StarHub Healthcare System Privacy Policy Principles

The business of StarHub Healthcare System's various institutions (including StarHub Clinics and StarHub Medical Centers in various locations, hereinafter referred to as "the Center") is based on mutual trust between the client and the Center. When you use the Center's website and other related services or register as a member of the Center, you agree that the Center may collect, process, and use your personal data in accordance with these Privacy Policy Principles.

The Center's Privacy Policy Principles are detailed as follows:

I. The Center will collect, process, and use personal data that is necessary for the Center's business operations (including name, telephone number, date of birth, ID number, email address, address, and other personal data required for the specific purposes of the Center's business) to provide you with better customer service.

II. Unless we have obtained your consent, or it is required by law, or we have notified you in advance, we will not disclose your personal information to any external organization.

III. We may be required to disclose your personal information to government departments or other regulatory agencies, however, we will only do so if such agencies have the appropriate authority under the law.

IV. We are committed to maintaining accurate and up-to-date records of your personal information, and you can request modifications at any time.

V. We explicitly stipulate that all our employees and third parties authorized to use your personal information must abide by our confidentiality obligations.

VI. In response to changes in circumstances or amendments to laws, this website has the right to modify or change the content of this policy at any time. You should check it frequently to understand your current rights and obligations. If you continue to use this service after any modification or change to this policy, it will be deemed that you have agreed to accept the modification and change of this policy.

We adhere to the above principles to demonstrate that we highly value your trust in us.

Scope of Privacy Policy

I. This Privacy Policy applies to the collection, processing, use, and protection of your personal data when you use the services of our firm and its affiliated companies' websites.

II. This Privacy Policy does not apply to related linked websites outside of our firm, companies not owned or controlled by our firm, or personnel not employed or managed by our firm. Our firm has no control or influence over the information processing measures and processes of other interconnected websites, nor does it bear any obligations or responsibilities. When you browse these other websites and engage in activities, the protection of your personal data is subject to the individual privacy policies of each website.

Data Security Protection Measures

I. All StarHub Medical System facilities (including StarHub clinics and clinics in various locations, hereinafter referred to as "the Centre") prioritize security and are consistently committed to ensuring that your personal data is securely protected and will not be obtained, processed, or deleted by unauthorized or accidental individuals. To ensure data security, the Centre implements appropriate measures in its facilities, electronic systems, and management to protect your personal data.

II. The Centre's website security zone uses the industry-standard Transport Layer Security (TLS) protocol and 256-bit encryption technology to protect your personal data. When you provide important information, such as your personal data, to the Centre, this data will be automatically converted into code before being securely transmitted over the Internet.

III. Our website servers are protected by a firewall, and we continuously monitor our systems to prevent unauthorized access by any individual. We will take all feasible steps to ensure that we do not retain clients' personal data for longer than necessary, and we will comply with all laws and regulations of the Republic of China regarding the retention of personally identifiable information.

Self-Protection Measures

I. Please safeguard your passwords and any personal data, such as your username, email address, or other transaction-related information, and especially ensure that you do not intentionally or unintentionally share, give, or allow unauthorized persons to use such information. Never allow others to know your private information without your permission. We will strive to maintain a high level of security to protect your interests.

II. Your private information is unique to you, and you should keep it strictly confidential.

III. If you share a computer with others or use a public computer, be sure to close your browser window to prevent others from reading your emails or any personal data.

Collection of Personal Data

I. Application of "cookies": When you browse this website, the website will record information to analyze the number of website visitors and general usage. Some of this data will be collected through "cookies". Cookies are files containing a small amount of data that are automatically stored in the internet browser installed on the visitor's computer and can be retrieved by this website later. Most cookies are valid for a certain period or only for a single visit.

Collection of Personal Data

I. Application of "cookies": When you browse this website, the website will record information to analyze the number of website visitors and general usage. Some of this data will be collected through "cookies". Cookies are files containing a small amount of data that are automatically stored in the internet browser installed on the visitor's computer and can be retrieved by this website later. Most cookies are only valid for a certain period of time or only for a single visit.

II. Marketing: Occasionally, we collect personal data from visitors to this website or individuals participating in competitions or promotional activities (online, by phone, or on our Facebook fan page). This personal data is collected voluntarily by the respondents, and we will explain the purpose of collecting this data and ensure that it will only be used for the purposes stated at the time of collection. We may use this data to send respondents products, services, and other marketing information that we deem relevant. We may also invite visitors to this website to participate in market surveys, opinion polls, and other similar activities. You may choose to receive marketing and other promotional information via email. If you no longer wish to receive promotional information such as emails or marketing letters, you may choose to stop receiving such information at any time.

Personal Data Collection, Processing, and Use Notice

The following is the notice regarding the collection, processing, and use of personal data by StarHub Medical System (including StarHub clinics and StarHub hospitals in various locations, hereinafter referred to as "the Center").

I. To process your dealings with the Center and provide appropriate product and service information.

II. To conduct business as described in Article I, or as permitted by its business registration or articles of association, or other laws and regulations (including but not limited to self- or joint marketing, consumer protection, consumer/customer management and services, and other e-commerce services, accounting management, etc.). (For purposes such as contractual/similar contractual relationships or other legal relationships, investigation/statistical and research analysis, information and database management, collection, processing and use of personal data by non-governmental organizations in accordance with their legal obligations, etc.)

III. Regarding the collection, processing, use, and international transmission of relevant personal data obtained by the entities described in Article 3 below for purposes permitted by their business registration, articles of association, or laws (as detailed in Article 2), and in accordance with the provisions of the Personal Data Protection Act (hereinafter referred to as the Personal Data Act), we hereby inform you of the following matters, please read carefully:

1. Specific purpose of collecting personal data: In accordance with the "Specific Purpose and Categories of Personal Data under the Personal Data Protection Act" promulgated by the Ministry of Justice, please refer to Appendix 1 for the specific purpose of your personal data collection.

2. Categories of personal data collected: Based on the personal data actually collected by our firm in our business dealings with you.

Our firm collects your personal data based on different business needs. The categories are defined according to the "Specific Purposes and Categories of Personal Data" promulgated by the Ministry of Justice, and are as follows:
- Identification Category C001 to C002 (e.g., name, telephone number, bank account or credit card number)
- Characteristic Category C011 to C013 (e.g., gender, date of birth, etc.)
- Social Circumstances C031 to C041 (e.g., residential address, property information, residency documents, etc.)
- Financial Transaction Category C093 (e.g., payment amounts, credit limits, payment methods, transaction records)
- Other types of information C131 to C132 (such as unclassifiable emails, etc.)

IV. Period, Region, Target and Method of Personal Data Use:
1. Period: The duration of the personal data collection for the specific purpose, the retention period stipulated by relevant laws or contracts (such as the Commercial Accounting Act), or the retention period of this firm (whichever is longer than the period stipulated by law).
2. Region: Republic of China (including Taiwan, Penghu, Kinmen and Matsu).
3. Target: This firm, medical institutions cooperating with this firm, outsourced institutions or third parties with cooperative or commissioned relationships with this firm (including but not limited to institutions entrusted to conduct market research), recipients of internationally transmitted personal data not restricted by the central competent authority, joint marketing or cooperative promotion targets of this firm, other institutions with business or transaction dealings with this firm, legally authorized agencies and other competent authorities with jurisdiction over this firm, judicial or other government agencies.
4. Method: Utilization by automated machines or other non-automated methods. V. In accordance with Article 3 of the Personal Data Protection Act, you have the following rights regarding the personal data held by our firm:
1. Except as provided in Article 10 of the Personal Data Protection Act, you may inquire with our firm, request to view or request a copy, and our firm may charge necessary costs in accordance with the law.
2. You may request our firm to supplement or correct your personal data, provided that you properly explain the reasons and facts in accordance with the law.
3. You may request our firm to stop collecting, processing or using your data and request deletion, except where it is necessary for our firm to perform its business in accordance with the law.
If you wish to exercise the above rights, you may submit your request through our customer service center starservice@starclinic.com.tw or our service hotline 0800-277-889. Our firm will handle the subsequent related matters according to your request. If you do not wish to receive marketing emails or communications, you may call our service hotline 0800-277-889, and a specialist will explain and handle the matter for you.

VI. Impact of Your Failure to Provide Personal Data: You are free to choose whether or not to provide relevant personal data. However, if you refuse to provide relevant personal data, our firm will be unable to conduct the necessary review and processing, resulting in the inability to provide relevant services. Our firm will refuse your application for or processing of relevant services.

VII. You agree that our firm has the right to revise this notice and agree that after the revision, our firm may inform you of the revision points and designated web pages through verbal, written, telephone, SMS, email, fax, electronic documents, branch and website announcements, or other means that are sufficient for you to know or be able to know (including but not limited to providing a website link containing the details of this notice in the aforementioned ways). Please read the content of the designated web pages carefully.

VIII. If there is any discrepancy between the terms of the contract or document previously signed between you and our firm regarding the collection, processing, use, and international transmission of personal data and this notice, this notice shall prevail.

Based on the "Specific Purposes and Categories of Personal Data" promulgated by the Ministry of Justice and the specific purposes for which this firm collects personal data from the platform, the following are the purposes:

◎Collection, processing, and use of personal data by non-governmental organizations in accordance with their legal obligations
◎Credit card, debit card, transfer card, or electronic ticket business
◎Contractual, similar contractual, or other legal relationship matters
◎Consumer, customer management, and service
◎Consumer protection
◎Education or training administration
◎Online shopping and other e-commerce services
◎Advertising or commercial activity management
◎Investigation, statistics, and research analysis
◎Supervision and management of the target business by other government agencies
◎Collection, processing, and use of personal data by other natural persons for legitimate purposes
◎Other businesses that comply with the business registration items or the articles of association

Privacy and Security Policy Consultation and Remedies

If you have any questions or comments regarding the above privacy and security policy, or if any business unit of Starclinic Medical's affiliated institutions violates this policy, please feel free to report it to our dedicated email address: service@starclinic.com.tw