PDPA Policy

01

About this policy

This policy explains how Fusion Medical Aesthetics, operated by Fusion Medical Pte. Ltd. (UEN 201008166K), at 501 Orchard Road, #04-11 Wheelock Place, Singapore 238880, handles personal data in line with the Personal Data Protection Act 2012 (PDPA). It applies to personal data we receive in the clinic, by phone, WhatsApp and email, and through this website.

Medical records are also governed by Singapore's healthcare laws and professional rules. Where those laws require more of us than the PDPA, we follow them.

02

Personal data we collect

Depending on the care you receive, this may include:

• your name, NRIC, FIN or passport number, date of birth, sex and nationality;
• your phone number, email and address, and an emergency contact;
• your medical history, medicines, allergies, examination findings, test and scan results, reports and doctor's notes;
• clinical photographs taken for your medical record, only with your consent;
• insurance, employer and billing details;
• messages you send us, and appointment and enquiry records.

03

How we collect it

Mostly from you: when you register, book, fill in forms, speak with our team or doctors, or send an enquiry. We may also receive personal data from laboratories and imaging providers that process your tests, from doctors or hospitals who refer you to us, and from your employer or insurer when you attend a screening or check-up they have arranged.

04

Why we use it

• To provide aesthetic consultations and treatments, and to follow up on your care.
• To arrange appointments and send reminders, results and reports.
• To bill you, and to process claims with insurers, employers and government schemes where they apply.
• To meet our legal and regulatory duties, including reporting to the Ministry of Health and national health registries where the law requires it.
• To answer your questions and improve our services and patient safety.
• To send you news and offers, but only if you have agreed to receive them.

05

Consent and withdrawal

We collect, use and disclose your personal data with your consent, or where the PDPA or another law allows us to do so without it. You can withdraw your consent at any time by writing to our Data Protection Officer. We will tell you what withdrawing may mean: for example, we may be unable to continue some care or services. Withdrawing consent does not affect medical records we must keep by law.

06

Who we share it with

Only as needed, and with people and organisations bound to keep it confidential:

• our doctors and clinic team involved in your care;
• laboratories, imaging providers and specialists, when your care needs them;
• your insurer or employer, for claims or arrangements you have authorised;
• government agencies and national health systems, where the law requires it;
• service providers who support our clinic systems, communications and this website.

We do not sell your personal data. If we need to transfer it outside Singapore, we make sure it receives protection comparable to the PDPA.

07

Protection and retention

We protect personal data with reasonable administrative, physical and technical safeguards, and limit access to those who need it. Medical records are kept for the periods required by healthcare laws and regulations. Other personal data is kept only as long as it is needed for the purpose it was collected for, or as required by law.

If a data breach is likely to cause you significant harm, or affects a large number of people, we will notify the Personal Data Protection Commission and, where required, the people affected.

08

Access and correction

You may ask for a copy of your personal data, how it has been used or disclosed in the past year, or for a correction. Please write to our Data Protection Officer. We may need to verify your identity, and we may charge a reasonable fee for access requests; we will tell you the fee first. We aim to reply within 30 days, and will let you know if we need longer.

09

Marketing messages

We send news or promotional messages only with your consent, and we respect the Do Not Call Registry. You can opt out at any time by replying to the message or writing to our Data Protection Officer. Messages about your care, appointments and results are not marketing.

Please do not send medical records, identity documents or payment details through the website enquiry form.

10

Contact our Data Protection Officer

For questions about this policy, or to make a request about your personal data:

We may update this policy from time to time. The latest version is always on this page, with the date it was last updated.