1. Who we are

This Privacy Policy explains how AspenHealth Holdings Pte Ltd and its subsidiaries and clinics (together, "Aspen", "we", "us") collect, use, disclose and protect personal data, in line with the Personal Data Protection Act 2012 ("PDPA") and applicable healthcare laws in Singapore.

It applies to aspenhealth.sg, our clinic brand websites (including heartlandhealth.sg, Braddell Medical Clinic, 1 Medical Teck Ghee and 57 Medical), our clinics, teleconsultation and online queue services, and any other channel where we interact with you.

2. Personal data we collect

• Identity and contact: name, NRIC/FIN or passport number, date of birth, gender, nationality, address, phone, email.

• ​Medical: medical history, allergies, diagnoses, consultation notes, prescriptions, test results, vaccination records.

• Billing and coverage: scheme eligibility (e.g. CHAS, Healthier SG, MediSave), insurer or TPA/corporate panel details, payment records.

• Enquiries and applications: messages sent via our forms, email or WhatsApp; CVs and details from job applicants.

• Website usage: IP address, browser and device type, pages visited, collected through cookies.

We collect NRIC numbers only where required by law or to verify your identity for medical care, subsidies or claims.

 

3. How we collect and use it

We collect personal data directly from you (at registration, consultation, online queue, teleconsultation, forms), from your authorised representatives, and from other healthcare providers, insurers or employers involved in your care or coverage.

 

We use it to:

1. Register you and provide medical care, including teleconsultation, follow-up and referrals.

2. Process payments, subsidies, MediSave and insurance or corporate panel claims.

3. Meet legal and regulatory duties, including reporting to the Ministry of Health and contributing to national health records.

4. Respond to enquiries, feedback and job applications.

5. Manage clinic operations, quality and safety, and audits.

6. Send appointment and health reminders and, only with your consent, marketing messages.

 

4. Who we share it with

We do not sell your personal data. We share it only as needed for the purposes above, with:

• The Ministry of Health, Agency for Integrated Care, Primary Care Networks and their appointed auditors, for scheme administration and regulatory compliance.

• The National Electronic Health Record (NEHR) and national registries, as required by law.

• Hospitals, specialists, laboratories and other providers involved in your care.

• Insurers, third-party administrators (TPAs) and employers' medical benefit providers, for claims you make under their plans.

• Service providers who support our operations (e.g. IT maintenance, laboratories), under confidentiality obligations.

• Authorities where required or permitted by law.

 

Scheme-specific data sharing is further described in each clinic's Data Sharing Notice.

 

5. Storage, protection and retention

 

All personal data, including medical records, is stored and processed in Singapore, primarily on servers we operate on our own premises. We do not transfer personal data outside Singapore.

 

We protect personal data with access controls, encryption where appropriate, staff confidentiality obligations and regular security reviews. Access to medical records is limited to staff who need it for your care or for legally required work.

 

We keep medical records for the periods required by Ministry of Health rules and other laws. Other personal data is kept only as long as needed for its purpose or for legal or business reasons, then securely deleted or anonymised.

 

6. Your rights

 

You may ask to access or correct your personal data, or withdraw consent to its use, by contacting our Data Protection Officer (section 8). We will respond within 30 days, or tell you if we need longer. A reasonable fee may apply for access requests.

 

If you withdraw consent, we may be unable to provide some services or process subsidies or claims. Withdrawal does not affect data we must keep or disclose under law, such as medical records and NEHR contributions.

7. Cookies and marketing

Our websites use cookies to function properly and to understand how visitors use them. You can block cookies in your browser, though some features may not work.

​

We send marketing messages only with your consent and in line with the Do Not Call provisions of the PDPA. You can opt out at any time through the unsubscribe link or by contacting us. Links to third-party websites are governed by those sites' own policies.

​

8. Contact and updates

​

Data Protection Officer

AspenHealth Holdings Pte Ltd - 2 Sims Close #03-12, Gemini@Sims, Singapore 387298

Email: admin@aspenhealth.sg

​

We may update this policy from time to time. The latest version will be posted on this page with its effective date.

 

Last updated: 09 October 2026