Privacy Policy

Last revised: 01 March 2026

Health Outreach Programme Pte Ltd. (“HOP”) is committed to safeguarding the personal data you provide to us. This Privacy Policy sets out the ways in which we collect, use and protect your personal data. If you have any questions, please send an email to our data protection team at enquiry@hop.sg

Overview

Health Outreach Programme Pte Ltd (“HOP”, “we”, “us” or “our”) is committed to protecting your personal data in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”) and other applicable requirements.

This Privacy Policy explains how we collect, use, disclose, protect and retain personal data relating to our patients, health screening participants, website users, authorised representatives and business contacts. It applies to our websites, electronic applications and services, including onsite and in-clinic health screening.

This policy explains our data-handling practices. It does not replace consent to medical treatment or procedures. Where consent is required for the collection, use or disclosure of personal data, we will obtain it through an appropriate process. We may also process personal data without consent where permitted or required by applicable law.

Personal Data We Collect

Depending on your interactions with us and the services you receive, we may collect:

Your name, contact details, date of birth and other information reasonably needed to identify you.
Identification numbers where required by law or necessary to establish or verify identity to a high degree of accuracy.
Medical history, relevant health information, screening measurements, test results, consultation records and medical reports.
Appointment, registration, consent, payment and billing information.
Corporate programme details, such as your employer, eligibility and screening entitlement.
Information provided when you contact us, give feedback or make a request.
Technical information generated when you use our websites or applications, such as device, browser and usage information.

We limit collection to information reasonably needed for the relevant purpose.

How We Collect Personal Data

We may collect personal data:

When you register online, complete a paper form or book an appointment.
During health screening, consultations, investigations and related healthcare services.
When you contact us by telephone, email, messaging platforms or other communication channels.
From your authorised representative or healthcare providers, where the disclosure is authorised or otherwise permitted by law.
From an employer, corporate organiser or benefits administrator arranging services for you, where authorised or otherwise permitted by law.
Through your use of our websites and electronic applications.

If you provide another person’s personal data, please ensure that you have appropriate authority to do so and, where relevant, make this policy available to them.

How We Use Personal Data

We collect and use personal data for purposes reasonably related to our services, including to:

Register you, verify your identity and manage appointments.
Assess relevant health information and provide your selected services.
Arrange laboratory testing, imaging, consultations and other authorised healthcare services.
Prepare and deliver results and reports, and provide appropriate follow-up.
Administer corporate screening programmes, eligibility, entitlements and billing.
Process payments and maintain financial records.
Respond to enquiries, feedback, complaints and requests.
Maintain service quality, patient safety and the security of our systems.
Meet applicable legal, regulatory, professional and record-keeping requirements.

We will explain relevant purposes when collecting your personal data. Before using it for a new purpose, we will provide any required notification and obtain consent where required.

We may disclose relevant personal data where reasonably necessary for the stated purposes and where you have consented or disclosure is otherwise permitted or required by law.

Recipients may include:

Doctors and other healthcare professionals involved in your care.
Laboratories, imaging centres and teleconsultation or other healthcare providers involved in delivering your selected services.
Service providers supporting our operations, such as IT, hosting, communications, payment and administrative providers.
Your authorised representative or another recipient you have specifically authorised.
Government agencies, regulators, courts or other authorities where disclosure is required or permitted by law.

We limit disclosures to information appropriate for the purpose and require suitable safeguards from providers processing personal data on our behalf.

Corporate-Sponsored Health Screening

Where an employer or another organisation sponsors your screening, we may provide necessary participation, entitlement, appointment or billing information for programme administration, as explained to you.

Sponsoring or paying for your screening does not, by itself, entitle your employer to your individual medical results or reports.

We disclose identifiable medical results to an employer only with appropriate specific consent or another applicable legal basis. Where consent is sought, the intended recipient, information and purpose will be explained.

Where we provide anonymised or aggregated programme information, we take reasonable steps to prevent individuals from being identified.

Marketing Communications

Where required, we will obtain your consent before sending marketing communications and comply with applicable Do Not Call requirements.

Optional marketing consent is separate from consent needed to provide your selected services. Declining marketing does not affect your access to those services.

You may opt out using the unsubscribe method provided or by contacting our Data Protection Officer. We may still send necessary service communications, such as appointment reminders, report notifications and payment information.

Cookies and Similar Technologies

Our websites and applications may use cookies and similar technologies to support functionality and security, understand website usage and measure promotional effectiveness.

Depending on the technologies used, these may collect information about your browser, device and interactions with our websites.

You can manage or block cookies through your browser settings. Blocking certain cookies may affect website functionality. Where required, we will provide additional information and obtain consent for the relevant use of personal data.

Data Protection and Security

We take reasonable administrative, physical and technical measures to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal and similar risks.

Our approach includes restricting access according to work responsibilities, maintaining confidentiality requirements, protecting records and systems, and reviewing the safeguards used by relevant service providers.

We use anonymised or de-identified information where appropriate. Information that can still be linked to an individual remains subject to applicable data protection requirements.

No method of electronic transmission or storage is completely secure. This does not limit our obligations under applicable law. We review our safeguards and make improvements where necessary.

Data Storage and Overseas Transfers

Personal data may be held in physical records and electronic systems managed by HOP or its service providers.

Where personal data is transferred outside Singapore, including through overseas storage, processing or remote access, we will comply with applicable PDPA transfer requirements. This includes taking appropriate steps to ensure a standard of protection comparable to that required under the PDPA, using legally enforceable safeguards or another mechanism permitted by law.

Data Retention

We retain personal data for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, clinical, regulatory or business requirements.

Medical records may need to be retained for longer periods than appointment, registration or administrative records. Retention may also be necessary for ongoing treatment, investigations, disputes or legal proceedings.

Withdrawal of consent, termination of a corporate programme or closure of an online account does not automatically require the deletion of records that must lawfully be retained.

When retention is no longer justified, we will securely dispose of the personal data or remove the means by which it can be associated with an individual.

Access and Correction

You may contact our Data Protection Officer to request:

Access to personal data in our possession or under our control, and information about how it has been used or disclosed during the preceding year, subject to applicable exceptions.
Correction of an error or omission in your personal data.

We may request information reasonably needed to verify your identity, confirm your authority or understand your request. Please do not send identity-document copies or medical records by ordinary email unless we have explained the need and provided an appropriate submission method.

We will respond as soon as reasonably possible or practicable. If we cannot respond to an access or correction request within 30 days, we will inform you in writing within that period of the time by which we expect to respond.

We may charge a reasonable fee for an access request and will explain the estimated fee in advance. We do not charge for correction requests.

Please inform us if relevant information, such as your contact details, changes.

You may withdraw consent to the collection, use or disclosure of your personal data by giving reasonable notice to our Data Protection Officer.

We will explain the likely consequences and the steps needed to give effect to your request. Depending on its scope, withdrawal may affect our ability to provide or continue a particular service.

Once withdrawal takes effect, we will cease the relevant consent-based collection, use or disclosure and take appropriate steps with our data intermediaries and agents, unless continued processing is permitted or required by law.

Withdrawal does not affect processing already lawfully undertaken or require us to delete records that must lawfully be retained.

Questions and Complaints

If you have questions, concerns or a complaint about how we handle personal data, please contact our Data Protection Officer. We will review the matter and respond as appropriate.

Health Outreach Programme Pte Ltd
Attention: Data Protection Officer
Email: enquiry@hop.sg

Please include sufficient information for us to understand your enquiry, while avoiding unnecessary sensitive information. We will advise you if a secure submission method is needed.

Changes to This Privacy Policy

We may update this policy to reflect changes in our services, practices or legal requirements. The latest version will be published on this page with its revision date.

Where a change involves a new use or disclosure of personal data, we will provide any required notification and obtain consent where required. Publishing an updated policy does not, by itself, constitute your consent to a new purpose.

Governing Law

This Privacy Policy is governed by the laws of Singapore. Nothing in this policy excludes or limits your rights or our obligations under the PDPA or other applicable law.