CloudPx, through Xynapx Inc., the Service Provider (or “we”, “us”, “our” or “Provider” as defined herein below), places utmost respect upon the privacy of the “Patient/User” (“you” or “your” or as defined herein below) and is committed to the protection of the same through its Privacy Policy.
This is https://www.econsult.cloudmd.com.ph/privacypolicy and this Privacy Policy or “Policy” (1) defines the types of information that CloudPx may collect from those integrated or made available by the Patient/User when he/she accesses or uses its website, hosting platform and/or the CloudPx Application or Website (“App” or “Website” for brevity) and all content, products and/or services which may be availed of through the platform (collectively referred to as “CloudPx Services” or “Services”) and (2) outlines CloudPx’s practices for collecting, using, storing and disclosing the above information.
This Policy covers information CloudPx collects through the CloudPx Services, email and SMS and other electronic communication given or caused to be given to the Provider by the Patient/User in relation to the use of CloudPx Services.
This Policy does not cover information collected by or given to third parties (with emphasis on information collected by or given to PayMaya, our third-party payment solutions provider). It is strongly encouraged that the Patient/User directly consult https://www.paymaya.com/privacy as regards PayMaya’s privacy policies.
This Policy, once accepted by you, the Patient/User, forms a binding agreement, legal and enforceable under laws of the Philippines, between yourself and the Service Provider. Patients/Users acknowledging and agreeing to these Terms make a representation as to legal capacity to bind themselves to this Policy.
ATTENTION: KINDLY READ THIS POLICY VERY CAREFULLY. Your acts of navigating, browsing, accessing, registering for or otherwise using CloudPx Services, the App or the platform will be treated as your acknowledgment of this Policy and that you have read, understood, and further agree to be bound, in your own capacity, to the Policy. Should you not be agreeable to the Policy, do not navigate, browse, access, register for or use CloudPx Services, the App or Website altogether.
The Service Provider reserves its right to exercise its discretion, subject to generally accepted principles of due process and fair dealing, to suspend or terminate access to or use of CloudPx Services or App to any person who shall violate this Policy.
| TERMS | DEFINITIONS |
| Account | The relationship between Patient and Service Provider allowing the former to be able to navigate, access and use CloudPx Services, Website or App. |
| Administrative Remedies/Measures | Actions which may be taken by the Provider to protect its rights and interests as well as those of third persons, without need of legal processes or governmental intervention, including but not limited to: investigation or audit, suspension, and/or deletion of CloudPx Account or Patient/User Data. |
| CloudPx | Proprietary online doctor directory and e-consult telemedicine management platform accessible by Patients/Users used in conjunction with CloudMD (see www.cloudmd.com.ph), a proprietary electronic medical records management system accessible to licensed physicians, both of which are owned and made commercially available to the Philippine market by Xynapx Inc., the Provider herein; |
| CloudPx App/System | A program which is part of CloudMD Services that can be downloaded or accessed by a User or Patient, allowing him access to his Account, and contains the computing solution for providing the Patient with CloudPx Services and may interchangeably serve as collective terms which include applications, software, hardware, databases, interfaces, media, documentation, updates, and other Materials provided under Services; |
| CloudPx Materials | The visual interfaces, graphics, design, systems, methods, information, computer code, data as well as all other components which comprise CloudPx Services/App; |
| CloudPx Services | Includes the Website, Services, System, App, and all content, services and/or products available on or through the hosting platform; |
| CloudPx Website | The aggregation of all web-based documents including but not limited to image, text, hypertext, .html files, made available through www.econsult.cloudmd.com.ph or its subdomains, or domains with identical names owned by Provider. |
| Content | Any data or information made available through CloudPx App, Services or Website, including audiovisual training materials, commentaries documents, FAQ’s, pictures, presentations and others; |
| Doctor/Physician | A natural person licensed to practice medicine in the Philippines, whose services may be availed of by the Patient (as defined herein below), and may bill the Patient, whether through CloudPx’s third-party payments solution or otherwise, for services including but not limited to doctor’s appointments, medical advice/instructions, doctor’s orders (including but not limited to prescription of medicine, laboratory examinations and medical procedures), issuance of letters (including medical certificates or admission orders); |
| E-consult Patient Consent Form | An electronic form to be completed by a Patient, the submission of which is a prerequisite for every e-consult appointment with CloudMD Doctor/s, composed of (1) provisions evincing such Patient’s conformity to be consulted and/or treated and (2) conditions under which such Patient agrees to receive the same; Refers to any information whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual [Sec. 3(g), Data Privacy Act of 2012]; Any data or information made available through CloudPx App, Services or Website, including audiovisual training materials, commentaries documents, FAQ’s, pictures, presentations and others; |
| Patient/User | A natural person who has agreed to and accepted these Terms set forth by the Provider; |
| Patient/User Data | Any digital information, data, file or transaction recorded or inserted into the CloudPx System by the Patient, including but not limited to Name, Contact information, Email Address, Date of Birth, Gender, Address, Username, Password, Confirmation Password. This may also cover documents of any kind (images, spreadsheets, notes, etc.) recorded or inserted into the CloudPx System by the Patient; |
| Privileged Information | Privileged information refers to any and all forms of data which under the Rules of Court (of the Philippines) and other pertinent laws constitute privileged communication. [Sec. 3(k) Data Privacy Act of 2012]; |
| Provider | Xynapx, Inc., a corporation established through and existing under the laws of the Philippines, is the “Provider”, with primary business address at Unit 505, 5/F OITC 2 Building, Oakridge Business Park, Mandaue, Cebu, solely having proprietary rights over CloudPx; |
| Sensitive Personal Information | Refers to personal information: (1) About an individual’s race, ethnic origin, marital status, age, color, and religious, philosophical or political affiliations; (2) About an individual’s health, education, genetic or sexual life of a person, or to any proceeding for any offense committed or alleged to have been committed by such person, the disposal of such proceedings, or the sentence of any court in such proceedings; (3) Issued by government agencies peculiar to an individual which includes, but not limited to, social security numbers, previous or current health records, licenses or its denials, suspension or revocation, and tax returns; and (4) Specifically established by an executive order or an act of Congress to be kept classified [Sec. 3(l) Data Privacy Act of 2012]; |
| System Updates | Additional guidelines or rules applicable to specific features, applications, products, or services which may be posted by the Provider from time to time on the hosting platform, or otherwise made available to Patients on the CloudPx App or Services; |
| User Activity | Any and all interactions or transactions documented or caused to be documented by the Patient with the use of the CloudPx App or Services, including, but not limited to, messaging, patient records, billing, or inventory. |
II. Information collection and usage. CloudPx collects several types of information about and from Patients/Users in relation to CloudPx Services, including personal information, all information covered by Patient/User Data as defined above and information regarding (a) your internet connection, (b) your usage details and (c) the equipment you use in accessing the Services.
We collect this information (1) directly from you when you provide it to us and/or (2) automatically as you navigate and access CloudPx Services.
You understand that the information automatically collected may include, without limitation, the following: User Activity (as defined above) usage details, information collected through cookies, IP addresses, user behavior, clicking activity. Information automatically collected, will, at all times, be limited to those entered or introduced by you in relation to use of our Services.
II.a. Information you provide to us. As the Data Controller you exercise full discretion with regard to types of information you provide us. The information we collect on or through the use of our Services, as Data Processor may include: (1) account information – which may include your full name, email address, billing and or/office address, username, password and all such other information required by us during the signing-up phase, (2) your preferences and settings (in accordance with the App’s settings tools and options), and (3) content, as defined above, which you provide through the use of our Services, which may cover text or picture files, comments, or testimonials, and the following information as tabulated herein:
| CLASS OF INFORMATION | ITEMS INCLUDE |
| 1. Patient Demographic | Patient name, age, date of birth, address, civil status, gender, ethnicity, picture |
| 2. Clinical Data/Medical Records | Medical History, Medication History, Chief complaint, History of Present Illness, Allergies, Lab Results, Imaging Result, Immunization History, Vital signs and Measurements, Physical Examination, Review of Symptoms, Impression/Diagnosis, Prescriptions, Lab Orders, Imaging Orders, Procedures, Advice/Instructions, Medical Letters, Vaccinations, Follow-ups |
| 3. Financial Data | Consultation fees, service fees, sales and inventory |
| 4. Appointment Data | Date, time and reason for consultation |
The collection of the above information will be used by us mainly to improve and enhance user experience, functionality as well as overall quality of our Services (which features a predictive module geared towards ease of use of Services). We may also use the information to introduce relevant advertising, which may or may not be tailored to your preferences, and personalize your experience with CloudPx Services use. You also understand that the above information may be used by us to communicate with you, provide support and comply with certain legal obligations.
II.b. Information collected automatically through automatic data collection technologies. We may automatically collect certain information about the computers, devices, or consoles you may use to access the Services and your use of the same.
Without limitation to the following, this section includes: (1) details of your use of our Services, data logs, other communication data, and the tools or resources you access or use in relation to the Services, which may be collectively referred to as “usage information”, (2) device or computer information which can cover information regarding your internet connection, mobile device, operating system, browser type, IP address, device’s telephone number, type, (3) mobile device identifiers which may be assigned to your device in lieu of cookies, and unlike cookies cannot be deleted by you – which (a) analytics companies may use to track your CloudPx App usage or (b) advertising companies may or may not use to track usage or number of advertisements displayed, and display advertisements and (4) your activity in relation to use of the Services like comments, search result selection, clicking activity, time spent in-App, date and time of use, error and other communication logs.
II.c. Cookies and other electronic tools. We and third parties with whom we may partner, mobile device identifiers, and other similar technologies, means or methods to store or collect information with respect to your use of our Services or those of our partner entities.
The cookies we use may be (1) transient cookies or session cookies which does not collect information from the user’s computer and only typically stores information in the form of a session identifier that does not personally identify the user or (2) persistent cookies or stored cookies which are stored in the user’s hard drive until they expire or otherwise deleted by the user, which may be used to collect identifying information about the user like web navigation behavior or user behavior for a specific web site.
At the option of the user, cookies may be disabled through browser settings, which may affect functionality but not prevent access to the Services.
II.d. Information from third parties. We may obtain information about you from third parties such as partners, marketing entities, third-party websites, researchers, and may or may not combine such information with those we collect, receive or store in relation to items II.a., II.b and II.c.
II.e. Patient/Data de-identification or anonymization. As Data Processor and Controller, we do not acknowledge any obligation or make any undertaking as to the de-identification or anonymization of Patient/User Data. However, we may exercise our discretion to implement measures in relation to de-identification and/or anonymization.
III. Use or treatment of information by Provider. Information collected is generally used to mainly to improve and enhance user experience, functionality as well as overall quality of our Services.
The variety of purposes we collect information may include, without limitation to the following: (1) cloud-based archiving of your content or User/Patient Data, (2) administration of Services and diagnosis of technical issues through error logs and other communication logs, (3) processing and responding to Patient/User queries, (4) understanding user preference and establishing trends, (5) personalizing content, (6) preparation of promotional offers, (7) improve user experience through predictive module feature, (8) create basis for relevant advertising, (9) allow opportunity for responsive customer support and/or service, (10) ensure proper discharge of obligations as Data Processor as provided for in contractual agreements and relevant laws, and (11) an other purpose not contrary to laws, morals or public policy, with your conformity.
We may also use your information to contact you regarding our own as well as third-party services which may be of interest to you. Should you choose to disallow us from using your information in this manner, please indicate the same in the relevant tick-box upon signing up for an Account.
We may likewise use information collected from you to enable us to introduce advertisements or similar content from our partner entities. Although we do not disclose your information for this purpose without your prior consent, please note that by clicking on otherwise interacting with the above, such third-party entities may consider that you have met their target criteria.
IV. Disclosure of information. We may disclose information provided or collected.
IV.a. General disclosure. We may disclose personal information that we collect or you provide, as described in this privacy policy, in the following manner: (1) to our affiliates and/or subsidiaries under the ownership or control of Xynapx, Inc., the service provider as defined herein above; (2) to service providers, advertisers, contractors and other third-parties whom we use to support our business and are bound by contractual obligation to keep information confidential and to use the same information only for purposes for which they were disclosed by us; (3) to a buyer or any successor-in-interest in the event of restructuring, merger, consolidation, dissolution or sale of some or all of Xynapx, Inc.’s assets; (4) with your consent to receive promotional updates, to third-parties to market their products or services to you; (5) in response to legal or governmental compulsory process such as subpoena, warrant, or notice; (6) to enforce or apply the Terms of Use including billing and collection purposes; (7) instances where our sound discretion and business judgment dictate that discretion is necessary or appropriate to protect our interests and those of our other customers, the public in general, as well as those of the National Government; and (8) for any other lawful purpose disclosed by us when you provide information and consent thereto.
V. Use of analytics. We may use analytics to better understand your usage of our Services. Our use of analytics allows us to study information that has been provided by you and those automatically collected. Analytics used to evaluate information provided yields reports which we use to improve the Services in general; analytics on automatically collected information (including but not limited to payment solution usage, prescription behavior, use of suggestive module) which are de-identified and/or anonymized, are geared towards improving functionality and personalizing user experience, by creating opportunities for fuller utilization by Patients/Users of our suggestive module option – from which option you may opt out of through the CloudPx App or Website settings.
VI. Tailored advertising. Third parties whose products or services are advertised or otherwise made accessible through our Services may likewise use cookies or similar automatic data collection technologies to gather information about your use of our Services, which may be done for the following purposes: (1) inform you and serve ads based on your past visits to our website and/or other websites and (2) report how ad impressions and use of ad services are related with visits to our website or use of our Services.
We may allow other third-parties to serve tailored advertisements to you through our Services, and allow their cookies or similar technologies to access your device used to access our Services. We do not have access to the cookies or other tracking technologies which may be used by third-parties and neither does this Privacy Policy govern or cover their use. The third-parties may permit you to opt out of their ad targeting features. Please note that to the extent advertising technology is integrated into the Services, you may still receive ads even after having opted out of tailored advertising. In such cases, the ads featured may not be tailored to your interests. We do not control the opt-out links of third parties and take no responsibility nor assume any liability for any choices you may make in using these mechanisms.
We do not endorse or make any representations about third-party websites or services. Our Privacy Policy does not cover the information you choose to provide to or that is collected by these third parties. We strongly encourage you to read such third parties' privacy policies.
VII. Your options as the data subject. You are the data subject (as defined by the Data Privacy Act of 2012). You control the types of data you introduce or otherwise make available into the System and thus own all said data.
VII.a. Options regarding disclosure. We strive to provide you with choices regarding the personal information you provide to us. You can set your browser or mobile device to refuse all or some browser cookies, or to alert you when cookies are being sent. Disabling or refusing cookies will not bar access to the Services but may affect user experience. We do not share your personal information with any advertising agency.
VII.b. Communication options. When you sign up for an account, you are opting in to receive emails from us. You can log in to your account and manage your email preferences. You have the option to unsubscribe from commercial email messages, but note that you may not opt out of receiving certain administrative policy, service policy, or legal policy from us, Xynapx, Inc.
VII.c. Reviewing, correcting, deleting information. It is understood that all rights, ownership and interest to the Patient/User Data belong and remain with you. It is your responsibility to ensure and warrant that: (1) you do not create, transmit, display or otherwise make available any Patient/User Data that violates the Terms of Use or this Privacy Policy, the rights of the Provider, other Patients, persons or organizations/entities or is harmful (for having the nature of worms, viruses, malware as well as other malicious and/or destructive codes), offensive, threatening, abusive, defamatory, obscene, hateful, invasive of privacy of other persons or otherwise contrary to law, morals or good customs, and (2) you have all the necessary rights and authority to use, generate, alter, delete Personal Information, Sensitive Personal Information or Privileged Information within the CloudPx Website or App, as well as cause the processing of the same through means of an Account.
By reason of the foregoing, you may access, correct or delete any information, with the exception of those essential to the creation (with particular emphasis on User’s name and physician license details) and maintenance of a CloudPx Account, which may only be altered by our administrative department.
VIII. Security of information. We make express warranties in the Terms of Use with regard to the protection of your information. We have implemented appropriate physical, electronic and managerial procedures (including but not limited to firewalls, role-based access and anti-DDoS attacks) to safeguard and help prevent unauthorized access to your information and to maintain data security. We follow generally accepted industry standards to protect all Patient/User Data, during transmission, storage and processing. The third-party service providers with respect to payment gateway and payment processing are all validated as compliant with the payment card industry standard.
IX. Account termination and data deletion. You may terminate your CloudPx Account anytime, with or without cause, by properly notifying us of your intention to do the same. As a matter of policy, we delete a terminated Account along with all the data contained therein. As the data subject, you retain ownership of all account-specific data. Within a period of fifteen (15) days from the effectivity of termination of the Account, you may exercise the option to secure digital copies of your data, at your own expense.
X. Changes to the Privacy Policy. CloudPx reserves the right to change from time to time, the terms embodied in this Policy, as dictated by the exigencies of business, changes in data collection and use practices, or service features.
Your continued use of CloudPx Services after the lapse of their effectivity date as published is construed as your acceptance of the changes, if any. Your periodic review of the Privacy Policy is strongly encouraged.
XI. Contact Information. For any questions regarding this Privacy Policy please reach us through the following:
| Unit 505, 5/F OITC 2 Building, Oakridge Business Park, Mandaue, Cebu | |
| cloudpx@cloudmd.com.ph | |
| Telephone | +6332 354 8468 |