Privacy Policy
Fammed Diagnostic Center and the Fammed Care System ("Fammed," "we," "us," or "our") respect and protect your right to privacy. This Privacy Policy explains how we collect, use, store, protect, share, retain, and dispose of personal data when you use our website, patient portal, appointment services, and other services available through the Fammed Care System.
We are committed to handling personal data in accordance with applicable Philippine data privacy laws, including Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission.
By using our website and services, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
Depending on the services you use, we may collect the following information:
Personal Information
- Full name
- Date of birth
- Sex
- Address
- Mobile number
- Email address
- Account username and login information
- Other information necessary to identify or contact you
Health and Medical Information
Because Fammed provides healthcare and diagnostic services, we may collect and process health-related information necessary to provide our services, including:
- Patient medical information
- Laboratory test requests and results
- X-ray requests and results
- Ultrasound requests and results
- Diagnostic examination information
- Medical records and reports
- Physician or healthcare provider information related to your care
- Appointment and consultation information
- Other health information necessary for the provision of healthcare and diagnostic services
Health and medical information may be considered sensitive personal information and will be handled with appropriate safeguards.
Appointment and Service Information
We may collect information relating to appointments and services, including:
- Requested services or examinations
- Appointment date and time
- Clinic or department information
- Appointment status
- Walk-in or registered patient information
- Healthcare personnel involved in providing services
- Diagnostic and laboratory service records
Technical Information
When you use our website or system, we may automatically collect limited technical information, such as:
- IP address
- Browser type
- Device information
- Date and time of access
- Pages or services accessed
- Login and security activity
- Cookies or similar technologies, where applicable
This information may be used to maintain, secure, and improve our website and services.
2. How We Collect Your Information
We may collect personal data when you:
- Create a patient account;
- Sign in to the Fammed Care System;
- Book an appointment;
- Submit information for laboratory, X-ray, ultrasound, or other diagnostic services;
- Visit Fammed as a walk-in patient;
- Provide information to authorized healthcare personnel;
- Upload or receive medical or diagnostic records through the system;
- Contact us for inquiries or support; or
- Use our website and digital services.
We may also receive relevant information from authorized healthcare personnel when necessary for the provision and management of healthcare services.
3. How We Use Your Information
We may collect and process your personal and health information for legitimate and necessary purposes, including to:
- Create and manage your patient account;
- Verify your identity;
- Schedule and manage appointments;
- Provide laboratory, X-ray, ultrasound, and other diagnostic services;
- Process and manage diagnostic requests;
- Record, manage, and provide access to authorized medical and diagnostic results;
- Allow authorized healthcare personnel to perform their duties;
- Communicate with you regarding appointments, services, and account-related matters;
- Maintain accurate healthcare and service records;
- Improve the security, functionality, and performance of our system;
- Investigate technical problems, errors, misuse, or unauthorized access;
- Comply with legal, regulatory, and healthcare-related obligations; and
- Protect the rights, safety, and security of patients, healthcare personnel, and Fammed.
We will process personal data only for legitimate, declared, and necessary purposes.
4. Protection of Health Records and Account Information
Fammed recognizes that health and diagnostic information requires a high level of protection.
We implement reasonable and appropriate administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss, destruction, misuse, or other unlawful processing.
Our security measures may include:
- Authentication and password protection;
- Role-based and authorized access controls;
- Restrictions preventing unauthorized users from accessing administrative or healthcare staff areas;
- Access controls designed to ensure that patients can access only information associated with their own account;
- Secure session and account management;
- Encryption or other appropriate protection for sensitive information where implemented;
- Secure transmission of information through appropriate security technologies;
- Controlled access to healthcare and diagnostic records;
- Monitoring and review of system activity where appropriate;
- Procedures for responding to security incidents; and
- Regular maintenance and security improvements to the system.
Only authorized personnel who require access to personal or health information in connection with their legitimate duties may access such information.
5. Patient Account and Record Isolation
Fammed is designed to protect the confidentiality of individual patient records.
Patient accounts and records should be associated with the correct patient and authorized healthcare transaction. We take reasonable measures to prevent one patient from accessing another patient's personal information, medical records, appointments, or diagnostic results without proper authorization.
Access to patient information may be determined using secure identifiers and authorized account or healthcare relationships. An email address alone should not be treated as sufficient authorization to give one patient access to another patient's records.
Walk-in patient records and registered patient records are handled according to the information provided and the applicable patient or service record. Where necessary, appropriate verification and matching procedures may be used to associate records with the correct patient.
6. Disclosure and Sharing of Information
We do not sell your personal or health information.
We may disclose or provide access to personal data only when necessary and authorized, including to:
- Authorized Fammed healthcare personnel and staff;
- Healthcare professionals involved in providing your care or requested service;
- Authorized service providers that assist us in operating our system, subject to appropriate safeguards;
- Government authorities or other parties when required by applicable law, lawful process, or regulatory requirements; or
- Other parties when disclosure is necessary to protect legal rights, safety, or security, subject to applicable law.
Persons or organizations authorized to process personal data on our behalf may only process the information for legitimate and authorized purposes and are expected to apply appropriate safeguards.
7. Data Retention
We retain personal and healthcare-related information only for as long as necessary for the purposes for which it was collected, to provide healthcare and diagnostic services, maintain required records, resolve disputes, enforce agreements, and comply with applicable legal and regulatory obligations.
Fammed may retain patient medical and diagnostic records for the period required or permitted by applicable laws, regulations, professional requirements, and legitimate healthcare purposes.
Where records are no longer required to be retained, they may be securely deleted, destroyed, anonymized, or otherwise disposed of in accordance with applicable requirements and appropriate procedures.
Deletion of an account does not necessarily require the immediate deletion of medical, diagnostic, appointment, or other records that Fammed is legally or legitimately required to retain.
8. Your Rights as a Data Subject
Subject to applicable law and relevant limitations, you may have the right to:
- Be informed about the processing of your personal data;
- Access your personal information;
- Request correction of inaccurate or incomplete personal information;
- Object to certain processing of personal information where applicable;
- Withdraw consent where processing is based on consent, subject to lawful limitations;
- Request the blocking, removal, or deletion of personal information when legally applicable;
- Obtain a copy of certain personal information in an appropriate format where applicable;
- Lodge a complaint regarding the handling of your personal data; and
- Be notified of certain personal data breaches where notification is required by applicable law.
Requests concerning personal data may be subject to identity verification and applicable legal or healthcare record retention requirements.
9. Cookies and Website Technologies
Our website may use cookies, session technologies, and similar tools necessary for functions such as maintaining secure sessions, remembering preferences, improving system performance, and protecting against unauthorized access.
You may manage certain cookie settings through your browser. However, disabling necessary cookies or similar technologies may affect the functionality of our website or patient services.
10. Data Security and Limitations
While Fammed takes reasonable measures to protect personal data, no method of electronic transmission, storage, or internet-based system can be guaranteed to be completely secure.
We continuously take reasonable steps to improve the protection of our systems and information. Users are also responsible for protecting their account credentials and should not share their passwords with unauthorized persons.
If you believe that your account or personal information has been accessed without authorization, please notify Fammed as soon as possible through the contact information provided below.
11. Privacy of Minors and Dependents
Where healthcare services involve minors or persons who require a parent, guardian, or legally authorized representative, personal information may be provided and processed through the appropriate parent, guardian, or authorized representative, subject to applicable laws and requirements.
12. Third-Party Services and Links
Our website or services may contain links to third-party websites or services. Fammed is not responsible for the privacy practices, content, or security of third-party websites or services that are not under our control.
We encourage users to review the privacy policies of third-party services before providing personal information to them.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, system features, security practices, legal requirements, or personal data processing activities.
When we make changes, we will post the updated version on our website and revise the effective date where appropriate.
We encourage you to review this Privacy Policy periodically.
14. Contact Us
If you have questions, concerns, requests, or complaints regarding this Privacy Policy or the processing of your personal data, you may contact Fammed through the contact details available on our official website:
Fammed Diagnostic Center / Fammed Care System
Website: https://fammedcare.online/
You may also contact our designated privacy or data protection contact through the information published on our official website or through Fammed's authorized communication channels.
By using the Fammed website, patient portal, and related services, you acknowledge that you have read and understood this Privacy Policy.