Privacy Policy for Wonderhealth Pte Ltd

At Wonderhealth Pte Ltd (“Wonderhealth,” “we,” “our,” “us”), we are deeply committed to protecting your privacy and ensuring the confidentiality of your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data in accordance with Singapore’s Personal Data Protection Act (PDPA) and other relevant laws, as well as specific healthcare regulations.

By accessing our website at https://wonderhealth.sg or engaging our services, you agree to the terms outlined in this Privacy Policy.

1. Personal Data We Collect

We may collect and process the following categories of personal data to provide healthcare and related services:

• Identification Data: Full name, NRIC/FIN/passport number, date of birth, and gender.
• Contact Data: Phone number, email address, mailing address.
• Medical and Health Data: Medical history, health conditions, lab results, prescriptions, and test reports.
• Payment Data: Credit card details, billing information, and transaction history.
• Technical Data: IP address, browser type, operating system, device information, and cookies when you visit our website.
• Other Relevant Information: Details you provide during appointments, submissions through online forms, or communications (calls, emails, chat).

How We Collect Personal Data

Personal data is collected through:

1. Registration during healthcare appointments or online bookings.
2. Online forms, chat, and inquiry submissions on our platforms.
3. Direct communication via email, calls, or in person.
4. Cookies and tracking technology used on our website to improve user experience.
5. Referrals from authorized third parties, such as insurance companies, partner clinics, or your employer.
6. Automatic collection of technical information during your interaction with our digital platforms.

2. Purpose of Collecting Personal Data

Your personal data will be collected and used for the following purposes:

Core Purposes:

• Provision of Healthcare Services: To facilitate consultations, health screenings, diagnostic tests, treatment plans, and delivery of health services.
• Appointment and Account Management: Scheduling, reminders, follow-ups, and account maintenance.
• Billing and Administrative Processes: Processing payments, managing insurance claims, and maintaining records.
• Medical Compliance: Reporting for regulatory and public health requirements under local laws.
• Continuity of Care: Sharing relevant information with authorized healthcare providers to ensure seamless care.

Additional Purposes:

• Marketing Communications (with consent): Informing you about promotions, health campaigns, educational content, or new services. You can unsubscribe at any time.
• Improvements: Enhancing our services, managing feedback, and analyzing website or app usage.

We will not use your personal data for purposes other than those listed above unless we obtain your explicit consent.

3. Disclosure of Personal Data

Your personal data will only be disclosed to:

• Medical Professionals: Healthcare providers, specialists, labs, or clinics directly involved in your treatment.
• Health Authorities: Where required by Singapore law for reporting or investigations.
• Payment and IT Support: Service providers for handling billing, secure data storage, and platform management.
• Third-Party Organizations (with oversight): To perform tasks necessary for us to deliver the services or fulfill our regulatory obligations.

All third parties we engage are required to comply with data protection regulations and confidentiality standards.

4. Protection of Personal Data

We implement robust security measures to protect your data against unauthorized access, loss, misuse, or modification:

• Secure Storage: Data is stored on secure servers with limited access.
• Encryption: Sensitive information (e.g., medical records, payment details) is encrypted.
• Access Controls: Only authorized personnel can access sensitive data.
• Employee Training: Our staff receive regular training on data protection practices.
• Audits and Updates: Security protocols undergo routine evaluation to ensure compliance with changing regulations.

Despite these measures, no data transmission or electronic storage method is completely secure. You agree to provide data at your own risk.

5. Retention of Personal Data

We retain personal data for as long as necessary to:

• Fulfill the stated purposes of collection.
• Comply with legal and healthcare-specific regulations, such as the retention of medical records for periods specified in Annex B of the National Guidelines for Retention of Medical Records.

Once the purpose is no longer applicable or required by law, we securely delete or anonymize your data.

6. Your Rights

Under the PDPA, you have the right to:

1. Access Your Data: Request a copy of your personal data in our records.
2. Correction of Data: Submit corrections for inaccurate or incomplete data.
3. Withdraw Consent: Revoke consent for data use, including opting out of receiving marketing communications (subject to legal implications).
4. Request Deletion (where permitted): While we will delete your account data upon request, medical records will be retained as per legal requirements.

How to Submit Requests

To exercise these rights, please email our Data Protection Officer (see contact details below). Requests are typically processed within ten (10) business days. Should we require additional time or need to explain the consequences of specific actions (e.g., affecting your services), we will notify you promptly.

Note: Withdrawal of consent may impact our ability to provide continued services to you.

7. Cookies and Website Tracking

Our website uses cookies and similar tracking technologies to:

• Enhance user experience and navigation.
• Collect behavioral data for service optimization.

Cookies do not personally identify you unless you voluntarily provide identifying data. You may configure your browser to reject cookies, though doing so might limit certain functionalities of the website.

8. Transfers of Personal Data Outside Singapore

Although data transfers outside Singapore are uncommon, if necessary, we will:

• Obtain your consent for the transfer.
• Ensure the receiving entity offers a comparable standard of data protection, as required by the PDPA.

9. Updates to the Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in legal requirements or our processes. The most current version will always be available on our website. We encourage you to check for updates regularly. Continued use of our services signifies acceptance of the revised policy.

10. Contact Details

If you have questions, concerns, or wish to exercise your data rights under this policy, please contact:

Wonderhealth Pte Ltd
Email: ask@wonderhealth.sg
Address: 221 Balestier Rd, #02-06, Singapore 329928
Phone: 8512 6290

We are committed to addressing all inquiries relating to your privacy and personal data in compliance with Singapore’s PDPA.

Last Updated: June 14, 2025