CARESPAN ASIA INC. and its affiliate companies are committed and undertakes to protect your personal data privacy. We diligently follow and comply with the Data Privacy Act of 2012 (R.A. No. 10173), and the relevant issuances of the National Privacy Commission (“NPC”) and other regulatory bodies.
This Personal Data Privacy Notice is updated as of September 21, 2025.
For more information on our data sharing agreement with the clinic or any other requests, kindly e-mail our Data Protection Officer at privacy@carespanasia.com.
1. What is CARESPAN?
CareSpan is engaged in the business of developing, designing, and managing a fully integrated digital network, which includes mobile healthcare application for personal management of health and well-being and is a digital platform accredited by PhilHealth for Konsulta Administration.
2. What information do we collect?
We ask consent from the Data Subjects or those who desire to be registered in the PhilHealth Consulta program their personal and sensitive information before encoding the information in our system.
Furthermore, we also collect the following information:
A. Full name;
B. Age and Date of Birth;
C. Marital Status;
D. Medical History Details;
E. Residential address and mobile number or email;
F. Other information indicated in the documents.
3. Why do we collect personal and sensitive personal information?
The information collected, encoded, or processed will be used to implement and carry out the execution of the PhilHealth Konsultasyong Sulit at Tama (Konsulta) Program.
4. When do we collect personal or sensitive information?
The information is collected during the encoding process through partner clinics by our trained encoders to include them in the system. Authorized representatives of the Partner Clinic, CareSpan, and CareTech are the Personal Information Data Processors. The Clinic itself is also a Personal Information Controller to whom you have disclosed information to.
Affiliates shall mean third-parties who have entered into a data sharing agreement, outsourcing agreement, and memorandum of agreement with CareSpan Asia inc.
5. How do we store the data collected?
CareSpan stores the information collected on the data subjects in our Electronic Medical Records (“EMR”).
CareSpan undertakes to protect personal and sensitive information against accidental or unlawful destruction, alteration, disclosure, and other unlawful processing by implementing through physical, organizational, and technical security measures depending on the information.
This privacy notice shall be conspicuously posted and published in or outside accredited partner clinics and at every instance of collection of personal or sensitive personal information.
Hence, personal and sensitive information shall be retained for as long as the Data Subject does not expressly revoke his consent to the processing, collection, and storage upon proper notice to the Corporation.
6. How do we dispose of the data collected?
Once a record has passed its retention period under data sharing agreements and is no longer needed by PhilHealth, all hard and soft copies. of personal and sensitive information will be securely disposed of and destroyed. Authorized disposal methods include shredding, burial, or sale to a buyer. The data subject may also request for the disposal of their data.
7. What are the risks involved in processing your personal and sensitive information?
Risk refers to the possibility or probability of incidents that may harm a data subject or organization, including unauthorized collection, disclosure, use, or access to personal and sensitive information. Any exposure to breach, cyber-attack, phishing, malware, and unauthorized access shall be considered covered under “Risk”.
8. How do we keep your personal information secure?
Only authorized personnel shall be granted access to the personal and sensitive information encoded through the EMR and secured in a database. Reasonable security safeguards to protect the information gathered from loss, unauthorized access, use or disclosure.