Northeast Medical Group (hereinafter referred to as “Northeast”) is committed to protecting and respecting your personal data.

This Privacy Statement sets out the basis on which we will process personal data we collect from you, or that you provide to us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting our website, you are accepting and consenting to our practices described in this Privacy Statement.

You can use and browse our website without having to disclose your personal data, except as may be necessary to allow us to respond to your requests or in cases where you contact us directly.

We collect personal data and sensitive personal data only when you provide it to us, through registration, completion of forms, emails, enquiries and requests, and similar situations in which you have chosen to provide the information to us. The information you give us may include, but is not limited to, your name, address, email and medical details. If you choose not to provide such information, it may not be possible for us to respond to your request or enquiry.

We will retain control of, and responsibility for, the use of any personal data you disclose to us. Such data shall remain in our possession, or that of data intermediaries acting on our behalf.

All personal data and other information collected may be used by Northeast individually or collectively and may be combined with other information for the following purposes:

1. Provision of care and care related services
2. Responding to your enquiries or requests pursuant to your online queries, appointments, emails, telephone calls, faxes and/or submission of form(s);
3. Responding to your job application or your recruitment queries;
4. Responding to and taking follow-up action on complaints;
5. Performing office and operational administrative matters following your request; or
6. Seeking feedback and comments on Northeast's business and operational matters.

When you use our website, we may collect and store information about your computer (including your IP address, operating system and browser type) for system administration. This is statistical data about our users' browsing actions and patterns. This data could possibly lead to your identification, but we, and our data intermediaries, do not use it to do so unless permitted by law.

Our website uses cookies to distinguish you from other users of our website by generally storing non-personally identifiable information (i.e. session information such as the number of times you visit our website and the location from which you are accessing the website). If you wish to disable cookies on your computer, you may do so by changing your browser settings. Please note that changing these settings may limit the functionality of some web pages or prevent them from loading properly.

Our website may, from time to time, contain links to and from third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

To support the delivery of patient care to you, and for secondary purposes including the provision of suitable programmes and/or respond to or process your requests to Northeast, we may have to disclose your personal data to any member of our group or to third parties such as our service providers and professional advisors. You hereby authorize us to transfer your personal data to such third parties, who will process your personal data in accordance with this Privacy Statement. Your personal data will not be disclosed to any further parties, unless we have obtained your consent or are legally required to do so.

You agree that the personal data provided by you to Northeast is current, accurate and complete in all respects. If there is any change to your personal data provided to Northeast, you agree to inform Northeast promptly.

The data that we collect from you may be transferred to, and stored at, a destination outside Singapore. It may also be processed by staff operating outside Singapore who work for us or for one of our service providers.

By submitting your personal data, you agree to this transfer, storing and processing. Northeast will take appropriate steps to ensure that your data is treated securely and in accordance with this Privacy Statement.

We use technical and organisational security precautions to protect your data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risk. Our security procedures are continuously revised based on new technological developments. However, while Northeast uses all commercially reasonable endeavours to ensure the security of your personal data, there are inherent risks associated with electronic information (including its transmission by internet or otherwise), and you understand and agree that Northeast cannot guarantee the security, integrity or freedom from error or infection of any electronic communications or information sent or received by you.

We retain your personal data for as long as necessary for the fulfilment of the purposes for which it was collected or to which you have given your consent, except where otherwise provided for by applicable laws, regulations or medical guidelines.

You have the right to withdraw consent, request access to, and correction of personal data that Northeast holds about you in accordance with applicable laws.

All requests for the withdrawal of consent, access to, or correction of personal data held by Northeast shall be made by contacting Northeast at DPO@nemg.com.sg.

Please note that under applicable law, we are not required to correct or otherwise alter any professional or expert opinion. We may also be required and/or entitled to retain your personal data under applicable laws, regulations or medical guidelines notwithstanding the withdrawal of your consent.

This Privacy Statement may be amended, supplemented, modified and updated from time to time.

Questions, comments, complaints and requests regarding your personal data or this Privacy Statement should be addressed to DPO@nemg.com.sg.

Northeast is committed to managing personal data in compliance with the Personal Data Protection Act (“PDPA”).

This section sets out how Northeast manages complaints on personal data protection.

Complaints related to PDPA can include:

1. Collection, use or disclosure of personal data without valid consent
2. Misuse of personal data
3. Failure to correct personal data on request
4. Failure to provide access to personal data on request
5. Loss or exposure of personal data

Northeast will ensure that rights afforded to individuals under the PDPA are protected. If you have a complaint, please contact our Data Protection Officer at DPO@nemg.com.sg.

To help us process your complaint, please provide us with:

1. Your full name
2. Your contact details
3. Name of the officer and corporation that collected, used or disclosed the relevant personal data
4. Date and timing of the incident
5. Details of the incident
6. Any relevant supporting documentation

Once we receive your complaint, our Data Protection Officer will provide you with a written notification of acknowledgement, together with an estimate of our response time (which will depend on the nature of the investigation and the availability of information provided to us to adequately carry out such investigation). We will use reasonable endeavours to respond as promptly as possible. If we cannot respond within the estimated time initially informed to you, we will contact you to advise you on the additional time needed.

Upon conclusion of our investigation, you will be notified in writing on the outcome.

If you are not satisfied with the outcome of your complaint, you may appeal to the senior management of Northeast within 14 calendar days of the above notification. If you are not satisfied with the outcome of your appeal, you may take the matter to the Personal Data Protection Commission.