Privacy Policy

Categories of Personal Data that we collect, store and process are as follows:

• Contact information (such as name, address, email address, and telephone number).
• Identification information (such as national identification number, passport identification number, social security number, and date of birth).
• Financial details (such as credit/debit card details, bank account number, and insurance number).
• Health data (such as health conditions, past prescriptions, and lab reports).
• Demographic information (such as age range, marital status, gender, and religion).
• Online identifiers and other technical data (such as IP address, browser type, and device identifiers).
• Communication details (such as communications conducted through emails).
• Testimonials that may contain personal data.
• Biometric data.
• Any photographic and/or video footage captured or recorded by our surveillance camera (CCTV) system or any other recording system.
• Education information (such as field of studies, university, country of study, academic scores, achievements, and professional certifications).
• Employment information (such as employer name, address, email address, telephone number, position employed, and employment tenure).

We collect your Personal Data in the following ways:

• When you visit our facility and submit personal details (such as registration forms, visitor forms, and medical history) to avail of services as an in-patient, out-patient, or visitor.
• When you interact with us through our websites or mobile applications or use services available on our websites or mobile applications.
• When you interact with our staff via phone, fax, or third-party applications for customer service or to submit any documents.
• When your images are captured through CCTV cameras while you are within our premises.
• When we generate medical data based on diagnostics and observations as part of your medical treatment (such as blood reports and vital observations).
• When we receive your personal data through third parties (such as medical records received from insurance providers or referring physicians).
• When you submit an employment application (such as your CV or resume).
• When you interact with us as part of our external programs, such as the Healthcare Explorer Program or the Continuous Medical Education Program.

We use your Personal Data for the following purposesIf you are a Patient, we process your Personal Data for:

• Accurate diagnosis and treatment.
• Identity verification.
• Insurance processing, billing, and customer service.
• Improving the quality of services and optimizing the hospital visit experience.

If you are an Employee or a potential employee, we process your Personal data for:

• Salary processing, insurance processing, attendance tracking, and performance management.
• Evaluating candidate profiles against available job openings.
• Immigration processing and other clearance-related processes (such as police verification and medical checks) for international employees.
• If you are a vendor, we process your personal data for vendor registration and payment purposes.

If you are a physician who is part of our Continuous Medical Education (CME) program, we process your Personal Data to:

• Communicating information about upcoming CME events.
• Sharing certificates for CME events that you have attended.
• Maintaining and managing your CME credits.

If you are a student who is part of our Healthcare Explorer Program, we process your Personal Data to

• Promoting the Healthcare Explorer Program.
• Maintaining and managing waiver forms.

If you are a website visitor, we process your Personal Data to optimize your website experience and customize content.

We process your Personal Data by relying on one or more of the following lawful grounds

• You have provided us with your explicit consent to process your personal data for a specific purpose.
• The processing is necessary to fulfil our contractual obligations with you (for example, communicating with you regarding existing products and services availed by you).
• To evaluate, develop, and improve our products and services.
• The processing is necessary to protect vital interests (for example, during medical emergencies).
• The processing is necessary to comply with legal obligations towards other stakeholders, such as law enforcement agencies, government agencies, and regulators.
• The processing is necessary to perform functions in the public interest or comply with orders of official authorities under applicable data protection laws (for example, the administration of justice and carrying out parliamentary functions).
• The processing is necessary for activities that qualify as legitimate interests (for example, marketing purposes and disclosing your personal information to pathological laboratories to conduct necessary tests).

Where the processing is based on your consent, you have the right to withdraw your consent at any point in time. Upon receipt of your request to withdraw your consent, the consequences of withdrawal will be communicated to you. In many cases, upon such a withdrawal, we may not be able to continue offering our products and services to you. You may withdraw consent by contacting us using the details specified in the ‘Contact Us’ section

We may disclose your Personal Data to the following third parties:

• Our parent company for business and operational purposes.
• Insurance providers.
• Physicians or medical institutions.
• Medical equipment vendors.
• Government bodies (such as the Immigration Department).
• Banks.

you have freely consented to share your Personal Information with us, You authorize us to exchange, transfer, share, or part with all or any of your Personal Information, across borders and from Your country to any other countries across the world with the Cloud Service Provider and Our affiliates/agents / third party service providers/partners/banks and financial institutions or any other persons, for the purposes specified under this Notice or as may be required by applicable law.

You acknowledge that some countries where we may transfer Your Personal Information may not have data protection laws that are as stringent as the laws of Your own country. You acknowledge that it is adequate that when HCCI transfers your Personal Information to any other entity within or outside your country of residence, HCCI will place contractual obligations on the transferee, to ensure reasonable security measures for protection of your Personal Information, which will oblige the transferee to adhere to the provisions of this Privacy Notice.

We may collect and store your personal data in electronic and/or physical form, depending on the requirement. Information may be stored at our and third-party premises within IT Systems (e.g., external cloud storage, internal or third-party management systems, e-mails, databases, hard drives), document warehouses, etc.

We endeavor, where practicable, to process your personal data in a safe environment by preventing any unauthorized or unlawful processing of personal data or accidental loss or destruction of, or damage to, such information. We train our employees about the importance of maintaining the privacy and security of your Personal Data.  We have implemented various physical, technical, and administrative security measures to protect your personal data and our network from unauthorized access. Some of these measures include:

• Encryption of personal data.
• Strict adherence to privacy and security practices.
• Periodic security assessments and reviews to enhance our security practices.
• Restriction of access to authorized personnel who have a legitimate need to access such data.

We will retain your personal data only for as long as such information is necessary for the purposes it was collected. The retention period for personal data may also be affected by the requirements of applicable laws. In all cases, information may be held for a longer period where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or subject to law, a shorter period where the individual objects to the processing of their personal data. We shall take reasonable steps to destroy or permanently delete personal data that is no longer needed, including that processed by third parties engaged by HCCI from time to time.

Some of our services and processes require collection of Children’s Personal Data. For such purposes we use appropriate lawful basis for the processing. The information in the relevant parts of this notice applies to children as well as adults.

We use cookies and other tracking mechanisms on our website to collect data about you. 

We use the data collected from cookies and trackers to analyze trends and statistics. This will help us optimize and customize your website experience and to provide better website functionalities. We collect Personal Data about you via our Mobile App using permissions such as camera, storage, location, etc. Your iOS and Android devices will notify you of the permissions that our App seeks and will provide you an option to consent to or refuse the permission. We use the data obtained through permissions to enhance the functionality of the App and to analyse it to serve you better.

You have certain rights regarding your Personal Data that is with us, and we are committed to providing you with these rights.

• Right of Access: You have the right to access your Personal Data held by us, along with supporting information, in an intelligible format.
• Right to Rectification: You have the right to request the correction of any Personal Data held by us that you believe is inaccurate. You also have the right to request completion of any Personal Data that you believe is incomplete.
• Right to Stop or Restrict Processing: You have the right to request that we stop or restrict the processing of your Personal Data under certain circumstances.
• Right to Stop Direct Marketing: You have the right to request that we stop processing your Personal Data for direct marketing purposes.
• Rights in Relation to Automated Decision-Making: You have the right not to be subjected to solely automated individual decision-making, including profiling.
• Right to Complain: You have the right to lodge a complaint with the Ombudsman regarding any perceived privacy violations. You can contact the Ombudsman at info@ombudsman.ky.

If you wish to exercise any of your rights, you can contact us using the details provided in the Contact Us section of this notice.

Our website may contain links to websites of other organisations. This privacy notice does not cover how that organisation processes Personal Data. We encourage you to read the privacy notices on the other websites you visit

We regularly review and update our Privacy Notice to ensure it is up-to-date and accurate. Any changes we may make to this Privacy Notice in the future will be posted on this page. When we post changes to this Privacy Notice, we will revise the “last updated” date.

For any further queries and complaints related to privacy or exercising your rights, you could reach our Data Protection Officer, Dr Binoy Chattuparambil at: dpo@healthcity.ky

Address:

Health City Cayman Islands

1283 Sea View Rd, Grand Cayman, KY1-1005