1. Overview
This Privacy Policy explains how MedicalPRO collects, uses, and protects personal data in connection with the Vendor Platform. MedicalPRO is committed to protecting personal data in accordance with the Singapore Personal Data Protection Act (PDPA), the Philippine Data Privacy Act of 2012 (RA 10173), and, as a matter of Platform-wide policy, standards consistent with the General Data Protection Regulation (GDPR).
Nature of data processed — The Vendor Platform does not process patient health information. It processes business and commercial data, including the personal data of business contacts (such as clinic staff named in a Vendor's CRM). MedicalPRO applies the same rigor to this data as it does to health data elsewhere on the Platform, even though it is not subject to the special protections applicable to health information under PDPA and GDPR.
2. Information We Collect
Vendor Business Information
- Business name and registration details
- Business address and contact details
- Billing information
Vendor User Information
- Staff accounts and login credentials
- Activity logs
Catalog and Commercial Data
- Product and service listings, pricing, specifications
- Quotes, deals, orders, and invoices
Clinic Contact Data (CRM)
- Names, roles, and contact details of Clinic staff entered by the Vendor into its CRM records
This category consists of business contact information, not patient health data, and is entered by the Vendor for its own commercial relationship management purposes.
3. Purpose of Processing
Information is processed for purposes including operating the Vendor's account and catalog, facilitating quote and order communication between Vendor and Clinic, generating invoices, maintaining system security, and providing the Vendor with analytics regarding its own Platform activity.
MedicalPRO does not sell Vendor or Clinic contact data.
4. Data Security
MedicalPRO implements administrative, technical, and physical safeguards to protect data, including encrypted data transmission, secure authentication systems, role-based access controls, monitoring and logging mechanisms, and secure cloud infrastructure, consistent with the safeguards applied across the MedicalPRO Platform.
5. Data Sharing
MedicalPRO does not disclose Vendor business data to third parties except to cloud infrastructure and system service providers bound by confidentiality obligations, or where required by legal compliance.
A Vendor's catalog listing and public business information may be visible to Clinics using MedicalPRO, and to the public via the MedicalPRO Network, as a function of the Vendor Platform's discovery purpose.
6. Data Subject Rights
An individual whose personal data appears in a Vendor's account (for example, a named contact person, or a Clinic staff member recorded in a Vendor's CRM) has the right to request access to, correction of, or deletion of that data, consistent with GDPR-equivalent protection applied across the Platform.
Requests relating to Vendor account or staff data may be submitted to MedicalPRO at privacy@medicalprosoftware.com. Requests relating to a Clinic contact recorded in a Vendor's CRM should be directed to the Vendor in the first instance, as the Vendor determines what contact information it records for its own commercial purposes.
7. Data Retention
Vendor account and business data is retained for as long as the Vendor's subscription remains active. Upon cancellation or termination, data is retained and deleted in accordance with the schedule set out in Part I, Section 6 of the Terms of Service.
8. Privacy Contact
Privacy inquiries may be directed to:
MedicalPRO Group Pte Ltd
Email: privacy@medicalprosoftware.com