Personal Data Protection Act (PDPA) Policy

1. Introduction & Statutory Scope

This Personal Data Protection Policy outlines how Define Aesthetic Medical Clinic Pte Ltd ("Define", "we", "us", or "our") collects, uses, discloses, stores, and protects personal data in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore and Ministry of Health (MOH) healthcare record guidelines.

2. Personal Data We Collect

In the course of providing clinical aesthetic consultations, diagnostic assessments, and medical treatments, we may collect the following personal and medical information:

• Full legal name, NRIC / FIN / Passport number, and date of birth.
• Contact details including mobile phone numbers, residential address, and email address.
• Medical history, drug allergies, previous surgical/aesthetic procedures, and current medications.
• Clinical consultation notes, treatment records, and facial diagnostic photographs taken for baseline mapping.
• Billing, transaction, and payment records.

3. Purposes of Collection, Use, and Disclosure

We process your personal data exclusively for lawful medical, operational, and regulatory purposes, including:

• Facilitating diagnostic evaluations, clinical treatment planning, and medical procedures.
• Maintaining medical records in accordance with the Singapore Medical Council (SMC) Ethical Code and MOH regulatory standards.
• Confirming appointment bookings, rescheduling, and sending essential post-treatment care instructions.
• Processing financial transactions, insurance verifications (where applicable), and statutory audits.
• Addressing patient feedback, clinical inquiries, and legal compliance obligations.

4. Disclosure to Third Parties

Define Aesthetic Medical Clinic does not sell, rent, or lease personal data to commercial marketers. Personal data is disclosed only to authorized medical staff, diagnostic laboratory partners, statutory authorities when required by Singapore court order, or authorized IT service providers under strict non-disclosure obligations.

5. Protection & Storage Security

We implement physical, administrative, and technical safeguards to secure your medical files and digital records against unauthorized access, loss, or misuse. Access to patient files is strictly restricted to licensed clinicians and trained care staff on a need-to-know basis.

6. Retention of Personal Data

Medical records and clinical photographs are retained for the minimum statutory period mandated by the Ministry of Health (MOH) Singapore Private Hospitals and Medical Clinics Act, or as long as necessary to fulfill clinical and legal requirements.

7. Patient Rights: Access, Correction & Withdrawal

Under the Singapore PDPA, you are entitled to request access to your personal data held by us, request correction of inaccurate records, or withdraw consent for non-essential communications (such as appointment reminder SMS/WhatsApp).

8. Data Protection Officer (DPO) Contact

If you have questions regarding our data protection policies or wish to submit an access or correction request, please contact our appointed Data Protection Officer: