GENERAL NOTICE

NPC SEAL OF REGISTRATION

General Privacy Notice

This is Health Cube Medical Clinics’ general statement on its data processing activities to notify Data Subjects of the categories of Personal Data processed, as well as the purpose and extent of such processing. This is not a consent form but a notice explaining how Health Cube processes Personal Data in line with its established practices and operations. Health Cube may provide additional specific privacy notices depending on particular activities or objectives.

WHAT WE COLLECT

Our clinic collects and processes personal and sensitive personal information from individuals seeking medical services, This may include your full name, date of birth, sex, address, marital status, citizenship, religious affiliation, signature, emergency contact person and medical history.



HOW WE MAY USE IT

Personal and Sensitive Personal Information collected shall be used for the purposes of billing, medical evaluation and treatment. We may contact you to provide appointment reminders and notifications regarding the availability of results.

If applicable, your information may be used as anonymized samples for training/research purposes.



HOW WE MAY SHARE IT

We may share your information with a third-party acting on both your and our behalf, to assist in the smooth provision of the service/s you have requested from us, provided they have agreed to protect the confidentiality of your data. We may also disclose your information, as permitted by law, when required to meet legal, regulatory, administrative, or judicial requirements.



HOW WE PROTECT IT

Access to your information is restricted to authorized personnel only. Your information will be stored for the period permitted by law. After this period, physical records will be disposed of through secure shredding, and digital files will be permanently deleted or destroyed using secure methods.

RIGHTS OF A DATA SUBJECT

As a data subject under Section 16 of Republic Act No. 10173 (Data Privacy Act of 2012), you have the right to be informed, to object, access, rectify, request erasure or blocking, data portability, file a complaint, and claim damages.

____________________________________________________________

Mobile Application Privacy Addendum — Health Cube Patient Portal

INFORMATION WE COLLECT

The App collects only the information necessary to provide patient portal services, including:

Full name, date of birth, sex, contact information, email address
Laboratory results
Procedure results
Consultation appointment and previous visit schedules
Procedure appointment schedules



How Information Is Used

Information collected through the App is used solely to facilitate appointment scheduling, communication with your care team, and access to your own medical records within the Health Cube network.

DATA STORAGE and TRANSMISSION

All data collected by the App is transmitted securely and stored on Health Cube’s own EMR infrastructure. We do not use third-party analytics, advertising, or crash-reporting services within the App.



Third-Party SDKs

The App does not integrate any third-party software development kits (SDKs) for analytics, advertising, or data collection purposes. All functionality is built and maintained in-house.

DEVICE PERMISSIONS

The App requests only the permissions necessary for its core functionality. No permission is requested without a clear, disclosed purpose.



SESSION SECURITY

For your protection, the App automatically logs you out after 10 minutes of inactivity.

DATA RETENTION

Data collected through the App is retained in accordance with Health Cube’s medical records retention policy and applicable Philippine regulations, including the Data Privacy Act of 2012 (Republic Act No. 10173).



HEALTH INFORMATION WE DISPLAY

The App allows you to view the following health-related information, sourced directly from your electronic medical record with Health Cube:

Laboratory results
Procedure results
Consultation appointment and previous visit schedules
Procedure appointment schedules

This information is retrieved directly from Health Cube’s own EMR system and displayed to you within the App. It is not stored separately by the App beyond what is necessary for normal viewing and caching during active use.

We do not use this health information for advertising, marketing, or any purpose other than providing you with access to your own records and facilitating your care. We do not share this health information with third parties, except as required by law, requested by you, or necessary to coordinate your care within the Health Cube net



Security measures protecting this information include:

Secure, encrypted transmission between the App and Health Cube’s EMR system
Account authentication requiring in-clinic identity verification prior to activation
Automatic session timeout after periods of inactivity
Role-based access controls limiting record visibility to the authenticated patient only

Accuracy of displayed information: Laboratory and procedure results shown in the App reflect data from your official medical record. If you have questions about the clinical meaning of any result, please consult your physician or care team directly — the App is not intended to interpret results or provide medical advice.

DEPENDENT and GUARDIAN ACCESS

Minors: A parent or legal guardian may be granted access to a minor patient’s records. This linkage is established in person by Health Cube clinic staff and is not self-service within the App. Upon reaching 18 years of age, the patient may register their own account and request removal of prior guardian access.

Elderly or Dependent Patients: A patient may authorize a family member to access their records on their behalf. This authorization is likewise established in person by Health Cube clinic staff, based on the patient’s (or their legal representative’s) consent, and may be revoked at any time through the same in-clinic process.



ACCOUNT REGISTRATION and ACTIVATION