Personal Data Consent

M Diagnostics Philippines Inc. (“MDX”) is firmly committed to protecting the privacy and security of the personal data it obtains and collects. To know more about our privacy practices, please check our Privacy Policy as displayed at our places of business and on our website at www.mdx.ph.

For availing the services of MDX as a patient or appointed guardian of the patient, I agree and consent to the terms and conditions set out below. Unless otherwise indicated, the terms used herein shall have the same meanings as ascribed to them under Republic Act No. 10173 otherwise known as the Philippine Data Privacy Act of 2012:

1. MDX shall collect, use, and process my personal data as indicated in the form or other similar document that I am required to submit in relation to my dealings with MDX as applicable (the “Form”) for one or more of the Purposes (hereinafter defined) as set out further below.
2. The personal data to be collected from me includes:
   1. personal details (e.g., name; contact information such as address, contact numbers, and email; competent evidence of identity); and
   2. sensitive personal data: MDX may need to collect certain data viewed as ‘sensitive’, such as your birthdate, gender, likeness such as photo or video, civil status, and medical history or information. Such sensitive data shall be used by MDX only for the Purposes or as expressly consented to by me in the Form, and within the limits set out by applicable laws.
3. I agree and consent to MDX’s disclosure of my personal data collected within MDX and to other third parties including, but not limited to, MDX’s affiliates and other related companies, third-party service providers, financial institutions, and government agencies for the Purposes indicated below or as may be required under applicable laws, rules, and other regulations.
4. I acknowledge that my personal data has been or will likewise be collected, used, disclosed and processed by MDX for purposes which include the following:
   1. preparing documents and performing acts necessary or desirable to accomplish my requests as stated in the Form, which includes but is not limited to verifying my identity and administering medical diagnostic or laboratory tests which I requested directly or as requested by my employer in compliance with my employer’s requirements;
   2. pursuing matters in relation to my dealings and/or transactions with MDX;
   3. complying with reportorial, filing, and other legal requirements under the law, or as required by any request or direction of any governmental authority, or responding to requests for information from public agencies, offices, statutory boards or other similar authorities;
   4. storing, hosting, backing up (whether for disaster recovery or otherwise) of my personal data which may be transferred to MDX’s affiliates or related companies, and third-party service providers or agents whether within or outside the Philippines for this purpose;
   5. responding to legitimate complaints, queries and/or requests in connection with
   6. any work performed by MDX for me, and responding to regulatory or governmental agencies in connection with the exercise of the latter’s statutorily mandated functions;
   7. handling any and all investigation, legal or other claims arising out of my transaction or request with MDX; and
      any other purposes which may be related to my initial request, business transaction and/or
   8. any of the foregoing purposes enumerated (collectively, the “Purposes”).
5. I understand that my personal data shall only be retained the later of ten (10) years or for as long as necessary for: a) the fulfillment of the declared and legitimate Purposes, or until such time that the processing relevant to such Purposes has been terminated; b) for the establishment, exercise or defense of my and MDX’s legal claims; c) in compliance with the retention periods provided by applicable laws; and d) for any other legitimate business purpose connected to the Purposes.
6. As a data subject, I understand that my rights, to the extent recognized by Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission (“DPA Laws”) shall be respected by MDX. This includes my rights to information, object, access, rectification, erasure or blocking, lodging a complaint, damages and data portability. For these purposes, I understand that MDX adopts the necessary physical, organizational, and technical security measures required under the relevant law, rules, and regulations such as the use of secure facilities for physical copies and encrypted storage for electronic copies managed by MDX.
7. I represent and warrant that all the personal data provided by me to MDX is true and correct, and that I shall update or correct any personal data I have provided when necessary.
8. I confirm that the necessary information has been provided to me and that my consent or the patient’s consent has been obtained in accordance with law for the collection, use and disclosure of their personal data to MDX for the Purposes.
9. I understand that for any questions or complaints regarding MDX’s handling of my personal data or MDX’s compliance with the DPA Laws, I may contact its data protection officer through:

Data Protection Office
T: 02 8251 5868/+632 8442 6813
7th Floor Unit C, #13 Meralco Avenue #27 Sapphire Road, Ortigas Center, Brgy. San Antonio, Pasig City
E: phprivacy@mdx.ph, with subject “Personal Data Protection”