- This Policy statement provides information on the obligations and policies of NTUC Health in respect of an individual’s Personal Data. NTUC Health undertakes to use reasonable efforts in applying, where practicable, those principles and the processes set out herein to its operations.
- NTUC Health’s officers, management, and members of staff shall use reasonable endeavours to respect the confidentiality of and keep safe any and all Personal Data collected and/or stored and/or disclosed and/or used for, or on behalf of, NTUC Health. NTUC Health shall use reasonable endeavours to ensure that all collection and/or storage and/or disclosure and/or usage of Personal Data by NTUC Health shall be done in an appropriate manner and in accordance with the Act and this Policy.
- For the purposes of this Policy, in line with the provisions under the Singapore Personal Data Protection Act 2012 (No. 26 of 2012) (the “Act”), “Personal Data” shall mean data, whether true or not, about an individual who can be identified — from that data; or from that data and other information which an organisation has or is likely to have access. Such Personal Data shall also refer to that which is already in the possession of NTUC Health or that which shall be collected by NTUC Health in future.
CONTACTING THE DATA PROTECTION OFFICER
- Access or Correction of Personal Data – Where you legitimately request access to and/or correction of Personal Data relating to you, such Personal Data which is in the possession and control of NTUC Health, NTUC Health shall provide and/or correct that data in a reasonable time and manner in accordance with its standard procedures as stated hereinafter.
- Feedback – In accordance with the Act, NTUC Health has established a process for receiving and responding to any query or complaint that may arise with respect to the application of this Act. To ensure that NTUC Health receives your complaints and enquiries, please send the same via email to the Data Protection Officer, (the “DPO”) of NTUC Health at the following email address: email@example.com.
- Withdrawal of Consent – Should you not wish NTUC Health to use your Personal Data for any of the purposes listed in Clauses 3(ii) to 3(iv), or not to receive promotional materials from NTUC Health, you may opt out by sending a clearly worded email to the DPO via the email address provided in Clause 2(ii). Your request shall be processed within a reasonable time.
STATEMENT OF PRACTICES
Types of Personal Data Collected:
- As part of its day-to-day activity, NTUC Health may collect from you, through various means, including via our programmes, centres/branches, websites, application forms and any other forms used by NTUC Health from time to time, some or all of the following Personal Data:
- Name (first and surname);
- Postal Address;
- Phone number (including mobile);
- Office number;
- Fax number;
- Email address;
- Bank account/credit card details;
- Personal Data of your emergency contacts;
- IP addresses; and
- Photographs and images
- Medical records
- Caregivers contact and address
- Household income
- Employment details
- Next of kin information
PURPOSE OF COLLECTION OF PERSONAL DATA
- The above Personal Data mentioned in Clause 3(i) is collected for the purposes of processing your application and registration of you as a client of NTUC Health and to ascertain if you are eligible for government subsidies, discounts or other related purposes; for direct marketing through voice calls, text messages, email, direct mail and facsimile messages; for payment and/or credit control purposes; to conduct market research and analysis; to notify you of any recall of any medication or drug purchased by you; to notify you of any changes to our policies or services which may affect you; to respond to queries and feedback; for identification purposes; for maintaining and updating your personal details; to evaluate if you are suitable for employment within NTUC Health or the NTUC group; and informing you of new services of NTUC Health and other third parties which we are associated with. DISCLOSURE OF PERSONAL DATA
- In order to carry out the functions described above, NTUC Health may, from time to time, disclose your Personal Data to NTUC Health’s centres/branches and related corporations.
- Without derogating from any of the above, NTUC Health may also disclose your Personal Data to the following third parties:
- Regulators and law enforcement officials;
- Government appointed agencies;
- Third party service providers and consultants;
- Credit, debit and charge card companies, banks and other entities processing payment;
- Any agent or subcontractor acting on NTUC Health’s behalf for the provision of NTUC Health’s services including doctors, nurses, dentists, delivery personnel, suppliers and web administrators.
- NTUC Health may disclose your Personal Data to the above mentioned parties also in the occurrence of any of the following events:
- To the extent that NTUC Health is required to do so by the law;
- In connection with any legal proceedings or prospective legal proceedings;
- To establish, exercise or defend NTUC Health legal rights;
- To the purchaser (or prospective purchaser) of any business or asset which the NTUC Health is(or is contemplating) selling;
- To any person and/or entity for the purpose of processing such information on NTUC Health’s behalf;
- To third parties who provide services to NTUC Health or on its behalf;
- To any third party that purchases NTUC Health or NTUC Health’s business or any part of NTUC Healthor NTUC Health’s business;
- With your consent; and
- For the purposes of disaster recovery.
OPTIONAL PROVISION OF PERSONAL DATA
- In some instances, you may also be requested to provide certain Personal Data that may be used to further improve NTUC Health’s services and/or better tailor the type of information presented to you. In most cases, this type of data is optional although, where the requested service is a personalised service, or provision of a product or dependent on your providing all requested data, failure to provide the requested data may prevent NTUC Health from providing the service to you. This type of data includes, but is not limited to:
- Education and Profession;
- Hobbies and leisure activities;
- Salary range and employment details;
- Family and household demographics;
- And other related products and services subscribed to.
- Under certain circumstances, telephone calls made to any of NTUC Health’s centres/branches are recorded for the purposes of quality control, appraisal, as well as staff management and development. In such an event, by agreeing to this Policy, you hereby give your clear and unambiguous consent for the collection, use and disclosure of such Personal Data in accordance to this Policy.
ACCURACY OF PERSONAL DATA
Where possible, NTUC Health will validate data provided using generally accepted practices and guidelines. This includes the use of check sum verification on some numeric fields such as account numbers or credit card numbers. In some instances, NTUC Health is able to validate the data provided against pre-existing data held by NTUC Health. In some cases, NTUC Health is required to see original documentation before we may use the Personal Data such as with Personal Identifiers and/or proof of address. To assist in ensuring the accuracy of your Personal Data in the possession of NTUC Health please inform us of any updates of any parts of your Personal Data by sending an email to the DPO at the email address provided at Section 2(ii).
PROTECTION OF PERSONAL DATA
NTUC Health uses commercially reasonable physical, managerial, and technical safeguards to preserve the integrity and security of your Personal Data and will not knowingly allow access to this data to anyone outside NTUC Health, other than to you or as described in this Policy. However, NTUC Health cannot ensure or warrant the security of any information you transmit to NTUC Health and you do so entirely at your own risk. In particular, NTUC Health does not warrant that such information may not be accessed, altered, collected, copied, destroyed, disposed of, disclosed or modified by breach of any of NTUC Health’s physical, technical, or managerial safeguards.
ACCESS AND CORRECTION OF PERSONAL DATA
- In accordance with Clause 2(i) of this Policy, you have the right to:
- check whether NTUC Health holds any Personal Data relating to you and, if so, obtain copies of such data; and
- require NTUC Health to correct any Personal Data relating to you which is inaccurate for the purpose for which it is being used.
- NTUC Health reserves the right to charge a reasonable administrative fee in order to meet your requests under Clause 6(i)(a). Upon payment of the requisite fee under Clause 6(i)(a) and/or receipt of your request under Clause 6(i)(b), your request shall be processed within 30 days.
- If you wish to verify the details you have submitted to NTUC Health or if you wish to check on the manner in which NTUC Health uses and processes your personal data, NTUC Health’s security procedures mean that NTUC Health may request proof of identity before we reveal information. This proof of identity will take the form of full details of name, and NRIC or Passport or Fin number. You must therefore keep this information safe as you will be responsible for any action which NTUC Health takes in response to a request from someone using your personal details.
STORAGE AND RETENTION OF PERSONAL DATA
NTUC Health will delete, as reasonably possible, or otherwise anonymise any Personal Data in the event that the Personal Data is not required for any reasonable business or legal purposes of NTUC Health. The Personal Data is deleted from NTUC Health’s electronic, manual, and other filing systems in accordance with NTUC Health’s internal procedures and/or other agreements. For Personal Data provided for employment purposes, such Personal Data will be retained by NTUC Health for a period of only 3 months following the application.
To the extent that any of the communication means which you have provided NTUC Health with (which may include, your telephone number and fax number) is/will be listed on the Do Not Call Registry (the “DNC”), by checking the DNC box on the Consent form, or by any other means of indication, you hereby grant NTUC Health your clear and unambiguous consent to contact you using all of your communication means you have provided to NTUC Health including using via voice calls, SMS, Whatsapp, MMS, fax or other similar communications applications or methods, for the purposes as stated above in Paragraph 3(ii). This will ensure your continued enjoyment of NTUC Health’s promotional rates and services.
NTUC Health reserves the right to alter any of the clauses contained herein in compliance with local legislation and/or to meet its global policy requirements, and for any other purpose deemed reasonably necessary by NTUC Health. You should look at these terms regularly. If you do not agree to the modified terms, you should inform us as soon as possible of the terms to which you do not consent. Pending such notice, if there is any inconsistency between these terms and the additional terms, the additional terms will prevail to the extent of the inconsistency.
This Policy is governed by and shall be construed in accordance with the laws of Singapore. You hereby submit to the non-exclusive jurisdiction of the Singapore courts.
- This Policy only applies to the collection and use of Personal Data by NTUC Health. It does not cover third party sites to which we provide links, even if such sites are co-branded with our logo. NTUC Health does not share your Personal Data with third party websites. NTUC Health is not responsible for the privacy and conduct practices of these third party websites, so you should read their own privacy policies before disclosure of any Personal Data to these websites.
- NTUC Health will not sell your personal information to any third party without your permission, but we cannot be responsible or held liable for the actions of third party sites which you may have linked or been directed to NTUC Health’s website.