Privacy Policy
Privacy is important to us. We are committed to maintaining the confidentiality of our patients, visitors, associates/ employees and other stakeholders’ personal information that we obtain through various channels. This statement sets out how we, Total Anaesthesia and Pain services Pte Ltd and Total Pain Specialist Clinic (henceforth, “Total Pain Specialist Clinic”) manage personal data in connection with the Personal Data Protection Act (No. 26 of 2012) (“The Act”).
By interacting, submitting information, enrolling or signing up for any products or services offered by us, you agree and consent to “Total Pain Specialist Clinic” collecting, using, disclosing and sharing amongst ourselves your Personal Data and disclosing such Personal Data to our authorised service providers, partners and relevant third parties in the manner set forth in this Privacy Statement.
This statement describes how we collect, use, disclose, process and protect your personal data. When you visit us or request a service from any entity within “Total Pain Specialist Clinic”, your use or continued use of our services shall be deemed as your acceptance and agreement to be bound by the provisions of this Statement.
This statement supplements but does not supersede nor replace any other consents you may have previously provided to us or our partners in respect of your Personal Data and your consents herein are additional to any rights which to any of us may have at law, to collect, use or disclose your Personal Data.
For the purpose of the Act, we are a data intermediary when we process personal data on behalf of and for the purposes of another organisation. At the same time, we also collect, use and disclose personal data in compliance with the Act for purposes that are lawful, reasonable and appropriate.
“Total Pain Specialist Clinic” may from time to time, update this Privacy Statement to ensure that this Privacy Statement is consistent with our future developments, industry trends and/or any changes in legal or regulatory requirements. Please check back regularly for updated information on the handling of your Personal Data.
Personal Data
In this Privacy Policy, “Personal Data” refers to any data, whether accurate or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which the organisation has or is likely to have access, including data in our records as may be updated from time to time.
Example of Personal Data you may provide to us include your name, NRIC, passport or other identification number, telephone number, mailing address, email address, transactional data and any other information relating to any individuals which you have provided us in any forms you may have submitted to us or through other forms of interaction with you.
1. Collection
We generally collect personal data that
(1) you knowingly and voluntarily provide in the course of or in connection with your medical treatment, employment or job application with us, or via a third party who has been duly authorised by you to disclose your personal data to us (your “authorised representative”), after
(i) you (or your authorised representative) have been notified of the purposes for which the data is collected, and
(ii) you (or your authorised representative) have provided written consent to the collection and usage of your personal data for those purposes, or
(2) collection and use of personal data without consent is permitted or required by the PDPA or other laws.
We shall seek your consent before collecting any additional personal data and before using your personal data for a purpose which has not been notified to you (except where permitted or authorised by law).
We may collect Personal Data in the following ways:
a) When you submit any form, including but not limited to application, declaration, proposal, enrolment or referral forms;
b) When you respond or take part in our surveys, campaigns and other promotional activities;
c) When you interact with our staff or business partners, including patient servicing personnel, and other representatives via email, telephone calls, letters, memos, fax, face-to-face-meetings, digital platforms;
d) When you enter into any agreement or provide other documentation or information in respect of your interactions and transactions with us or when you use our services directly or through our insurance partners whether through our website or mobile applications or pen & paper forms or orally;
e) When you provide your Personal Data (directly or through your employer or our business partners) to use or access some of our services, whether provided in-person or through our website or mobile application(s), such as medical consultation, teleconsultation or claim administrative support;
f) When we receive references from business partners and third parties regardless if the referral came from you;
g) When you submit an employment application or when you provide documents or information including your resume and/or Curriculum Vitae in connection with any appointment under us;
h) When we are performing finance function, such as preparing for tax filing, processing payments, credit notes and refund, billing, accounting and auditing, and other related activities for the maintenance of proper book-keeping of our operations;
i) When your images are captured by us via CCTV cameras while you are within our premises or via photographs or videos taken by us or our designated partners when you attend events hosted by us;
j) When you submit your personal data to us for any other reason; and
k) When you submit personal data relating to a third party (e.g., information of your spouse, children), for the purpose of us offering our products and/or services to that third party. By submitting such information to us, you warrant that you have obtained the consent of the third party to you providing us with their Personal Data for the respective purposes.
l) We emphasise on accuracy of personal data by sighting original personal data whenever required.
1.1 Types of Personal Data We Collect about you
Depending on the nature of transactions you have with us, the types of personal data we collect about you may include:
a) Your personal information such as name and NRIC;
b) Contact information, such as residential address, email address and mobile phone number;
c) Your medical information when you are using our medical care or claim administrative services, such as medical conditions, prescriptions, medical history and family history;
d) Your financial information such as bank account number, credit card details, insurance policy number and other related payment details;
e) Your personal government-issued identification document numbers such as NRIC/FIN/work permit/birth certificate and passport numbers; as required by healthcare sectoral law for purposes of medical treatment or necessary to accurately establish or verify your identity to a high degree of fidelity;
f) Personal background (such as nationality and race), family background (such as marital status and names of family members), personal profile (such as academic qualification and work experience) and other information necessary for hiring process or to other special requests.
g) “Total Pain Specialist Clinic” may also collect non-personally identifiable information about you, such as use of our website, internet protocol addresses, browser and computer system information, cookies, invisible pixels, web beacons, and aggregated data related to your use of our platforms.
You are assured that “TOTAL PAIN SPECIALIST CLINIC” will not collect your Personal Data more than necessary to fulfil one or more purposes that the data is collected for. Whilst we will take reasonable precautions and verification checks to ensure that the Personal Data we have collected from you is reasonably accurate, complete and up-to-date, you should ensure that all Personal Data submitted to us is complete, accurate, true and correct. If there is a change to your contact information such as your address, email address, telephone number, do update us to ensure you will continue to receive communications from us without disruption or delay. Failure to do so may result in our inability to provide you with products and/or services that you have requested.
1.2 Obtainment of Consent
Before we collect, use or disclose your personal data, we will notify you of the purpose why we are doing so. We next obtain written confirmation from you on your expressed consent. As far as possible, we will not collect more personal data than necessary for the stated purposes within this notice.
Under certain circumstances, we may assume deemed consent from you when you voluntarily provide your personal data for the stated purpose, e.g. when you request for medical services, whether in-person or through other means.
If you request for medical consultation with us on behalf of another individual, you must first obtain consent or show that you are authorised to act on behalf of that individual in order for us to collect, use or disclose his/her personal data. Where consent can be obtained, that individual must be notified of the purposes for the collection, use or disclosure of his/her personal data.
However, we may collect, disclose or use your personal data pursuant to an exception under the Personal Data Protection Act or other written law such as during the following situations:
· To respond to an emergency that threatens your life, health and safety or of another individual;
· Necessary in the national interest, for any investigation or proceedings.
We shall not be able to provide the medical service or, offer you employment in the event of failure to provide the personal data as per the stated purpose or, absence of your consent.
2. Purpose and Usage of Data
Personal Data may be shared among our subsidiaries, affiliates, partners and third parties to enable us to provide service to you and for our business purposes. We may use the Personal Data in one or more of the following purposes:
2.1 Provision and Improvement of Services
a) Providing you with our services, such as managed healthcare solutions, medical services and claims processing whether through our website, mobile application or otherwise;
b) Providing customer service and administrative support such as responding to, processing and handling your enquiries, requests, feedback and complaints, issuing letters of guarantee, administrating insurance coverage and processing claims and settlement of bills and other credit-related activities;
c) Providing you with information that may be of your interest, such as publications, events, news and promotional materials relevant to your business, potential needs and purchases;
d) Generating reports and performance of analytics for the purposes of developing or improving our products, services, security, service quality and marketing strategies;
e) Verifying your identity;
f) Requesting feedback or participation in surveys as well as conducting market research;
g) and/or purposes which are related to the aforesaid.
2.2 Other Business and Legal Purposes
a) Office management, operations, and administration purposes and for independent and conflict clearance, due diligence and background checks in accordance with legal, regulatory and professional requirements;
b) Performing human resource management, training, and career development;
c) Assessing your or your organisation’s suitability as an employee, external services provider, business partner, or vendor for “TOTAL PAIN SPECIALIST CLINIC”;
d) Managing and preparing reports on incidents or accidents;
e) Managing the safety and security of our premises and services including but not limited to carrying out CCTV surveillance and conducting clearances;
f) Preventing, detecting, and investigating crime, including fraud and money laundering or terrorist financing and analysing and managing commercial risks;
g) Carrying out our obligations arising from any contracts entered into between you and us;
h) Complying with legal obligations and regulatory requirements;
i) Protecting and enforcing our contractual and legal rights and obligations;
j) and/or purposes which are related to the aforesaid.
These purposes may also apply even if you do not maintain an account with us or your account, relationship has been terminated with us. Arrangements are in place to ensure the security of any personal data shared.
3. Disclosure
Subject to the provisions of the applicable law, we may disclose your Personal Data to parties mentioned below (examples provided are not exhaustive) to achieve one or more purposes listed in section 2.
a) Parties to whom disclosure is necessary to provide our services to you:
– “TOTAL PAIN SPECIALIST CLINIC” and its affiliates
– Clinics, hospitals, medical practitioners, and specialists
– Associated medical service providers such as laboratories, imaging and diagnostics services
– Our business partners such as insurance companies
– Banks, payment card processing companies and other financial institutions
– Providers of goods or services such as IT services and courier services
b) Parties to whom disclosure is necessary for the management, operation and administration of our business:
– Providers of professional services such as auditors, lawyers, consultants
– Commercial service and training providers
c) Parties to whom disclosure is necessary or in our good faith belief that such disclosure is necessary to (i) fulfil our contractual, legal and regulatory obligations, (ii) comply with legal process, (iii) respond to any claim or investigation and protect our rights, property or personal safety:
– Government agencies and regulatory authorities such as court, tribunal, Ministry of Health, Ministry of Manpower, IRAS, Police Force
– Professional advisor such as accountants and lawyers
We will use our best endeavours to ensure that your personal data is protected by such third parties or cause them to be bound to hold your data in confidence such as by entering a legally binding instrument with them.
3.1 Oversea Transfers of Personal Data
If there is a need for us to transfer your personal data to an organisation outside of Singapore, whether is within “TOTAL PAIN SPECIALIST CLINIC” or not, we will ensure that the standard of data protection in the recipient country is comparable to that of Singapore’s PDPA. If this is not the case, we will enter into a contractual agreement with the receiving party to accord similar levels of data protection as that in Singapore.
4. Security
To safeguard your personal information, all electronic storage, hosting, processing, transmission and backup (for the purpose of disaster recover or otherwise) of personal and other information are secured with appropriate administrative, physical and technical security measures.
While we take reasonable efforts to maintain the confidentiality and security of your personal data, we cannot guarantee that any information that is transmitted or stored electronically is completely secure or that no harmful code will enter our website (for example viruses, bugs, trojan horse, spyware, adware).
For users with username and password login, you undertake to keep the username and password secure and confidential and shall not disclose or permit it to be disclosed to any unauthorised person and to inform us as soon as reasonably practical if you know or suspect that someone else has access to your username and password or believed that the confidentiality has been compromised in any way or that actual or possible unauthorised transactions have taken place. We are not liable for any damage from any security breaches on unauthorised and/or fraudulent use of your username and password.
5. Retention
We will retain your personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required for legal or business purposes. Any personal data which are no longer needed for legal or business purposes will be destroyed or hashed according to our document retention guidelines.
6. Usage of cookies and analytical tools
Our website uses cookies. By using our website, you consent to our use of cookies which will provide you with a more personalised experience. You can choose to turn off all cookies. If you turn the cookies off, you will not have access to many features that make your user experience more efficient and some of our services may not function properly. Please refer to your browser’s documentation to check if the cookies have been enabled on your computer or to request not to receive cookies.
We use Google Analytics to analyse the use of our website. Google Analytics generate statistical and other information about our website use by means of cookies, which are stored on user’s computers. The information generated relating to our website is used to create reports about the use of our website. Google will store this information. Besides, Google Analytics is also used for remarketing and behavioural targeting. We advertise on third party websites to you after you have visited our website, we, and our third party vendors, use cookies to inform, optimize and serve ads based on your past visits to our website. If you want to opt out of Google Analytics, you can download and install the add-on for your web browser at https://tools.google.com/dlpage/gaoptout.
We may also include third party links on our website for your convenience and information. These linked sites have separate and independent privacy policies and hence we undertake no responsibility or liability for the content and activities of these link sites and we encourage you to consult the privacy notices of their sites.
7. Access, Correction and Withdrawal
We may upon written request, allow you to view your stored personal information and how it may have been used and/or disclosed by us in the past one year, subject to legal requirements. We reserve the right to charge a reasonable administrative fee for this service. We will respond to such request within 30 days of receipt of your written request.
Kindly write to consult@totalpainspecialist.com if any personal information which we hold about you needs to be corrected or updated.
You may subject to applicable law, regulations and professional standards at any time, give us reasonable written notice of your withdrawal of consent to collect, use or disclose the personal information. If you choose to withdraw your consent to any or all or the disclosure of your personal data, we will not be in a position to continue providing our services to you. Withdrawal may also result in the termination of any agreement you may have with us.
8. Enquiries
If you require more information relating to handling enquiries, feedback or complaint regarding Total Pain Specialist Clinic’s personal data protection policies and procedures or require amendments or withdraw your consent, please contact us at:
Data Protection Officer
Total Pain Specialist Clinic
Suite 29-04A, International Plaza
10 Anson Road
Singapore 079903
Phone: +65 6222 1000
Email: consult@totalpainspecialist.com
If your personal data was provided to us by a third party, kindly contact that organisation or your representative to make such a request or query on your behalf.
DATA PROTECTION NOTICE FOR PATIENTS
This Data Protection Notice (“Notice”) sets out the basis which Total Pain Specialist Clinic (“we”, “us”, or “our”) may collect, use, disclose or otherwise process personal data of our patients in accordance with the Personal Data Protection Act (“PDPA”). This Notice applies to personal data in our possession or under our control, including personal data in the possession of organisations which we have engaged to collect, use, disclose or process personal data for our purposes.
PERSONAL DATA
1. As used in this Notice:
“patient” means an individual who (a) has contacted us through any means to find out more about our medical services we provide, or (b) may, or has, entered into a contract with us for the medical treatment by us; and
“personal data” means data, whether true or not, about a patient who can be identified: (a) from that data; or (b) from that data and other information to which we have or are likely to have access.
2. Depending on the nature of your interaction with us, some examples of personal data which we may collect from you include name, NRIC/ passport, residential address, email address, telephone number, nationality, gender, date of birth, marital status, photograph, employment information, financial information, and next of kin details.
3. Other terms used in this Notice shall have the meanings given to them in the PDPA (where the context so permits).
COLLECTION, USE AND DISCLOSURE OF PERSONAL DATA
4. We generally do not collect your personal data unless (a) it is provided to us voluntarily by you directly or via a third party who has been duly authorised by you to disclose your personal data to us (your “authorised representative”) after (i) you (or your authorised representative) have been notified of the purposes for which the data is collected, and (ii) you (or your authorised representative) have provided written consent to the collection and usage of your personal data for those purposes, or (b) collection and use of personal data without consent is permitted or required by the PDPA or other laws. We shall seek your consent before collecting any additional personal data and before using your personal data for a purpose which has not been notified to you (except where permitted or authorised by law).
5. You have choices regarding our collection, use or disclosure of your personal data. You have the right to object to the processing of your personal data and withdraw your consent in a manner described in withdrawing clause below. However, please note that in the absence of required information we shall not be able to continue proving you the services that you sought.
6. We may collect and use your personal data for any or all of the following purposes:
(a) performing obligations in the course of or in connection with our provision of the medical services requested by you;
(b) verifying your identity;
(c) responding to, handling, and processing queries, requests, applications, complaints, and feedback from you;
(d) managing your relationship with us;
(e) processing payment or credit transactions;
(f) complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority; and
(g) transmitting to any unaffiliated third parties including our third party service providers and agents, and relevant governmental and/or regulatory authorities, whether in Singapore or abroad, for the aforementioned purposes.
7. We may disclose your personal data:
(a) where such disclosure is required for performing obligations in the course of or in connection with our provision of the goods and services requested by you; or
(b) to third party service providers, agents and other organisations we have engaged to perform any of the functions with reference to the above mentioned purposes.
(c) however, we may collect, disclose or use your personal data pursuant to an exception under the Personal Data Protection Act or other written law such as during the following situations:
To respond to an emergency that threatens your life, health and safety or of another individual;
Necessary in the national interest, for any investigation or proceedings.
8. The purposes listed in the above clauses may continue to apply even in situations where your relationship with us (for example, pursuant to a contract) has been terminated or altered in any way, for a reasonable period thereafter (including, where applicable, a period to enable us to enforce our rights under a contract with you).
WITHDRAWING YOUR CONSENT
9. The consent that you provide for the collection, use and disclosure of your personal data will remain valid until such time it is being withdrawn by you in writing. You may withdraw consent and request us to stop collecting, using and/or disclosing your personal data for any or all of the purposes listed above by submitting your request in writing or via email to our Data Protection Officer at the contact details provided below.
10. Upon receipt of your written request to withdraw your consent, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we shall seek to process your request within fifteen (15) business days of receiving it.
11. Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be in a position to continue providing our goods or services to you and we shall, in such circumstances, notify you before completing the processing of your request. Should you decide to cancel your withdrawal of consent, please inform us in writing in the manner described in clause 8 above.
12. Please note that withdrawing consent does not affect our right to continue to collect, use and disclose personal data where such collection, use and disclose without consent is permitted or required under applicable laws.
ACCESS TO AND CORRECTION OF PERSONAL DATA
13. If you wish to make (a) an access request for access to a copy of the personal data which we hold about you or information about the ways in which we use or disclose your personal data, or (b) a correction request to correct or update any of your personal data which we hold about you, you may submit your request in writing or via email to our Data Protection Officer at the contact details provided below.
14. Please note that a reasonable fee may be charged for an access request. If so, we will inform you of the fee before processing your request.
15. We will respond to your request as soon as reasonably possible. In general, our response will be within fifteen (15) business days. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any personal data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the PDPA).
PROTECTION OF PERSONAL DATA
16. To safeguard your personal data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, we have introduced appropriate administrative, physical and technical measures such as minimised collection of personal data, authentication and access controls (such as good password practices, need-to-basis for data disclosure, etc.), encryption of data, data anonymisation, up-to-date antivirus protection, regular patching of operating system and other software, securely erase storage media in devices before disposal, web security measures against risks, usage of one time password(otp)/2 factor authentication (2fa)/multi-factor authentication (mfa) to secure access, and security review and testing performed regularly.
17. You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures.
ACCURACY OF PERSONAL DATA
18. We generally rely on personal data provided by you (or your authorised representative). In order to ensure that your personal data is current, complete and accurate, please update us if there are changes to your personal data by informing our Data Protection Officer in writing or via email at the contact details provided below.
RETENTION OF PERSONAL DATA
19. We may retain your personal data for as long as it is necessary to fulfil the purpose for which it was collected, or as required or permitted by applicable laws.
20. We will cease to retain your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the personal data was collected, and is no longer necessary for legal or business purposes.
TRANSFERS OF PERSONAL DATA OUTSIDE OF SINGAPORE
21. We generally do not transfer your personal data to countries outside of Singapore. However, if we do so, we will obtain your consent for the transfer to be made and we will take steps to ensure that your personal data continues to receive a standard of protection that is at least comparable to that provided under the PDPA.
DATA PROTECTION OFFICER
22. You may contact our Data Protection Officer if you have any enquiries or feedback on our personal data protection policies and procedures, or if you wish to make any request, in the following manner:
Name of DPO : Gea Ban Peng
Contact No. : +65 6222 1000
Email Address : consult@totalpainspecialist.com
Address : Suite 29-04A, International Plaza, 10 Anson Road, Singapore 079903
EFFECT OF NOTICE AND CHANGES TO NOTICE
23. This Notice applies in conjunction with any other notices, contractual clauses and consent clauses that apply in relation to the collection, use and disclosure of your personal data by us.
24. We may revise this Notice from time to time without any prior notice. You may determine if any such revision has taken place by referring to the date on which this Notice was last updated. Your continued use of our services constitutes your acknowledgement and acceptance of such changes.
Version: 1.0.0
Effective date : 1 FEB 2025
Last updated : 1 FEB 2025