Effective Date: 08 June 2026
1. Introduction
AJ Royal Medical Holdings Pte. Ltd. and its subsidiaries, related corporations, clinics and operating entities (collectively, “AJ Royal”, “we”, “us” or “our”) respect your privacy and are committed to protecting personal data in accordance with the Singapore Personal Data Protection Act 2012 (“PDPA”) and other applicable laws.
This Data Protection Policy explains how we may collect, use, disclose, store and protect personal data when you visit our websites, contact our clinics, submit enquiries or registration forms, interact with our corporate healthcare team, or engage with our official social media channels, including YouTube, X, Facebook and Instagram.
2. Scope of this Policy
This policy applies to personal data collected by AJ Royal through our websites, contact channels, public social media pages, online forms, appointment enquiries, corporate healthcare enquiries, email, telephone, messaging applications and in-person interactions. Where a subsidiary, clinic, third-party platform or healthcare provider has a separate notice or consent form, that notice may apply in addition to this policy.
3. Personal Data We May Collect
Depending on your interaction with us, we may collect the following types of personal data:
- Identity and contact details, such as name, telephone number, email address, residential or business address and preferred contact method.
- Appointment and enquiry details, such as the nature of your request, preferred appointment time, clinic location and information you choose to provide to us.
- Patient-related information, such as registration details, relevant health information, medical history, medication or allergy information, where this is necessary for clinical care or clinic administration.
- Corporate healthcare information, such as company name, job title, business contact details, employee headcount, preferred screening arrangements and billing contact information.
- Technical and website usage information, such as IP address, device information, browser type, pages visited, cookies, analytics information and interaction logs.
- Social media interaction data, such as public comments, messages, reactions, handles, profile information made available by the platform and content you voluntarily share with us.
- Images, audio or video recordings if you participate in events, give consent for media use, or are captured by security systems at clinic premises where applicable.
- Payment, billing or insurance-related information, where relevant to clinic operations, corporate billing, panel arrangements or reimbursement processing.
4. Sensitive and Health-Related Information
Health-related information may be sensitive. Please do not post personal medical information, NRIC numbers, medical records, test results or confidential information in public comments on YouTube, X, Facebook, Instagram or other social media platforms.
For medical concerns, appointments and patient matters, please contact us through our official clinic contact channels. Public social media interactions are not intended for clinical assessment, diagnosis, treatment, emergency care or confidential medical communication.
5. Purposes for Collection, Use and Disclosure
We may collect, use and disclose personal data for purposes reasonably necessary for our operations, including:
- Responding to enquiries, appointment requests, feedback and service requests.
- Registering patients, providing healthcare services, managing follow-up care and supporting clinic administration.
- Assessing and supporting corporate healthcare, workplace health screening and employer-related enquiries.
- Processing payments, billing, claims, insurance or corporate account arrangements where applicable.
- Communicating service updates, appointment reminders, operational notices and administrative messages.
- Sending marketing, educational or promotional updates where consent has been obtained or where permitted by law.
- Improving our websites, services, content, patient experience and operational processes.
- Managing, moderating and responding to interactions on our official social media channels.
- Complying with legal, regulatory, licensing, audit, professional, reporting and record-keeping obligations.
- Protecting the safety, security, rights and legitimate interests of AJ Royal, our patients, staff, visitors and users.
6. Consent
By providing personal data to us, contacting us, submitting forms, interacting with our official channels or using our websites, you consent to the collection, use and disclosure of your personal data for the purposes described in this policy, unless you inform us otherwise.
Where required, we may seek specific consent for particular uses, such as marketing communications, photography, video recording, testimonials, event publicity or the use of sensitive information. You may withdraw consent by contacting our Data Protection Officer, subject to legal, clinical, contractual and operational limitations.
7. Disclosure to Third Parties
We do not sell personal data. We may disclose personal data where necessary to:
- Subsidiaries, related corporations, clinics, doctors, clinic staff and authorised personnel within AJ Royal.
- Service providers and vendors supporting IT, website hosting, analytics, email, appointment systems, payment processing, accounting, professional services, marketing, communications, security and clinic operations.
- Healthcare providers, laboratories, insurers, panel administrators, corporate clients or other parties involved in providing or arranging care, where appropriate and authorised.
- Regulators, public agencies, courts, law enforcement, professional bodies or other authorities where required or permitted by law.
- Third parties in connection with corporate transactions, restructuring, acquisitions, financing, audits or due diligence, subject to appropriate confidentiality safeguards.
8. Social Media Platforms
Our official social media channels may include YouTube, X, Facebook and Instagram. These platforms are operated by third parties and may independently collect, use and disclose information under their own privacy policies and terms of service.
Public comments, posts, reviews, tags, shares or messages may be visible to others depending on your privacy settings and the platform’s design. We may moderate, hide, delete or respond to content on our official pages where appropriate, but we do not control the privacy practices of third-party platforms.
9. Cookies, Analytics and Online Tracking
Our websites may use cookies, analytics tools and similar technologies to support site functionality, understand visitor behaviour, improve user experience, measure content performance and support marketing where permitted. You may adjust cookie settings through your browser or device settings, but some website features may not function properly if cookies are disabled.
10. Marketing and Do Not Call
Where we send marketing or promotional messages, we will do so in accordance with applicable consent requirements and the PDPA, including the Do Not Call provisions where applicable. You may unsubscribe from marketing communications or contact us to update your preferences.
11. Accuracy of Personal Data
Please ensure that personal data provided to us is accurate, complete and up to date. If your details change, please inform us so that we can update our records where appropriate.
12. Protection and Security
We take reasonable administrative, technical and physical measures to protect personal data in our possession or control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. However, no method of electronic transmission, online communication or social media interaction is completely secure.
13. Retention of Personal Data
We retain personal data only for as long as necessary for the purposes for which it was collected, for legal or business purposes, or as required by applicable laws, healthcare record-keeping obligations, regulatory requirements and professional standards. When personal data is no longer required, we will take reasonable steps to securely dispose of or anonymise it.
14. Transfers Outside Singapore
Where personal data is transferred outside Singapore, we will take appropriate steps to ensure that the transferred personal data receives a standard of protection comparable to that provided under the PDPA, unless otherwise permitted by law.
15. Access, Correction and Withdrawal Requests
Subject to the PDPA and applicable exceptions, you may request access to personal data that we hold about you, request correction of inaccurate or incomplete personal data, or withdraw consent for specific uses or disclosures of personal data.
We may require reasonable information to verify your identity and process your request. Withdrawal of consent may affect our ability to provide services, process appointments, respond to enquiries or fulfil legal and clinical obligations.
16. Data Breach Management
If we become aware of a data incident involving personal data in our possession or control, we will assess the incident and take appropriate steps in accordance with applicable legal and regulatory requirements.
17. Third-Party Websites and Links
Our websites and social media channels may contain links to third-party websites, platforms or resources. We are not responsible for the privacy practices, security, accuracy or content of third-party websites. Please review their privacy notices before providing personal data to them.
18. Updates to this Policy
We may update this Data Protection Policy from time to time. The updated version will be posted on our website with the effective date. Continued use of our websites, services or official channels after changes are posted constitutes acknowledgement of the updated policy.
19. Contact Us
If you have questions about this Data Protection Policy or wish to submit a data protection request, please contact:
Data Protection Officer
AJ Royal Medical Holdings Pte. Ltd.
Email: [email protected]
Address: 166 Woodlands Street 13, #02-523, Singapore 730166