IMC-Health, Inc. – Website Data Privacy Statement

Effective Date: 3 June 2025

1. Scope

This Privacy Statement governs all online and offline personal-data processing activities of IMC-Health, Inc. including our corporate website, campaign or event microsites, mobile applications, email marketing platforms, analytics tools, and social-media pages that we control.

2. Personal Data We Collect

Category	Typical Data Elements	Typical Source
Identity & Contact	name, profession, PRC license #, email, phone, address	online forms, event signups, direct correspondence
Professional Profile	specialty, employer/facility, affiliations, training history	HCP portals, surveys
Marketing & Usage	campaign engagement, website/app logs, cookies, device IDs	automated tracking technologies
Health-related Information only where strictly necessary	adverse-event details, patient testimonials (with explicit consent)	voluntary submissions, safety reports

We do not knowingly collect data from individuals under 18.

3. Legal Bases & Purposes of Processing

We process personal data only when at least one lawful basis under the Philippine Dat Privacy Act of 2012 is satisfied:

Purpose	Legal Basis
Deliver requested content, samples, or services	Contract
Conduct medical-marketing campaigns & CME events	Consent / Legitimate Interest
Pharmacovigilance & adverse-event reporting	Legal Obligation
Market research & analytics	Legitimate Interest (balanced with your rights)
Regulatory, tax, or audit compliance	Legal Obligation

4. How We Share Your Data

Personal data may be disclosed to:

Authorized IMC-Health personnel on a “need-to-know” basis;

Accredited personal-information processors (e.g., web-hosting, email, CRM, analytics providers) bound by Data-Sharing or Outsourcing Agreements;

Healthcare manufacturers who engage IMC-Health for bona fide promotional services, strictly for the purposes listed above;

Government agencies, courts, or regulators (e.g., NPC, FDA, DOH) when required by law or to protect vital interests.

We never sell personal data.

5. Cross-Border Transfers

When transferring data outside the Philippines, we ensure an adequate level of protection through Standard Contractual Clauses or other safeguards recognized by the National Privacy Commission (NPC).

6. Data Retention

We keep personal data only as long as necessary for the stated purposes or as required by law (e.g., five years for marketing consents; ten years for pharmacovigilance records). Thereafter, data is irreversibly anonymized or securely deleted.

8. Your Data-Subject Rights

You have the right to be informed; to object; to access; to rectify; to erase or block; to data portability; and to be compensated for damages resulting from inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data. To exercise any of these rights or lodge a complaint, contact our Data Protection Officer (see Section 11).

9. Automated Decision-Making & Profiling

We do not make solely automated decisions that produce legal or similarly significant effects. Where profiling is used (e.g., to tailor digital content for healthcare professionals), appropriate safeguards are applied and you may opt out at any time.

10. Cookies & Similar Technologies

Our sites use first- and third-party cookies for functionality, analytics, and advertising. You can manage cookie preferences via your browser settings or our Cookie Consent banner. For details, please refer to our separate Cookie Notice.

11. Contact Information

Data Protection Officer
IMC-Health, Inc.
160 Pasig Blvd. Bagong Ilog, Pasig City, 1603 Philippines
✉ dpo@imc-health.com.ph
If we are unable to satisfactorily address your concerns, you may also contact the National Privacy Commission at privacy.gov.ph or +632 5322 1322.

12. Changes to This Statement

We may update this Statement from time to time. Material changes will be announced on this page and, where appropriate, notified to you via email or site banner. Previous versions will be archived and made available upon request