OHHC PRIVACY NOTICE

Ortigas Hospital and Healthcare Center Inc. (OHHC) respects and values your right to privacy. This Privacy Notice explains how we collect, use, store, and protect your personal data in compliance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

Personal Data We Collect:

OHHC may collect the following personal and sensitive personal information:

Personal Information: Full name, address, contact details, date of birth, gender, civil status
Sensitive Personal Information: Health records, medical history, laboratory results, diagnosis, treatment details
Employment Information: (for employees/applicants) educational background, employment history, government-issued IDs
Other Information: CCTV footage, visitor logs, and transaction records

Purpose of Processing:

We process your personal data for legitimate purposes, including:

Provision of medical services, diagnosis, and treatment
Hospital administration and patient care coordination
Billing, insurance claims, and financial transactions
Compliance with legal and regulatory requirements
Human resource management and recruitment
Safety and security (e.g., CCTV monitoring)
Communication of hospital services, advisories, and updates

Legal Basis for Processing:

Your personal data is processed based on the following lawful criteria:

Your consent
Fulfillment of a contract
Compliance with legal obligations
Protection of vital interests
Legitimate interests of the hospital

Data Sharing and Disclosure:

OHHC may share your personal data with:

Healthcare professionals involved in your care
Insurance companies and HMOs
Government agencies (e.g., DOH, PhilHealth) when required by law
Third-party service providers (e.g., laboratories, IT providers), under strict confidentiality agreements

We ensure that all third parties comply with appropriate data protection standards.

Data Retention:

Your personal data will be retained only for as long as necessary:

To fulfill the purposes for which it was collected
To comply with legal, regulatory, and medical record-keeping requirements

Your Rights as a Data Subject:

Under the Data Privacy Act of 2012, you have the right to:

Be informed about data processing.
Access your personal data.
Correct inaccurate or incomplete data.
Object to processing.
Request erasure or blocking of data.
Withdraw consent.
File a complaint.

Data Security Measures:

OHHC implements appropriate organizational, physical, and technical security measures to protect your personal data against:

Unauthorized access
Accidental loss or destruction
Alteration or disclosure

Contact Information:

For any privacy-related concerns, you may contact:

Data Protection Officer (DPO)
Email: ohhc.redram@gmail.com

Contact Number: 0906-516-4137

Ortigas Hospital and Healthcare Center Inc.

Updates to this Privacy Notice:

OHHC reserves the right to update this Privacy Notice to reflect changes in legal or regulatory requirements. Updates will be posted through official hospital communication channels.