1. Introduction and Scope

PharmaCare Plus, Inc. (“PCPI”, “we”, “us”, or “our”) provides OkieDok teleconsultation services and subscription products. OkieDok may be offered through authorized distribution channels, including M Lhuillier. This Privacy Policy explains how PCPI collects, uses, shares, protects, and otherwise processes personal data in connection with OkieDok subscriptions, accounts, teleconsultations, customer support, and related services.

This Privacy Policy applies to subscribers, users, patients, cardholders, and authorized representatives who purchase or subscribe to an OkieDok plan, use an OkieDok card or account, schedule or attend a teleconsultation, upload information for a consultation, or communicate with PCPI about the service.

PCPI processes data in accordance with Republic Act No. 10173, or the Data Privacy Act of 2012, its Implementing Rules and Regulations, applicable issuances of the National Privacy Commission, and other applicable Philippine laws and regulations.

2. Data We Collect

The data we collect depends on how you subscribe to and use OkieDok. The data we collect may include your personal details, subscriptions, and account information, health and teleconsultation information, and communications and technical information.

2.1 Subscriber, identity, and contact information

• Full name, address, date of birth, contact number, email address, occupation, and sex or gender where required for registration, verification, or healthcare purposes.
• Information provided during subscription, registration, account setup, or verification through M Lhuillier or another authorized distribution channel.
• Information needed to verify that the person using the service is the subscriber or an authorized representative.

2.2 Subscription, card, transaction, and account information

• Plan type, subscription period, consultation credits, card number, policy or reference number, coverage or validity period, and activation status.
• Date of purchase, transaction number, acknowledgment-receipt or similar transaction reference, amount paid, and related subscription or payment verification information.
• Account credentials and access information used to authenticate the subscriber and protect the service from unauthorized use.

2.3 Health and teleconsultation information

Because OkieDok facilitates healthcare consultations, PCPI and the attending healthcare provider may process Sensitive Personal Information relating to health, as defined under Republic Act No. 10173, or the Data Privacy Act of 2012. Depending on the consultation, this may include:

• The reason for consultation, symptoms, medical history, current medications, allergies, prior diagnoses, and other health information you provide.
• Photographs or images that you upload for the healthcare provider to review as part of an initial examination, assessment, or diagnosis.
• Information communicated during an online video or other teleconsultation, including information needed by the healthcare provider to assess your condition and provide medical advice or care.
• Photographs taken by the healthcare provider during a consultation, when necessary and only with your prior consent.
• Consultation records, care instructions, prescriptions, referrals, assessments, or other information created or maintained in connection with the consultation, where applicable.

2.4 Communications and technical information

• Customer-service inquiries, complaints, appointment communications, and other messages exchanged with PCPI or its authorized service providers.
• Technical and security information generated when you use the OkieDok website or platform, such as IP address, browser or device information, access times, system logs, and security events, where applicable.
• Cookies or similar technologies used for essential website functions, security, session management, and service performance, where applicable.

3. How We Collect Personal Data

We may collect personal data:

• Directly from you when you subscribe, register, provide personal or health information, upload photographs, schedule a consultation, participate in a consultation, or contact customer service.
• From M Lhuillier or another authorized distribution channel when information is transmitted for subscription processing, registration, transaction verification, plan activation, or customer support.
• From licensed physicians, healthcare professionals, clinics, and teleconsultation service providers involved in delivering or documenting a consultation.
• Automatically from the OkieDok website, platform, systems, and security tools when you access or use digital services.

4. Why We Process Personal Data

PCPI may process personal data for the following purposes:

• To process an OkieDok subscription and verify subscriber identity, transaction details, plan validity, consultation credits, and service eligibility.
• To create, authenticate, administer, secure, and support subscriber accounts and access credentials.
• To schedule, reschedule, confirm, and administer teleconsultations.
• To connect the subscriber with a licensed healthcare provider and provide that provider with information reasonably necessary for the consultation.
• To allow healthcare providers to review health information and photographs submitted for examination, assessment, diagnosis, treatment, or follow-up care.
• To respond to customer-service inquiries, complaints, access issues, and other requests.
• To prevent fraud, misuse, unauthorized account sharing, security incidents, and unlawful activity.
• To maintain appropriate business, transaction, healthcare, and compliance records.
• To comply with applicable laws, legal processes, regulatory requirements, and professional obligations.
• To maintain and improve the reliability, security, availability, and quality of the OkieDok service.

Depending on the processing activity, PCPI may rely on consent, performance of a contract or requested service, compliance with a legal obligation, protection of life and health, medical treatment by healthcare professionals or institutions, or another lawful basis recognized under applicable law.

5. Consent and Processing of Sensitive Personal Data

Health information and certain other information processed through OkieDok may be sensitive personal information. PCPI applies heightened safeguards to such data and processes it only when there is an appropriate lawful basis.

Where consent is required, PCPI will obtain consent appropriate to the processing activity. This may include consent provided during subscription or registration, consent to share relevant personal and health information with a licensed physician for a consultation, and prior consent before a healthcare provider takes photographs during a consultation.

You may withdraw consent where consent is the lawful basis for processing. Withdrawal will apply prospectively and will not affect processing already carried out lawfully. In some cases, withdrawing consent may affect PCPI or a healthcare provider’s ability to provide a requested service.

6. Sharing and Disclosure of Personal Data

PCPI may share personal data only to the extent reasonably necessary for a legitimate purpose and subject to appropriate privacy and security safeguards. Recipients may include:

• Licensed physicians, healthcare professionals, clinics, and teleconsultation service providers who require relevant information to conduct the consultation and provide healthcare services.
• M Lhuillier and other authorized distribution or service partners for subscription processing, transaction verification, activation, customer support, and related administrative purposes.
• Technology and service providers supporting hosting, communications, email, video or voice services, cybersecurity, customer support, data storage, system administration, and other operational functions.
• Professional advisers, auditors, insurers, and other parties where reasonably necessary for legal, compliance, audit, risk-management, or claims purposes.
• Government agencies, regulators, courts, law-enforcement authorities, or other authorized persons when disclosure is required or permitted by law.

PCPI acts as a platform that connects users with healthcare providers. A licensed physician or medical provider may have independent professional and legal responsibilities for clinical information created or maintained in connection with medical care. Where another organization independently determines how it processes personal data, its own privacy notice may also apply.

7. Photographs, Video Consultations, and Communications

OkieDok may allow you to upload photographs or images for a healthcare provider to review. During an online video consultation, information you communicate or display may be processed as necessary to conduct the consultation.

A healthcare provider may take photographs during a consultation only with your prior consent. Any recording of a consultation, if enabled or required, must be covered by appropriate notice, consent where required, and other applicable legal safeguards.

You should participate in a teleconsultation from a reasonably private location and take appropriate steps to prevent unauthorized persons from seeing or hearing confidential health information.

8. Data Accuracy and Account Security

Subscribers are responsible for providing complete and accurate information and for keeping relevant personal information reasonably up to date. Providing incorrect or outdated information may affect subscription verification, appointment scheduling, or the ability of a healthcare provider to assess the information supplied.

Account credentials and access rights are personal to the authorized subscriber and should not be shared with another person. PCPI may restrict or suspend access where there is suspected misuse, unauthorized sharing, fraud, or a security risk, consistent with the Terms and Conditions and applicable law.

9. Data Retention and Secure Disposal

PCPI retains Personal Data only for the period necessary to fulfill the purposes for which it was collected, and as may be required or permitted by applicable business, healthcare, legal, regulatory, tax, accounting, dispute, security, and records-management requirements.

Different categories of data may have different retention periods. Medical or clinical information maintained by a healthcare provider may also be subject to professional and legal recordkeeping requirements applicable to that provider.

When personal data is no longer required, PCPI will take reasonable steps to securely delete, destroy, anonymize, or otherwise dispose of it in a manner designed to prevent unauthorized recovery or access.

10. How We Protect Personal Data

PCPI maintains reasonable and appropriate organizational, physical, and technical safeguards designed to protect personal data against accidental or unlawful destruction, alteration, loss, unauthorized disclosure, unauthorized access, misuse, and other security risks. Measures may include access controls, authentication, encryption or other protective controls where appropriate, system logging and monitoring, incident-response procedures, confidentiality obligations, personnel training, and vendor security requirements.

No system can guarantee absolute security. If a personal data breach occurs, PCPI will assess and respond to the incident in accordance with applicable legal and regulatory requirements, including notification obligations where required.

11. Cookies and Website Technologies

The OkieDok website or related digital services may use cookies or similar technologies for essential functions such as session management, security, and service performance. Non-essential cookies or analytics, if used, will be handled in accordance with applicable notice and consent requirements.

12. Your Rights as a Data Subject

Subject to the conditions and limitations provided by law, you may exercise rights under the Data Privacy Act and applicable National Privacy Commission rules, including the rights to:

• Be informed about the collection and processing of your personal data.
• Request access to personal data processed about you.
• Object to certain processing where recognized by law.
• Request correction of inaccurate or incomplete personal data.
• Request erasure or blocking in circumstances allowed by law, subject to lawful healthcare, legal, regulatory, and recordkeeping requirements.
• Exercise data portability where applicable.
• Seek damages or indemnification where provided by law.
• File a complaint with the National Privacy Commission.

PCPI may verify your identity or authority before acting on a privacy request. A request may be limited where retention or processing is required or permitted by law, including for healthcare records, legal claims, compliance obligations, fraud prevention, or other legitimate purposes.

13. Minors and Authorized Representatives

Where an OkieDok service is used for a minor or a person who cannot legally provide the required authorization, a parent, legal guardian, or other duly authorized representative should provide the information and any required consent or authorization. PCPI may request reasonable proof of authority before disclosing personal data or acting on a request.

14. Cross-Border or Cloud Processing

Some technology or communications providers may process or store information using systems located outside the Philippines. Where cross-border processing occurs, PCPI will require safeguards appropriate to the nature and sensitivity of the personal data and the requirements of Philippine data privacy law.

15. Changes to This Privacy Policy

PCPI may update this Privacy Policy when OkieDok services, systems, distribution arrangements, healthcare-provider arrangements, legal requirements, or privacy practices change. Material changes will be communicated through the OkieDok website or another appropriate channel. The effective date shown at the beginning of this policy identifies the current version.

16. Privacy Questions, Requests, or Complaints

For questions or concerns regarding OkieDok or the processing of personal data, you may contact PharmaCare Plus, Inc. through the following customer-service channels. Privacy requests received through these channels should be routed to the appropriate privacy personnel for handling.

• Phone: 0919 058 5858
• Email: support@pharmacare.ph
• Website: www.pharmacare.ph

You may also file a complaint with the National Privacy Commission in accordance with its applicable rules and procedures.

17. Relationship with the OkieDok Terms and Conditions

This Privacy Policy should be read together with the applicable OkieDok Terms and Conditions. The Terms and Conditions govern the subscription and use of the service, while this Privacy Policy explains how personal data is processed in connection with that service. If an updated service feature requires additional personal data or a materially different use of personal data, PCPI will provide appropriate notice and obtain consent where required by law.