Privacy Policy

What we collect

When you submit an enquiry, we collect your name, your email address, your phone number if you choose to give one, and the message you write.

When you register for the patient portal, we collect your name, email address, phone number and preferred language, along with a password. Your password is stored only as a cryptographic hash — we never hold it in readable form and cannot recover it.

As we coordinate your care we also hold the case records, appointment details and any medical documents you choose to upload.

Why we collect it

We use your personal data to match you to the subspecialist best qualified for your condition, to coordinate second opinions and appointments, to respond to your enquiry, and to operate your portal account.

We do not use your health information for advertising, and we do not sell or rent personal data to anyone.

Your consent

By submitting the enquiry form or creating a portal account, you consent to our collecting, using and disclosing your personal data for the purposes described above.

You may withdraw your consent at any time by writing to us. Withdrawal may mean we can no longer coordinate your care, and we will tell you if that is the case.

Who we share it with

We share your information with the specialists, clinics and hospitals we introduce you to, and only to the extent needed to arrange your consultation or second opinion.

We also rely on service providers who host our website and database on our behalf. They are required to protect your data and may not use it for their own purposes.

We may disclose personal data where the law requires it, or to protect our legal rights.

How we protect it

The site is served over an encrypted HTTPS connection. Passwords are stored as bcrypt hashes. Medical documents you upload are stored outside the public web root and are released only through an authenticated request tied to your own account. The patient portal and our administrative areas both require you to sign in.

No method of transmission or storage is completely secure, so while we take these measures seriously we cannot guarantee absolute security.

How long we keep it

We keep your personal data for as long as your account is active or as long as needed for the purposes it was collected for, and afterwards only where a legal or legitimate business reason requires it.

You may ask us to delete your data by writing to us.

Cookies

We use a session cookie to keep you signed in to the patient portal. It is strictly necessary for the site to work, and blocking it will prevent you from signing in.

We do not use advertising or cross-site tracking cookies.

Your rights

Under the PDPA you may ask us for access to the personal data we hold about you and how it has been used or disclosed in the past year, and you may ask us to correct anything inaccurate.

Write to us at infopcsg@gmail.com and we will respond as soon as reasonably possible.

Changes to this policy

If we change this policy we will post the revised version on this page and update the date above. Where the change is material we will take reasonable steps to bring it to your attention.

Contact us

For any question or complaint about privacy, write to Patient Connect Pte Ltd, Singapore, at infopcsg@gmail.com.