Personal Data Protection Policy

Published on 05 Oct 2025
GENERAL Yiu Healthcare is committed to safeguarding your data and ensuring compliance with PDPA and the relevant authorities and regulations for the corporate usage of the data for our business operations. Personal Data means any information or combination of information, relating, directly or indirectly to you. COLLECTION OF PERSONAL DATA Depending on the nature of your interaction with us, the Personal Data we collect may include your personal identification information, health and medical information, account and profile information, network traffic and related data and/or any other information which have been provided to us or we may have access to, in the course of your interaction with us. Personal Data of Vulnerable Persons: We will obtain parent, guardian or legal representative’s permission before collecting, using or disclosing Personal Data of Vulnerable Persons. If a parent, guardian or legal representative becomes aware that Personal Data of a child or ward has been provided by that child or ward without the consent of the relevant parent, guardian or legal representative, please contact us. Such Personal Data will be disposed of from our records. Your personal data may be collected by us (at all times in accordance with applicable law) a) when you register for or use any services or products we provide; respond to or register for any of our initiatives or events; b) visit our website; c) send us an email; d) request to be included in our mailing list; e) interact with our staff, including customer service officers, for example, via telephone calls (which may be recorded), letters, fax, face-to-face meetings, social media platforms and emails; f) call us to fix an appointment; g) when your images are captured by us via CCTV cameras while you are within our premises, or via photographs or videos taken by us or our representatives when you attend our events; h) request that we contact you; i) and/or submit your personal data to us for any other reason. PURPOSES FOR COLLECTION, USE OR DISCLOSURE OF YOUR PERSONAL DATA Primary purposes. Our primary purpose in collecting your personal data is to serve you. Generally, we collect, use or disclose your personal data (or, where you are our corporate customer, the personal data of your employees) for the following purposes: a) to manage your relationship with us; b) to provide you with the services that you have requested; c) providing you with customer service and support; d) verifying your identity; e) to administer medical care, including dispensing medication and treatment, liaising with third party specialist doctors, clinics, hospitals and/or f) medical institutions in relation to your medical care (including by providing them with access to your medical records); g) to assist you with your enquiries; h) to contact you for feedback after the provision of our services; i) personalising your experience at our touchpoints and conducting market research, understanding and analysing customer behaviour, location, preferences and demographics in order to improve our service offerings; j) to keep you updated on our events and services; k) and/or purposes which are reasonably related to the aforesaid. Business purposes. In addition to the purposes set out above, we may also collect, use and/or disclose your personal data for purposes connected or relevant to our business, such as: complying with our legal obligations and requirements; enforcing obligations owed to us and administering debt recovery and debt management; research into the development of new products and services or improvement of our existing products and services; accounting, risk management and record keeping; carrying out research, planning and statistical analysis; processing and handling of medical and insurance claims and payments; and staff training; monitoring or recording phone calls and customer-facing interactions for quality assurance, employee training and performance evaluation and identity verification purposes; preventing, detecting and investigating crime and analysing and managing commercial risks; in connection with any claims, actions or proceedings (including but not limited to drafting and reviewing documents, transaction documentation, obtaining legal advice, and facilitating dispute resolution), and/or protecting and enforcing our contractual and legal rights and obligations; managing the safety and security of our premises and services (including but not limited to carrying out CCTV surveillance and conducting security clearances); conducting any form of investigations including but not related to those relating to disputes, billing, fraud, offences, prosecutions etc.; meeting or complying with any applicable rules, laws, regulations, codes of practice or guidelines issued by any legal or regulatory bodies which are binding on us (including but not limited to responding to regulatory complaints, disclosing to regulatory bodies and conducting audit checks, due diligence and investigations); facilitating business asset transactions (which may extend to any mergers, acquisitions or asset sales); and/or purposes which are reasonably related to the aforesaid business purpose. Vendors If you are an employee, officer or owner of an external service provider or vendor outsourced or prospected by us, in addition to the other purposes set out in this Policy (as may be applicable), we may also collect, use and/or disclose your personal data and/or personal data submitted by you to us for the following purposes: assessing your organisation’s suitability as an external service provider or vendor for us; managing project tenders and quotations, processing orders or managing the supply of goods and services; creating and maintaining profiles of our service providers and vendors in our system database; processing and payment of vendor invoices and bills; facilities management (including but not limited to issuing visitor access passes and facilitating security clearance); and/or purposes which are reasonably related to the aforesaid. Marketing purposes. If you have consented, we may collect, use and/or disclose your personal data for the purposes of marketing our products and services and those of our strategic partners and business associates e.g. informing you of our latest events and services. In order for us to market products and services which are of special interest and relevance to you in order to collect, use and/or disclose your personal data for these marketing purposes, we may analyse and rely on your overall interaction with us (such as but not limited to your medical and treatment history as well as your other interactions with us). Withdrawal of consent for marketing purposes. You have a choice to withdraw your consent for receiving marketing or promotional materials/communication. You may contact us using the contact details found below. Please be aware that once we receive confirmation that you wish to withdraw your consent for marketing or promotional materials/communication, it may take up to [30 calendar days] for your withdrawal to be reflected in our systems. Therefore, you may still receive marketing or promotional materials/communication during this period of time. Please note that even if you withdraw your consent for the receipt of marketing or promotional materials, we may still contact you for other purposes in relation to the services that you have requested or purchased from us. Contacting you. When using your personal data to contact you for any of the above purposes, we may contact you via regular mail, fax, e-mail, SMS, telephone or any other means. In relation to the sending of marketing or promotional information, we will only send you such information via regular mail, fax, e-mail, SMS, telephone or any other means where this is permitted under the PDPA. DISCLOSURE OF INFORMATION We will not sell your personal data to third parties. If you have consented to receiving marketing information from us, our strategic partners and business associates, we will be disclosing your personal data to them. They will use your personal data only for the purposes you have consented to. You agree that we may disclose or share your personal data with third parties who provide necessary services to us, such as:- service providers and data processors working on our behalf and providing services such as hosting and maintenance services, analysis services, e-mail messaging services, delivery services, handling of payment transactions, marketing etc. our consultants and professional advisers (such as accountants, lawyers, auditors) We will also disclose your personal data to third parties in order to comply with legal obligations or industry requirements. This includes disclosures to legal, regulatory, governmental, tax and law enforcement authorities. You fully understand and unambiguously consent that we may transfer your personal data to any location outside of Singapore for the purposes set out above. If we transfer your personal data to a country or territory outside of Singapore, we will ensure that the recipient of the personal data provides a standard of protection that is comparable to the protection which your personal data enjoys under the laws of Singapore. Where these countries or territories do not have personal data protection laws which are comparable to that in Singapore, we will enter into legally enforceable agreements with the recipients to ensure that they protect your personal data to the same standard as required under the laws of Singapore. WITHDRAWAL OF CONSENT, ACCESS AND CORRECTION OF YOUR PERSONAL DATA Please contact our Data Protection Officer(DPO) at contact@yiuhealthcare.com if you would like to withdraw your consent to any use of your personal data or would like to obtain access and make corrections to your personal data records. Please contact the DPO as well if you would like to communicate any issue or complaints with regards to data privacy. ENSURING PERSONAL DATA IS UP-TO-DATE We rely on the Personal Data we hold in conducting our business. Therefore, it is very important that the Personal Data we hold is accurate, complete and up-to-date. You shall ensure that all Personal Data submitted to us is complete, accurate, true and correct. Please update us immediately if there is any change to the Personal Data you submitted to us as it may result in our inability to provide you with services and products you have requested. A fee will be charged by us for the retrieval of personal information retained by YIU Healthcare. TRANSFER OF PERSONAL DATA OUT OF SINGAPORE Due to our partnerships and international collaboration, your Personal Data may be accessed by or transferred to our affiliates and/or authorised external parties from various countries around the world to fulfil the purposes as stated within this policy, Hence, we may transfer your Personal Data to jurisdictions located outside of Singapore, which may have data protection related laws and rules that are different from the standards provided under the PDPA. Personal Data may be transferred to an authorised external party, located internationally only if, we believe it is necessary or appropriate to ensure compliance with applicable data protection related laws which may include responding to requests from public and government authorities, cooperation with law enforcement agencies or other legal reasons; and/orFSteps will be taken to ensure that your personal data continues to receive a standard of protection that is at least comparable to that provided under the Singapore PDPA. RETENTION The personal data collected from you by us is retained for the period of time that the purpose for which the personal data was collected continues. We will destroy the personal data thereafter, unless it is necessary to retain the personal data longer for our satisfaction and compliance of legal, regulatory or accounting requirements, or to protect our interest. SECURITY Precautions and measures will be taken to ensure that the information you provide is protected against unauthorised or unintended access. However, we cannot be held responsible for unauthorised or unintended access that is beyond our control. AMENDMENT OF PRIVACY POLICY This privacy policy will be amended from time to time. The updated privacy policy will be made available on this website. GOVERNING LAW This privacy policy is governed by the laws of Singapore. You consent to submit to the exclusive jurisdiction of the Courts of Singapore in any dispute relating to this privacy policy.