Privacy Policy

I. INTRODUCTION

This Privacy Notice describes our policies and practices regarding the collection and use of personal information provided by our users or collected by us on the sites and applications where this policy is posted whether on our digital properties or on applications that we make available on third-party sites or platforms.

II. DATA PRIVACY

Medicare Plus Inc. is a Philippine based entity, with a registered Data Privacy Officer responsible for ensuring the confidentiality, integrity, and availability of your personal information. If you have privacy concerns or if you wish to enforce your rights to be informed, to object, to access, to correct, to erasure, to complain, or to data portability, please direct your query to Medicare Plus’ DPO as follows:

OFFICER OF THE DATA PROTECTION OFFICER
34F Orient Square, F. Ortigas Jr. Road, San Antonio, Pasig City
National Capital Region (NCR) 1600 Philippines
09088158780 | dpo@medicareplus.com.ph

III. COLLECTION OF DATA

Medicare Plus Inc. collects various types of information so we can provide you the best and the most efficient service possible in the market. The following describes the information we collect according to source.

A. From You as a member/guest

  1. Platform registration information you provide when registering through our platforms such as our website, inquiry in our official social media accounts, FastCare mobile application, ER Guard or ER Guard plus activation,
  2. Transaction information you provide when you request information, contact us through various platforms, purchase, request a service from us, such as your postal address, telephone or mobile number and email;
  3. Reimbursement information you provide when you request for reimbursements covered by your plan such as your name, official receipts, medical record and bank details for payment;
  4. Visitor information you provide when you visit our office premises or clinics.
  5. PhilHealth Registration ID No., and other information that is required in the registration and availment of the Konsulta program of PhilHealth.
  6. Specific data requested for actuarial purposes, risk assessments, and quality management, as authorized by law, provided that only anonymized or aggregated data will be used where feasible.

B. From Third Parties

  1. Membership Registration information your Principal provides (typically this information is from your employer or insurance provider). This information is limited to your name, age, gender/sex, employment rank and tenure, contact details such as email and mobile number;
  2. Activity information about your use, and the use by any person(s) you authorize through your account (for instance, our member’s portal, if available to you), of our services, and your preferences;
  3. Location information including precise or approximate location information provided by a mobile or other device interacting with one of our sites, applications, or physical properties (including through beacon technologies), or associated with your IP address or other online or device identifier, where we are permitted by law to process this information.
  4. Utilization of Konsulta Medicines and Laboratories procedures which may include clinical data required by PhilHealth in the processing of claims and reimbursement in the Konsulta Program.
  5. Verification data from third-party processors or partners to ensure the accuracy and completeness of the information provided.

C. From Accredited Facilities

  1. Your utilization related information generated whenever you use our services through our accredited network of facilities such as hospitals. This includes your medical information pertaining to your availments, including diagnosis, medical abstract and procedures undertaken.
  2. Utilization of Konsulta Medicines and Laboratories procedures which may include clinical data required by PhilHealth in the processing of claims and reimbursement in the Konsulta Program.
  3. Medical utilization and clinical data required for PhilHealth claims processing, adhering to proportionality standards outlined in the HMO Privacy Code.
  4. Data necessary for monitoring the delivery of healthcare services, including compliance audits and performance reviews of healthcare providers, in line with legal and regulatory standards.

D. Other Sources

  1. Pictures or videos captured through our platforms and/or CCTV Cameras installed within our premises;
  1. Call recordings when you call our hotlines;
  1. Usage, viewing, technical, and device data when you visit our sites, use our applications on third-party or platforms, or open emails we send, or connect with our wireless internet access services and other similar technologies, including your browser or device type, unique device identifier, and IP address;
  1. Public Forum information posted about us by you made available to all.
  2. Anonymized data obtained from research, statistical analyses, or industry studies conducted for healthcare service improvements and planning.

IV. PURPOSES

In general, Medicare Plus Inc. processes your data to provide you with services you have requested or purchased from us, including membership and contact center services, events, publications, and other content, we use this information to refine services to better tailor them to your needs and to communicate with you about other services Medicare Plus offers. Most of the time, Medicare Plus needs to process your personal data to fulfill our role as your provider of membership services, with all the attendant benefits Medicare Plus provides. Sometimes, Medicare Plus has a legitimate interest in processing data to better understand the needs, concerns, and interests our members and other customers so that they can operate optimally as a business. And sometimes, Medicare Plus relies upon your consent, in which case we will keep a record of it and honor your choices.

Medicare Plus Inc. undertakes quality assessments and complies with regulatory reporting obligations in accordance with the Data Privacy and Protection Standards for HMOs outlined in the Privacy Sectoral Code of the Philippine HMO Industry. These activities involve conducting performance evaluations, risk assessments, and audits to ensure the consistent delivery of high-quality healthcare services. Compliance with legal and regulatory requirements includes reporting to government authorities, regulatory bodies, and relevant stakeholders, as mandated by applicable laws.

The company employs advanced methodologies to analyze service utilization, outcomes, and operational efficiency, which support continuous improvement and informed decision-making in healthcare delivery. Furthermore, all reporting and assessments are carried out in adherence to the principles of transparency, legitimate purpose, proportionality, and accountability, ensuring that personal data is processed strictly for lawful and relevant purposes while safeguarding the rights and privacy of data subjects.

V. DATA SUBJECT RIGHTS

The Data Privacy Act of 2012 provides certain rights for data subjects. A good explanation of them (in English) is available on the website of the Philippine National Privacy Commission Website (https://www.privacy.gov.ph/know-your-rights/)

This Privacy Statement is intended to provide you with information about what personal data Medicare Plus collects about you and how it is used. If you have any questions, please contact us at dpo@medicareplus.com.ph

If you wish to confirm Medicare Plus is processing your personal data, or to have access to the personal data Medicare Plus may have about you, please contact us at dpo@medicareplus.com.ph

You may also request information about the purpose of the processing; the categories of personal data concerned; who else outside Medicare Plus might have received the data from us; what the source of the information was (if you didn’t provide it directly to Medicare Plus); and how long it will be stored.

You have the right to be informed about the collection and processing of your personal data. Medicare Plus provides transparent and accessible information regarding the identity of the organization, the purposes of processing, the types of personal data collected, and any recipients of your data, including third parties and service providers. Additionally, Medicare Plus discloses how long your data will be retained and the criteria used to determine retention periods. For complete details, please visit the Philippine National Privacy Commission website: https://www.privacy.gov.ph/know-your-rights/.

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. Upon request, and where technically feasible, Medicare Plus can transmit your personal data directly to another controller.

You have a right to correct (rectify) the record of your personal data maintained by Medicare Plus if it is inaccurate. You may request that Medicare Plus erase that data or cease processing it, subject to certain exceptions. You may also request that Medicare Plus cease using your data for direct marketing purposes, if initially you have provided your consent.

You also have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how Medicare Plus processes your personal data. When technically feasible, Medicare Plus will – at your request – provide your personal data to you or transmit it directly to another controller.

Reasonable access to your personal data will be provided at no cost to you if you are a member, conference attendees and others upon request made to Medicare Plus at dpo@medicareplus.com.ph. If the access is denied for some reason, Medicare will provide an explanation as to why access has been denied.

For questions or complaints concerning the processing of your personal data, you can email the Medicare Plus’ DPO at dpo@medicareplus.com.ph

VI. SECURITY OF YOUR INFORMATION

To help protect the privacy, security, integrity, and confidentiality of your personal data, we maintain physical, technical, and administrative safeguards. We review, update and test our security procedures on an ongoing basis. We restrict access to your personal data to those employees who need to know that information to provide benefits or services to you. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information. We commit to taking appropriate disciplinary measures to enforce our employees’ privacy responsibilities.

While best practice precautions will be taken to ensure that the information you provide is protected against unauthorized or unintended access that is beyond our control.

VII. DATA STORAGE AND RETENTION

The personal data collected from you by us is retained for the period of time that the purpose for which the personal data was collected continues. Please refer to the table below regarding the Data Retention Schedule specifying the prescribed periods of retention depending on the classification of documents:

No.

Category

Retention Period

Basis

1

Medical Records

15 years

A.O 2020-0030 (Data Privacy Guidelines on the Processing of Health Information)

2

Human Resource

3 years from last entry

Labor Code

3

Finance

5 years for physical , 10 for electronic

BIR RR No. 77-2013

4

Legal

10 years

Prescriptive Period under the Civil Code

5

Others

5 years

Company Policy

VIII. PROCESSING OF INFORMATION

For the purpose of processing of your availment with the Konsulta Program of PhilHealth, your personal data will be shared with the Philippine Health Insurance Corporation in order to process your claims. The following data will be shared:

  1. Patient Name
  2. Patient Birthday
  3. Patient Address
  4. Patient Signature
  5. Patient Medical History
  6. Patient Vitals
  7. Patient Age
  8. Patient Height
  9. Patient Weight
  10. Patient Gender
  11. Phil Health Identification Number
  12. Patient Current Health Screening and Assessment
  13. Patient Pertinent Physical Examination Findings
  14. Patient Laboratories and Imaging Results
  15. Patient Immunizations
  16. Pertinent Physical Examination Findings
  17. Patient NCD High-Risk Assessment Results

Your consent to share this information has been asked from you upon enrollment to the Konsulta and your continued availment of the Konsulta Services shall mean your continuing consent to process, retain, and store the abovementioned data and to share the same to PhilHealth.

We reserve the right to employ third-parties to process the said data before sharing the same to PhilHealth. Sharing shall be limited to entities that employ the same standard of privacy and shall be governed by a separate data sharing agreement.

IX. CONSENT

Your consent to process your data shall be asked prior to its disclosure to us. We will be storing pieces of evidence to prove your consent in the form of signed consent or upon ticking the necessary electronic forms, whichever is applicable.

X. QUESTIONS, CONCERNS, OR COMPLAINTS

If you have questions, concerns, complaints, or would like to exercise your rights, please contact the Medicare Plus’ DPO:

ARVIN A. MACEDA
34F Orient Square, F. Ortigas Jr. Road, San Antonio, Pasig City,
National Capital Region (NCR) 1600 Philippines
09088158780 | arvinmaceda@medicareplus.com.ph

To see our Terms and Conditions, click here.