Gleneagles Healthcare ("GHC") is committed to protecting patient privacy. We hope the following policy will help you to understand how we collect, use, communicate, disclose and safeguard your personal information. The following outlines our privacy policy. You may also refer to the Personal Data Protection Notice of our parent company IHH Healthcare Berhad.

1. The purposes for which personal information is being collected will be identified before or at the time of collecting it.
2. All personal data collected will be used solely for the purpose for which it was gathered, for purposes directly related, or to assist you in making enquiries or appointments, or for other compatible purposes, or any other purposes as maybe agreed between you and GHC, including clinical research and development, clinical teaching and professional training carried out by GHC unless GHC obtains the consent of the individual concerned or as required by law or court order.
3. GHC will only retain personal information as long as necessary for the fulfillment of those purposes, unless the personal data is also retained to satisfy any applicable statutory or contractual obligations.
4. GHC will take practicable steps to ensure that the personal data is accurate having regard to the purpose for which the personal data is or is to be used.
5. Computer data are stored on computer systems and storage media to which access is strictly controlled. Where GHC holds, uses, and/or transmits your personal data it will take all practicable steps to ensure the data is protected from accidental and/ or unauthorized access, disclosure, copying, use, destruction or modification. 

6. All personal data held by us will be kept confidential but GHC may, where such disclosure is necessary to satisfy the purpose for which the data was collected, provide such information to:

   1. Any subsidiaries, holding companies, associated companies, or affiliates of, or companies controlled by GHC;
   2. Any person or company who is acting for or on behalf of GHC, or jointly with GHC, including medical staff, doctors, consultants and nurses, in respect of the purpose for which the data was provided;
   3. Any other person or company who is under a duty of confidentiality to GHC and has undertaken to keep such information confidential, provided such person or company has a legitimate right to such information;
   4. GHC’s dealers, agents, contractors, suppliers and other telecommunication, information service providers and content providers;
   5. GHC’s professional advisers, including its accountants, auditors and lawyers; and
   6. Government and regulatory authorities and other organisations, as required or authorized by law or court order. Provided that where such provision requires transfer of personal data to a place outside Hong Kong, we will seek your consent in writing to the transfer and GHC will take all reasonable precautions and exercise all due diligence to ensure that the data will not in that place where the personal data is to be transferred be collected, held, processed or used in any manner which, if that place were Hong Kong, would be a contravention of the requirement under the Personal Data (Privacy) Ordinance (Cap.486) (the Ordinance);
7. Personal data may be disclosed to any person(s) pursuant to any statutory or contractual obligations or as required by court, provided such person(s) are able to prove the required right or authority to such information.
8. Personal data may also be disclosed under Part VIII of the Ordinance as exemption from the provisions of the Ordinance. 
9. You have the right to ascertain whether GHC holds any of your personal data and, if so, obtain copies of such data, and require GHC to correct personal data in its possession which is inaccurate.
10. GHC will make readily available to customers information about our policies and practices relating to the management of personal information.
11. GHC may process personal data for making direct marketing communications for which we will obtain your consent and offer you the opportunity to choose not to receive such communications. In every subsequent direct marketing communication which is made to you, GHC will offer you the opportunity to opt out of further marketing communications.
12. Personal Data may also be collected, used, transferred or otherwise processed for one or more of the purposes set out in the Personal Data Protection Notice of our parent company IHH Healthcare Berhad.
13. If there is any inconsistency or ambiguity between the English version and the Chinese version of this Privacy Policy Statement, the English version shall prevail.

You may request access to and/or correction of your personal data under the Ordinance by sending a written request to Gleneagles Healthcare Wong Chuk Hang, Hong Kong (Address: 10/F, Marina 8, 8 Heung Yip Road, Wong Chuk Hang, Hong Kong).

GHC reserves the right to amend or modify this policy from time to time without prior notifications. Any changes to this privacy policy statement shall be effective immediately upon posting.

- January 2024