Privacy Policy

1. Introduction

ENT Manila ("we," "us," "our," or "the clinic") is committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your personal information. This Privacy Policy explains our data practices in accordance with the Philippine Data Privacy Act (RA 10173) and international privacy standards.

2. Information We Collect

We collect information necessary to provide medical services and improve patient care:

• Medical Information: Health history, symptoms, diagnoses, treatment records, test results
• Personal Information: Name, date of birth, contact details, address
• Appointment Data: Scheduling information, communication preferences, visit history
• Payment Information: Billing address, payment method (securely processed, not stored by us)
• Website Usage: Anonymized data about how you use entmanila.com (via analytics)

3. How We Use Your Information

We use your information only for legitimate medical and business purposes:

• Provide diagnosis, treatment, and medical care
• Schedule and confirm appointments
• Process payments and handle billing
• Communicate with you about your health and care
• Maintain accurate medical records
• Comply with legal and regulatory obligations
• Improve our services and patient experience
• Conduct quality assurance and peer review

4. Legal Basis for Processing

We process your personal data based on:

• Consent: You explicitly agree to treatment and data processing
• Legal Obligation: Philippine law requires us to keep medical records
• Medical Necessity: Processing is necessary for your healthcare
• Legitimate Interest: Improving patient care and clinic operations

5. Who We Share Your Information With

Your medical information is confidential. We share it only when:

• You authorize it: With other healthcare providers you choose (with written consent)
• Legal requirement: When required by law, court order, or public health authorities
• Emergency: To protect your health or safety in urgent situations

We do not sell your personal data to third parties. We do not share your information for marketing without explicit consent.

6. Data Security

We implement appropriate security measures to protect your information:

• Physical security: Locked filing cabinets and restricted access
• Digital security: Encrypted storage and secure servers
• Access control: Only authorized staff can access medical records
• Regular updates: Security practices reviewed and updated regularly

While we take data security seriously, no system is completely secure. We encourage you to contact us immediately if you suspect a data breach.

7. Data Retention

We retain your medical records according to Philippine legal requirements:

• Active patients: Records kept for duration of care and 5+ years after last visit
• Minor patients: Records retained until age 21
• Inactive accounts: Contact us for deletion requests (legal holds may apply)
• Appointment scheduling data: Retained for administrative purposes

8. Your Rights

Under Philippine Data Privacy Act, you have the right to:

• Access: Request a copy of your medical records
• Correction: Request correction of inaccurate information
• Deletion: Request deletion (subject to legal retention requirements)
• Objection: Object to certain types of data processing
• Portability: Request your data in a portable format

To exercise these rights, contact us using the information in Section 11.

9. Cookies & Website Tracking

Our website uses:

• Essential cookies: For website functionality
• Analytics: Google Analytics to understand visitor behavior (anonymized)
• No tracking pixels: We do not use third-party trackers for advertising

You can disable cookies in your browser settings without affecting site functionality.

10. Children's Privacy

Our services are provided to patients of all ages. For minors, we require parental/guardian consent for medical data processing. Parents/guardians have the same rights as listed in Section 8.

11. Contact Us & Data Protection Officer

For privacy concerns or to exercise your rights:

12. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and the National Privacy Commission as required by law within 72 hours of discovery.

13. Policy Updates

We may update this Privacy Policy to reflect changes in law or our practices. We will notify you of significant changes via email or website notice. Continued use of our services constitutes acceptance of updated terms.

14. Governing Law

This Privacy Policy is governed by the laws of the Republic of the Philippines, specifically the Data Privacy Act (RA 10173) and related regulations.