Privacy policy

Last updated: 1 January 2026

Dunman Medical Clinic ("we", "us", "our") is committed to protecting the personal data of our patients, website visitors, and telehealth app users in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). This policy explains what data we collect, why we collect it, how it is used and protected, and the rights you have over it.

1. What we collect

Depending on how you interact with us — as a website visitor, a registered patient, or a telehealth app user — we may collect:

• Identity and contact details: full name, NRIC/FIN, date of birth, gender, address, phone number, and email address.
• Health information: medical history, allergies, current medications, consultation notes, prescriptions, lab or screening results, and vaccination records.
• Appointment and billing information: consultation history, insurance details, and payment records (processed by our payment provider; we do not store full card numbers).
• Technical data: IP address, browser type, device information, and general usage data collected through cookies and similar technologies when you use our website or telehealth app.

2. How we use your data

We use personal and health data to:

• Provide clinical care, including diagnosis, treatment, prescriptions, and follow-up.
• Schedule and manage appointments, whether in-clinic or via our telehealth platform.
• Process payments and insurance claims.
• Communicate with you about your care, appointment reminders, and, where you have consented, clinic updates.
• Meet our legal and regulatory obligations, including those under the Private Hospitals and Medical Clinics Act and Ministry of Health requirements.
• Improve our services, website, and telehealth platform.

3. Sharing your data

We do not sell personal data. We may share it, only as necessary, with:

• Our telehealth platform and payment processing providers, who are contractually bound to protect your data.
• Other healthcare providers, laboratories, or specialists you are referred to, with your consent or as clinically necessary.
• Government agencies and regulators, such as the Ministry of Health or Ministry of Manpower, where required by law (for example, MOM-mandated medical examination results).
• Insurers, where you have authorised a claim on your behalf.

4. Data security and retention

We apply reasonable technical and administrative safeguards — including access controls, encryption in transit, and restricted staff access — to protect your data against unauthorised access, loss, or misuse. Medical records are retained for the period required under Singapore healthcare regulations, after which they are securely disposed of.

5. Cookies

Our website uses essential cookies to operate correctly, and may use analytics cookies to understand how visitors use the site. You can control or disable cookies through your browser settings; doing so may affect some site functionality.

6. Your rights

Under the PDPA, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw consent for us to use your data for a given purpose (this may affect our ability to continue providing certain services, including care itself).
• Ask us questions about how your data is handled.

To exercise any of these rights, contact our Data Protection Officer using the details below.

7. Children's data

Where we provide paediatric care, health data for children is collected and managed with the consent of a parent or legal guardian, who may exercise the rights above on the child's behalf.

8. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. Material changes will be reflected by an updated "last updated" date above.

9. Contact us

For questions about this policy or to exercise your data protection rights, contact our Data Protection Officer at ck@advisorybvi.com or write to us at 4 Dunman Road, #01-07, Grand Dunman, Singapore 439189.

This policy is provided as a general PDPA-aligned reference for Dunman Medical Clinic and should be reviewed by qualified legal counsel before the clinic's official opening to ensure it fully reflects our operational practices and current regulatory requirements.