Effective Date: September 16, 2018

Last Updated: October 31, 2025

 

Garrod Health (“Garrod,” “we,” “us,” or “our”) respects your right to privacy and is committed to protecting the confidentiality, integrity, and security of your personal data. We process all personal and sensitive information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the issuances of the National Privacy Commission (NPC), and other applicable laws including the Magna Carta for Persons with Disabilities (RA 7277) and the Mental Health Act (RA 11036). This Privacy Policy explains how we collect, use, share, retain, and protect your personal data when you visit our websites, access our facilities, or use any of our medical services — including our specialty pharmacies, dialysis centers, diagnostic and laboratory services, radiology centers, clinics, home care, and other affiliated healthcare facilities.

 

1. Scope of This Policy

This Policy applies to all personal data processed by Garrod Health and its subsidiaries, whether collected online (through our website, digital forms, or email) or offline (at our pharmacies, clinics, and medical facilities). It covers all patients, customers, healthcare professionals, employees, vendors, and partners.By availing of our services or using our website, you agree to the terms of this Privacy Policy. If you do not agree, please refrain from using our services.

 

2. Who May Use Our Services

Our services are designed for patients of all ages and health conditions, including pediatric patients, adult patients, and persons with disabilities (PWDs) who may require representative consent.For minors and individuals unable to provide consent, a parent, legal guardian, or duly authorized representative must act on their behalf.

 

3. Special Provisions for Minors and Persons Unable to Give Consent

In accordance with the Data Privacy Act and NPC Advisory 2022-01, Garrod Health implements heightened safeguards when handling the data of minors, elderly dependents, or persons with physical, developmental, or mental impairments who may not be capable of providing valid consent.

a. Consent and Representation

• Personal data of minors (below 18 years) and incapacitated patients are processed only with the verifiable consent of a parent, guardian, or lawful representative.

• Consent may be obtained through a signed consent form, electronic confirmation, or in-person authorization at the point of care.

• For home care or assisted-living services, consent may also be obtained through a designated healthcare proxy or family caregiver.

b. Data Collected

Only data necessary for care delivery will be collected, such as:

• Full name, birthdate, contact details, and demographic information;

• Medical history, laboratory or radiologic results, dialysis records, and prescriptions;

• Treatment plans and home-care logs;

• Insurance, PhilHealth, or government benefit details;

• Emergency contact and guardian information.c. Rights and ResponsibilitiesParents, guardians, or lawful representatives may:

• Access, review, and correct the patient’s information;

• Withdraw consent subject to medical, ethical, and legal constraints;

• Request deletion or anonymization once data are no longer required.All data processing shall uphold the best interest and dignity of the patient.

 

4. Information We Collect

Depending on the type of service, Garrod Health may collect the following categories of information:

1. Personal Information:Name, date of birth, gender, contact details, and address.

2. .Sensitive Personal and Medical Information: Medical diagnosis, treatment records, prescriptions, laboratory and radiology results, dialysis schedules, home-care assessments, and health insurance details.

3. Financial Information:Billing records, payment details, guarantee letters, and benefit claim information (PhilHealth, PCSO, DSWD, etc.).

4. Professional Information (for partners and staff):License numbers, affiliations, employment details, and background credentials.

5. Website and Technical Data:IP address, browser type, operating system, and cookies or analytics data.

 

5. Purpose of Data Processing

We process your personal data for legitimate purposes related to the provision of safe, effective, and lawful healthcare, including:

• Delivery of medical, diagnostic, pharmaceutical, and home-care services;

• Coordination of treatment, prescriptions, and continuity of care;

• Laboratory, radiology, and dialysis record management;

• Processing of PhilHealth, PCSO, DSWD, and other benefit claims;

• Appointment scheduling and communication with patients or representatives;

• Compliance with DOH, FDA, NPC, and other regulatory requirements;

• Data analytics, research, and service improvement (in anonymized form);

• Patient safety monitoring, audits, and quality assurance.

 

6. Data Sharing and Disclosure

We may share your personal data only as necessary and in accordance with the law, including with:

• Authorized Garrod Health medical and administrative personnel;

• Partner hospitals, physicians, diagnostic laboratories, and treatment centers;

• Government agencies (e.g., DOH, FDA, PhilHealth, DSWD, PCSO) for legitimate purposes;

• Third-party service providers (IT, logistics, billing, marketing) under Data Processing Agreements (DPAs);

• Legal authorities when required by lawful order or public health duty. We do not sell, trade, or rent personal data to any third party.

 

7. Data Retention and Security

Garrod Health retains personal data only for as long as necessary to fulfil the purpose for which it was collected or as mandated by law. We implement organizational, physical, and technical measures to safeguard information, such as:

• Encrypted data storage and secure servers;

• Controlled system access and authentication protocols;

• Regular audits and compliance reviews;

• Privacy training for all employees handling patient data. Data that are no longer required are permanently deleted or anonymized.

 

8. Rights of Data Subjects

Under the Data Privacy Act, you (or your lawful representative) have the right to:

1. Be Informed about how your data are collected and processed;

2. Access your personal data and request a copy thereof;

3. Rectify inaccurate or outdated information;

4. Withdraw Consent or object to certain processing activities;

5. Request Erasure or Blocking of unnecessary data;

6. Data Portability where applicable;

7. File a Complaint before the National Privacy Commission (NPC) for any violation of your rights.

​

9. Use of Cookies

Our website uses cookies to improve performance, analyze usage, and personalize your experience. Cookies do not collect identifiable data unless voluntarily provided. You may disable cookies through your browser settings, but some features may not function optimally.

​

10. External Links

Our website and online services may link to third-party websites. Garrod Health is not responsible for their privacy practices or content. Please review their respective privacy policies before providing any personal information.

 

11. Updates to This Policy

Garrod Health may revise this Privacy Policy to comply with new regulations or improve privacy practices. Updated versions will be posted on our website with the revised effective date. Continued use of our services indicates your acceptance of any revisions.

 

12. Contact Information

For inquiries, concerns, or to exercise your data privacy rights, please contact:

Data Protection Officer (DPO)

Garrod Health

📍 Head Office: Cainta, Rizal, Philippines

📧 dataprivacy@garrod.ph

☎ (0917) 144 0336

You may also reach out to the National Privacy Commission (NPC) through:

🌐 https://www.privacy.gov.ph

📧 info@privacy.gov.ph