ACE Medical Center Tacloban (the “Hospital,” “we,” “us”) is committed to the ethical and secure processing of personal data in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA).

1. Data Collection & Scope

We collect personal information necessary for healthcare delivery and website optimization, including but not limited to:

• Identity & Contact: Full name, age, gender, email, and mobile number.
• Clinical Data: Medical history, symptoms, and health status submitted via consultation forms.
• Technical Information: IP address and cookie data for site performance.

2. Purpose of Processing

Your data is processed strictly for professional healthcare purposes:

• Facilitating medical appointments and inpatient admissions.
• Responding to clinical inquiries and health-related concerns.
• Processing PhilHealth, HMO, or insurance claims.
• Compliance with Department of Health (DOH) reporting mandates.

3. Security Protocols

We implement high-level administrative, technical, and physical safeguards. All digital transmissions involving medical data are protected by SSL (Secure Sockets Layer) encryption. Access is restricted to authorized medical and administrative personnel under strict confidentiality agreements.

4. Data Retention

Medical records are retained in accordance with DOH guidelines (standardly 15 years for clinical records). After the mandatory period, records are disposed of via secure shredding or permanent digital erasure to prevent unauthorized recovery.

5. Rights of the Data Subject

Under the DPA, you have the right to access, correct, or object to the processing of your data. You may also request a copy of your personal data in a portable format by contacting our Data Protection Officer.

This policy is reviewed annually to ensure compliance with the National Privacy Commission (NPC).