We, at Maxicare Health Services Inc. (“MHSI”), value your privacy as much as we value your health. We are committed to complying with Republic Act No. 10173, otherwise known as the Philippine Data Privacy Act of 2012 (“Data Privacy Act”), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission.

This Privacy Notice explains how MHSI collects, uses, stores, shares, and protects your personal data when you avail of our healthcare services, whether you are a Maxicare member, PRIMA cardholder, walk-in patient, or other individual availing of services at an MHSI Primary Care Clinic (“PCC”).

We may periodically update this Privacy Notice to reflect changes in our services, systems, processing activities, or applicable laws and regulations.

Service Overview

MHSI operates Primary Care Clinics and provides healthcare and related services to Maxicare members, PRIMA cardholders, walk-in patients, and other eligible patients, subject to the applicable terms, conditions, eligibility requirements, and fees for the service being availed.

For walk-in patients who are not Maxicare members or PRIMA cardholders, MHSI may require you to register and create a patient record before healthcare services can be provided.

During registration, a unique patient or registration identifier may be generated and used to identify and retrieve your records within MHSI’s authorized healthcare information systems.

Registration as a walk-in patient does not, by itself, constitute enrollment or membership in a Maxicare healthcare plan or PRIMA product.

Purposes of Processing

MHSI may collect and process your personal data for purposes that include:

• registering and establishing your patient profile and healthcare record;
• verifying your identity and preventing duplicate or incorrect patient records;
• generating and maintaining your unique patient or registration identifier;
• facilitating consultations, laboratory tests, diagnostic procedures, medical examinations, and other healthcare services;
• documenting your medical history, clinical findings, diagnoses, prescriptions, treatment, referrals, and other information necessary for continuity of care;
• determining your eligibility or entitlement to healthcare benefits, where applicable;
• facilitating payment and recording transactions for services availed;
• coordinating services with physicians, laboratories, diagnostic facilities, affiliated healthcare providers, and authorized service providers;
• maintaining accurate medical and administrative records;
• responding to your inquiries, complaints, requests, and other concerns;
• complying with applicable healthcare, tax, regulatory, reporting, and other legal requirements;
• establishing, exercising, or defending legal claims;
• maintaining the security, integrity, availability, and proper operation of our healthcare information systems; and
• conducting legitimate quality improvement, service evaluation, statistical analysis, and other activities permitted under applicable laws and regulations.

Where MHSI intends to use your personal data for marketing, promotional communications, product offers, or other purposes that require your consent, we will obtain the appropriate consent separately where required by law.

Declining optional marketing communications will not affect your ability to avail of healthcare services from MHSI.

Personal Data We May Collect

Depending on the healthcare service you avail of, MHSI may collect and process information including:

• Full name;
• Date of birth and age;
• Sex and/or other demographic information relevant to the service;
• Civil status, when necessary;
• Home or mailing address;
• Email address;
• Mobile or telephone number;
• Emergency contact information;
• Government-issued identification information, when necessary for identity verification or regulatory requirements;
• Maxicare, PRIMA, or other healthcare membership information, if applicable;
• MHSI patient or registration identifier;
• Payment and transaction information;
• Medical history and relevant health information;
• Consultation records, clinical findings, diagnoses, prescriptions, medical orders, laboratory and diagnostic results, and other medical records;
• Information necessary for referrals and continuity of care; and
• Technical information generated when you use our digital platforms, where applicable.

MHSI will endeavor to collect only personal data that are adequate, relevant, suitable, necessary, and not excessive in relation to the purposes for which they are processed.

How We Collect Your Personal Data

We may obtain your personal data:

• directly from you when you register through an MHSI kiosk, tablet, computer, website, application, registration form, or other authorized channel;
• when you avail of consultation, laboratory, diagnostic, or other healthcare services at an MHSI PCC;
• from Maxicare Healthcare Corporation or other authorized entities when necessary to verify your healthcare benefits or eligibility;
• from physicians and other healthcare professionals involved in your care;
• from authorized laboratories, diagnostic facilities, and healthcare service providers;
• from your employer or healthcare plan provider where legally permissible and applicable to the service;
• from your parent, guardian, authorized representative, or principal member, where applicable; and
• from other lawful sources where collection is authorized or permitted by law.

Use of Healthcare Information Systems

MHSI may use authorized electronic healthcare, laboratory, registration, payment, and medical record systems to process your information.

Information submitted during registration may be assigned a unique patient identifier and transmitted to or accessed by other authorized MHSI healthcare systems where necessary to provide healthcare services, maintain your medical record, process transactions, and ensure continuity of care.

Access to these systems shall be limited to authorized personnel and service providers based on their roles and legitimate need to access the information.

Disclosure and Sharing of Personal Data

MHSI may disclose or provide access to your personal data, where necessary and legally permitted, to:

• Maxicare Healthcare Corporation and relevant affiliated entities;
• physicians and other healthcare professionals involved in your care;
• laboratories, diagnostic facilities, pharmacies, and healthcare providers;
• authorized technology and healthcare information system providers;
• payment and financial service providers, where applicable;
• government agencies and regulatory authorities when required by law; and
• other third parties where disclosure is necessary for the provision of healthcare services or otherwise authorized or required by law.

MHSI requires its authorized service providers and processors to implement appropriate organizational, physical, and technical safeguards for personal data entrusted to them.

Data Retention

MHSI will retain personal data only for as long as necessary to fulfill the purposes for which they were collected, comply with applicable medical record retention requirements and other legal or regulatory obligations, and establish, exercise, or defend legal claims.

Where an individual registers but does not proceed with any healthcare service or transaction, MHSI will retain the registration information only for an appropriate period consistent with its approved records retention policy and the purpose for which the information was collected.

Once personal data are no longer required, they shall be securely disposed of, anonymized, or otherwise handled in accordance with MHSI’s records management and data retention policies.

Data Protection Measures

MHSI implements reasonable and appropriate organizational, physical, and technical security measures designed to protect personal data against accidental or unlawful destruction, alteration, disclosure, misuse, loss, or unauthorized access.

These measures may include access controls, encryption, secured servers, audit logging, confidentiality obligations, employee training, system security assessments, and appropriate contractual safeguards with service providers.

Your Data Privacy Rights

Subject to the conditions and limitations provided by applicable law, you have the right to:

• be informed about the processing of your personal data;
• access your personal data;
• object to certain processing activities;
• request correction of inaccurate or incomplete information;
• request erasure or blocking where legally applicable;
• obtain data portability where applicable;
• file a complaint before the National Privacy Commission; and
• seek indemnification for damages in accordance with law.

Certain information, particularly medical and healthcare records, may need to be retained despite a request for deletion where retention is required or permitted by applicable laws, regulations, contractual obligations, or for the establishment, exercise, or defense of legal claims.

Optional Marketing Communications

Where applicable, MHSI may separately ask whether you wish to receive information about healthcare programs, Maxicare or PRIMA products, promotions, or other services.

Participation is voluntary. You may withdraw your marketing consent or unsubscribe from marketing communications through the channels provided by MHSI.

Your decision regarding marketing communications will not affect your access to healthcare services.

Data Protection Officer

For questions regarding this Privacy Notice, the processing of your personal data, or the exercise of your data privacy rights, you may contact:

Data Protection Officer
Maxicare Health Services Inc.
Tel. No.: +63 917 800 9092
Email address: dpo@mhsi.com.ph