Privacy Policy

Legal Information · Last updated August 25, 2026

NDV MED respects your privacy. This Privacy Policy explains how we handle personal information submitted through our website, consultation form, email links, and related communications.

1. Who Is Responsible for Your Information?

The person responsible for the processing described in this policy is:

2. Information We May Collect

Depending on how you use the website, we may collect:

• Your name, email address, and mobile number;
• Your preferred consultation location;
• The procedure or service you are interested in;
• Your questions, goals, referral source, and other information you choose to enter;
• Messages sent through email, telephone, Viber, or other communication channels you initiate;
• Appointment and follow-up communication records; and
• Limited technical information processed by our hosting and security providers, which may include IP address, browser or device information, timestamps, requested pages, and security logs.

Please avoid submitting detailed medical records, government identification numbers, financial information, or emergency information through the general website form unless NDV MED specifically asks you to use an authorized channel.

3. Sensitive Personal Information

Information about health, medical history, procedures, or treatment interests may be considered sensitive personal information under the Philippine Data Privacy Act of 2012. We process such information only for declared, specific, and legitimate purposes and under an applicable lawful basis.

Submitting a website inquiry does not create a doctor-patient relationship. A medical history and clinical assessment should be completed through the process directed by your treating team.

4. Why We Use Your Information

We may use information for the following purposes:

• To receive, review, and respond to your inquiry;
• To contact you about consultation availability and location;
• To direct your inquiry to an appropriate NDV MED physician or authorized team member;
• To prepare for a requested consultation or service;
• To maintain inquiry, appointment, consent, and communication records;
• To protect patients, staff, the website, and information systems;
• To comply with professional, regulatory, tax, accounting, legal, and public-health obligations where applicable; and
• To establish, exercise, or defend legal claims when necessary.

We will not use your health-related inquiry for unrelated advertising without a separate lawful basis or consent when consent is required.

5. Basis for Processing

Depending on the information and circumstances, processing may be based on your consent, steps taken at your request before a consultation or service, legitimate interests that do not override your rights, compliance with legal obligations, medical treatment carried out by an authorized medical practitioner or treatment institution with appropriate protection, or another basis permitted by applicable law.

Where processing relies on consent, you may withdraw consent prospectively by contacting us. Withdrawal does not make prior lawful processing invalid and may limit our ability to respond or provide a requested service.

6. How Information Is Collected and Stored

The consultation form is hosted through Netlify. Form submissions may be stored in the Netlify project dashboard and may generate notifications sent to an NDV MED Google Workspace email account. Information may also be stored in authorized clinic communication, scheduling, and record systems.

Do not use the website form for urgent or emergency concerns. Internet transmission and ordinary email cannot be guaranteed to be completely secure.

7. Who May Receive Information?

Information may be accessed or received only when reasonably necessary by:

• Authorized NDV MED physicians, clinic personnel, and administrative staff;
• The appropriate member or clinic of the Paragon Medical Collective involved in responding to your request or providing your care;
• Hosting, form-processing, email, security, scheduling, communications, and technical service providers acting on our instructions;
• Professional advisers, insurers, auditors, or regulators where applicable; and
• Courts, law-enforcement agencies, public authorities, or other parties when disclosure is required or permitted by law.

We do not sell personal information. Access is limited to persons and service providers who reasonably need the information for the purposes described in this policy.

8. International Processing

Some service providers may process or store information outside the Philippines. Where applicable, NDV MED will use reasonable contractual, organizational, and technical measures required for lawful cross-border processing.

9. Retention

Website inquiries that do not become patient or clinical records will generally be retained for up to twelve (12) months after the last meaningful communication. They may be deleted earlier when no longer needed or retained longer when required by law, professional obligations, security requirements, dispute handling, or another legitimate and documented purpose.

If an inquiry leads to a consultation or treatment and becomes part of a patient’s medical or clinical record, it will be retained according to applicable medical-record requirements and the policies of the physician or clinic providing care.

When information is no longer required, it will be securely deleted, anonymized, or otherwise disposed of using appropriate safeguards. A person may request deletion by contacting NDV MED, subject to any legal or professional requirement to retain the information.

10. Security

We use reasonable organizational, physical, and technical measures appropriate to the nature of the information. These may include access restrictions, account security, authorized-user controls, staff confidentiality, service-provider review, and secure disposal. No website, email system, or internet transmission can be guaranteed to be completely secure.

11. Your Privacy Rights

Subject to the Philippine Data Privacy Act and applicable exceptions, you may have rights to be informed, access your personal data, object to certain processing, correct inaccurate information, request erasure or blocking, withdraw consent where applicable, obtain data portability in qualifying circumstances, lodge a complaint, and seek damages for violations.

To make a request, contact privacy@ndvmed.com. We may need to verify your identity and clarify the information or processing involved before acting.

12. Cookies and Technical Services

This website may use strictly necessary technologies required for hosting, security, forms, and site operation. If analytics, advertising pixels, embedded chat services, or non-essential cookies are added, this section and any cookie-consent mechanism must be updated before those technologies are enabled.

13. Third-Party Links

The website may link to Gmail, Viber, social networks, external medical resources, or other websites. Those services have their own privacy practices, which NDV MED does not control. Review their notices before submitting information.

14. Children

The general website inquiry form is not intended for unsupervised use by children. A parent, guardian, or other lawful representative may be required for consultations involving a minor, subject to applicable law and professional standards.

15. Changes to This Policy

We may update this policy when our website, services, providers, or legal obligations change. The revised version will show a new “Last updated” date. Material changes may be communicated through an additional notice when appropriate.

16. Contact and Complaints

Privacy questions and requests may be sent to privacy@ndvmed.com. You may also contact the National Privacy Commission of the Philippines through its official website at privacy.gov.ph.