1. SCOPE OF APPLICATION
This policy applies to all personal information and data that the Hospital collects and processes when you visit the website, schedule an appointment online, use the official Zalo OA channel, or visit the Hospital in person for medical care.
By providing information and using the services on this website, you acknowledge that you have read, understood, and agreed to the terms of this Policy.
2. THE DATA WE COLLECT
Depending on the purpose of using the service, the Hospital may collect the following categories of personal data:
- Identifying information: full name, date of birth, gender, phone number, email address.
- Information related to health insurance: health insurance card number, primary healthcare provider.
- Medical examination and treatment information: reason for the examination, clinical symptoms, medical history, and examination and test results—are classified as sensitive personal data under Decree 13/2023/NĐ-CP.
- Technical data generated when accessing the website is used for system operations and security purposes.
3. PURPOSE OF DATA PROCESSING
Personal data is used for the following purposes and will not be used beyond this scope without your separate consent:
- Receive, confirm, and manage patient appointment schedules.
- To support diagnosis, treatment, and the maintenance of medical records in accordance with the provisions of the Law on Medical Examination and Treatment.
- Send appointment confirmation notices, follow-up appointment reminders, and notifications regarding test results.
- View your medical examination results and appointment history when you log in or verify your identity on the website.
- Submit reports to health authorities in accordance with legal requirements.
4. SHARING DATA WITH THIRD PARTIES
The hospital does not sell, exchange, or rent your personal data to any organization or individual except for the purpose of medical examination and treatment and in the following cases:
- The hospital’s official Zalo OA platform—used to send confirmations, appointment reminders, and test result notifications.
- SMS service provider — used as a backup option when messages cannot be sent via Zalo.
- The competent state agency, upon request, in accordance with legal procedures.
The parties listed above may only access data to the minimum extent necessary to fulfill the stated purposes.
5. RETENTION PERIOD
Medical records are retained for the period specified in the Law on Medical Examination and Treatment and related guidelines. Data used for online appointment scheduling (full name, phone number, appointment details) is retained for as long as necessary to facilitate the retrieval of patient medical history and care records, or until you request its deletion in accordance with Section 6.
6. RIGHTS OF DATA SUBJECTS
Under Decree No. 13/2023/NĐ-CP, you have the following rights regarding your personal data:
- The right to be informed about the processing of one’s personal data.
- The right to access and edit one's own personal data that is being stored.
- The right to withdraw previously given consent.
- The right to request the deletion of data, except where laws governing medical examination and treatment require the retention of medical records.
- The right to file complaints, make allegations, or initiate legal action in accordance with the law if it is discovered that data has been processed for purposes other than those intended or in violation of the law.
- The right to claim compensation for damages resulting from a violation of personal data protection regulations that causes harm.
To exercise these rights, please contact the designated representative listed in Section 8.
7. SECURITY MEASURES
The hospital implements appropriate technical and administrative measures to protect personal data from unauthorized access, use, and disclosure, including:
- Access to medical records is restricted; only personnel with relevant duties are authorized to access them.
- Verification when checking medical exam results online — results are not sent directly via Zalo; you must verify them on the website before viewing them.
- Encryption of connections and storage for systems that receive information via websites.
- We do not provide diagnostic or treatment advice based on information exchanged via Zalo or text messages to avoid the risk of sensitive information being disclosed outside of official channels.
8. CONTACT INFORMATION REGARDING PERSONAL DATA
For any requests or questions regarding personal data, please contact the hospital via the phone number, email address, or mailing address listed at the bottom of the website.
