Clinique De Paris

Privacy Statement

Clinique de Paris (“we,” “our”, or “us”) is committed to protecting your personal data in compliance with the Data Privacy Act of 2012 and applicable regulations issued by the National Privacy Commission.

Personal Data We Collect

We may collect and process the following personal data:

a. Personal Information

  •  Full name
  • Address
  • Contact details (mobile number, email)

b. Sensitive Personal Information

  • Health and medical records
  • Treatment history
  • Photographs (with consent)

c. Financial Information

  • Bank account details, credit or debit card information (collected solely for billing and payment processing)

d. Technical Information

  • IP address
  • Website usage data (via cookies)

How We Collect Your Data

Your data may be collected through:

  • Appointment bookings (online or in-clinic)
  • Patient registration forms
  • Website inquiries and contact forms
  • Social media communication
  • Cookies and website analytics (We use third-party services, such as Google Analytics/Meta Pixels, to analyze web traffic and improve our website).

 

Purpose of Processing

We process your personal data for the following purposes:

  • To provide medical and aesthetic treatments
  • To manage patient records and history
  • To schedule and confirm appointments
  • To process payments and billing
  • To respond to inquiries and requests
  • To improve our services and patient experience
  • To comply with legal and regulatory requirements
  • To send you marketing and promotional materials about our services, treatments, offers, and events (only with your explicit prior consent, which you may withdraw at any time).

Legal Basis for Processing

We process your data based on:

  • Your consent (Explicit consent is strictly required for the processing of your health/medical records and photographs).
  • Performance of a contract (treatment/services)
  • Compliance with legal obligations
  • Protection of vital interests (medical care)
  • Legitimate interests of the Clinic

Data Sharing and Disclosure

We do not sell your personal data.

We may share your information with:

  • Authorized medical professionals and staff
  • Third-party service providers (e.g., IT systems, payment processors)
  • Government authorities, when required by law

 

All third parties are required to maintain confidentiality and data protection standards.

 

Risks Involved

Risk refers to the potential of an incident to result in harm, including the unauthorized collection, use, disclosure, or access to personal data. While we ensure that adequate physical, technical, and organizational security measures are in place to protect your personal information, this does not guarantee absolute protection against inherent risks, such as when digital systems are exposed to targeted cyberattacks, malware, and ransomware, or when manual records are accessed without authority.

Data Retention

We retain personal and medical records for 10 years after your last clinic visit, or as required by applicable laws and regulations. After this period, data will be securely disposed of. Physical records shall be disposed of through shredding, while digital files shall be permanently anonymized or securely deleted to ensure they can no longer be retrieved or accessed by unauthorized persons.

Data Security

We implement appropriate organizational, physical, and technical security measures to protect your personal data against unauthorized access, disclosure, or loss.

Your Rights as a Data Subject

Under the Data Privacy Act, you have the right to:

  • Access your personal data. This is your right to obtain confirmation on whether or not data relating to you are being processed, subject to legal exceptions (e.g., if providing access creates a serious threat to physical or emotional health and safety).
  • Correct inaccurate or outdated information. This is your right to have your personal data rectified if it is inaccurate or incomplete.
  • Object to processing if the processing is based on consent or legitimate interest.
  • Withdraw consent.
  • Request erasure or blocking of your personal data whenever warranted (subject to legal limitations)
  • Data Portability, through which you may obtain and electronically move, copy, or transfer your data securely.
  • Be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data.
  • File a complaint with the National Privacy Commission if you believe your information has been misused, maliciously disclosed, or improperly disposed of.

Cookies and Website Tracking

Our website uses cookies to improve your browsing experience.

You may disable cookies through your browser settings.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time. Updates will be posted on this page and prior versions shall be retained by the Clinic and provided upon request..

Contact Information

For any privacy-related concerns or requests, you may contact:

 

Data Protection Officer

📧 dpo@cliniquedeparis.com

Unit 4003 40/F Alveo Financial Tower 6794 Ayala Ave San Lorenzo

Makati City

09162363813

LET’S GET STARTED

Stay on top of it​