similar information not provided solely for the individual’s personal purposes. (b) Personal data that is anonymised, i.e. identifying information is removed such that the remaining data does not identify any particular individual. The PDPC will consider the data anonymised only if the possibility of re-identification is trivial. (c) Personal data that is falsified with the intent to commit fraud.

The PDPA recognise that a balance needs to be struck between the needs to protect personal data and the need of organizations to collect, use or disclose personal data. Hence, in meeting those obligations, PDPA considers what is reasonable person would consider appropriate in the circumstances when they undertake any action that is subject to data protection.

By applying this Policy, you consent to our collection, use and disclosure of your personal data for the purposes that a reasonable person would consider appropriate in the circumstances.

Consent for the collection, use or disclosure of your personal data can be provided either in the form of expressed consent or deemed consent. Your provision of personal data to us is voluntary and you are deemed to consent to our collection, use or disclosure of your personal data under which it was collected. If you have consented to our disclosure of your personal data to other organisation for a particular purpose, they will use your personal data only for the purpose you have consented to. 

If you provide the personal data belonging to others, you warrant that you have informed the individuals of the purposes for which we are collecting their personal data and that they have consented to your disclosure of their personal data to us for those purposes.

Your consent may not be necessary or required in some circumstances as provided in the “Second Schedule – Collection of Personal Data without Consent”, “Third Schedule – Use of Personal Data without Consent” and “Fourth Schedule – Disclosure of Personal Data without Consent” of the PDPA, or there may be other legislation, such as Infectious Disease Act, which rends this necessary. Where the disclosure is restricted by such legislation, the obligation under such other laws will prevail.

When using your personal data to contact you for the purposes under which you have consented, we may contact you via postal mail, electronic mail, SMS, telephone fax or any other means.

We will practise strong data protection in fulfilment of the obligations under various legislation requirements, such as Private Hospitals and Medical Clinics Act (PHMCA), Infectious Disease Act (IDA) etc.

While we take reasonable efforts to protect your personal data held by us, we cannot be held responsible for unauthorised and unintended access that is beyond our control.

We will review your personal data held by us on a regular basis to determine if such personal data is still needed. Your personal data will not be retained longer than needed for the purpose under which it was collected, unless there are business, industry and/or legal requirements for the retention of such. Your personal data will also not be kept “just in case” it may be needed for other purposes that you have not been notified.
‍
We may anonymize your personal data on records as an organisation is considered to have ceased retention of personal data when it no longer has the means to associate the personal data with particular individuals. The anonymizsing of data could be found under the section on Anonymisation in the Advisory Guidelines on Selected Topics in the PDPC website. 

We will retain employee personal data for a reasonable period for up to 7 years in accordance with its legal and business purposes, even after the person ceases to be employed by Amaris B. Clinic. With regard to medical data, we will retain medical records in accordance to the duration stipulated by MOH.

If we transfer your personal data to a country outside of Singapore, we will ensure that the organisation or country provides a standard of protection to the personal data that is comparable to that provided under Singapore’s PDPA. 

It is the obligation of the individual to ensure that all personal data submitted to us is true, accurate and complete. If you wish to withdraw your consent to the use of your personal data, correct or obtain access to your personal data held by us, please contact our clinic. 

We may charge you a fee for the provision of your personal data held by us or for information about the ways in which the data may have been used or disclosed in the past one year.

We will not be able to provide access to data which are opinion data kept solely for evaluation purpose, such as opinion of suitability, eligibility, qualification of individuals for employment, promotion or continuance in employment.

Once your consent is withdrawn, it is our obligation to cease, and cause our data intermediaries and agents to cease such collection, use and disclosure within a reasonable notice period. As a result, we may not be able to proceed with some transaction that you have requested.