Privacy Policy

RENEÚ Regenerative Clinic is the personal information controller for personal data collected through this website and through the clinic's consultation, treatment, and administrative processes. The clinic is at Unit 212, BLOC 10, Filinvest, Alabang, Muntinlupa City, Metro Manila, Philippines.

Privacy requests go to concierge@reneuregenerative.com or +63 966 954 3888. The clinic routes those requests to the person who performs the Data Protection Officer function. Please use the subject line "Data privacy request" and describe what you are asking for.

Where National Privacy Commission registration rules apply to the clinic's processing, the clinic registers as a personal information controller and keeps that registration current. This page does not publish a certificate number.

This notice covers visitors to the public website, people who request a consultation, patients and their authorized representatives, newsletter subscribers, job applicants, affiliate applicants, partner-clinic contacts, and people who inquire about a Raffi's Way stay through the site.

It does not replace a consent form you sign at the clinic. If a form you submit is more specific, that form governs the processing it describes, together with this notice.

We collect only what the relevant form or process asks for. Depending on how you deal with the clinic, that can include the following.

• Identity and contact details: name, mobile number, email address, city or country, and your preferred way to be contacted.
• Appointment details: the consultation or service you ask about, preferred clinic room, requested date and time, whether you are an existing client, visit notes, and optional notes. The booking form asks you not to put detailed medical history in the public note.
• A booking email check: if you enter an email address, the site checks whether it already belongs to a RENEÚ record so the existing-client field can be set correctly. The check returns only that yes or no result to your browser.
• Newsletter details: email address, subscription status, and an unsubscribe token.
• Clinical information, if you submit the patient form or become a patient: health history, medications, allergies, procedures, family history, social habits, obstetric information where it applies, and other information needed for assessment and care. Health information is sensitive personal information under the Data Privacy Act.
• Recruitment information: the details and files you send with a job application, including your resume.
• Partnership, product, affiliate, or stay inquiries: the contact and message fields on those forms.
• Referral information: if you open a link that contains a valid affiliate code, the site stores that code in a first-party cookie named reneu_ref for 30 days so a later booking can be attributed. See the Cookie Policy.
• Technical data: standard server and security logs, such as IP address, browser type, pages requested, and the time of the request, which the host may generate to operate and protect the site.
• Staff account data for people who log in to the clinic dashboard. That area is not part of the public website.

The Data Privacy Act requires a lawful basis. We rely on the basis that fits the activity.

• Your consent, including newsletter signup, the optional wellness-updates checkbox on a booking request, affiliate applications, and the data-privacy consent on the patient form.
• Steps you ask us to take before a consultation or other arrangement, such as receiving and answering an appointment request.
• Medical treatment, when a physician or the clinic processes health information for your care and an adequate level of protection is in place, as allowed by Section 13 of the Data Privacy Act.
• A legal obligation, including professional, Department of Health, Food and Drug Administration, tax, and accounting duties that require records to be kept.
• Legitimate interests that do not override your rights, including securing the website, preventing spam, keeping audit logs of staff actions, and attributing a booking to an affiliate link you chose to open.

Information about your health, genetic information, and sexual life is sensitive personal information. We do not ask for a full medical history on the public booking form. The patient form and in-clinic records are the proper place for that information.

Sensitive information is used for assessment, treatment, follow-up, billing related to care, quality review, and reports the law requires. Access is limited to staff and clinicians who need it for those purposes. We do not sell patient information and we do not use health information for advertising.

We share personal data only as needed for the purpose you were told about.

• Clinicians and clinic staff who schedule, assess, treat, bill, or follow up.
• Service providers who host the website, store files, send email, or process online payments (Maya, when online payment is available) on our instructions. They may process data as personal information processors and may be located outside the Philippines. A transfer outside the Philippines is made only with the safeguards the Data Privacy Act and National Privacy Commission rules require.
• A referring affiliate, limited to what is needed to confirm that a qualified booking came from that affiliate's link. Clinical details are not shared for marketing.
• Raffi's Way, when you ask us to coordinate a stay and the inquiry needs to be passed on for that purpose.
• Regulators, courts, or other authorities when a law, order, or professional duty requires it.
• Another health provider when you ask for a referral or when sharing is necessary for your treatment.

We keep personal data only for as long as the purpose lasts, including any period required by medical-record, tax, accounting, or dispute rules, and then delete, anonymize, or block it.

Consultation and treatment records are kept for the period required by applicable Department of Health and professional rules. Newsletter data is kept until you unsubscribe, plus a short record of the unsubscribe so we do not email you again by mistake. Job applications are kept for the recruitment process and a limited period afterward in case a suitable role opens. Inquiry records are kept until the request is closed and for a short administrative period after that. Server logs are kept for security and then deleted or rotated by the host. The affiliate referral cookie expires after 30 days.

We use organizational, physical, and technical measures appropriate to the sensitivity of the data. These include access limits, staff confidentiality, encrypted connections on the public site, and a staff sign-in cookie that is not readable by page scripts.

No online transmission is perfectly secure. Please do not send detailed medical information by social media, and use the patient form or the clinic's private channels when health details are needed.

Under the Data Privacy Act you may, subject to the limits in the law:

• Be informed of how your personal data is processed.
• Object to processing, including processing for direct marketing, and withdraw consent where consent was the basis.
• Request reasonable access to your personal data.
• Ask for inaccurate or incomplete data to be corrected.
• Ask for erasure or blocking when the law allows it, including when the data is incomplete, outdated, unlawfully obtained, or no longer necessary.
• Request data portability where the right applies.
• Be indemnified for damages you sustain because of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
• Lodge a complaint with the National Privacy Commission.

Email concierge@reneuregenerative.com or call +63 966 954 3888. Tell us your name, the contact details we hold, and the right you want to exercise. We may ask for enough information to confirm that the request comes from you or from a person authorized to act for you. Clinical records are released through the clinic's written process so health information is not given to the wrong person.

You can unsubscribe from the newsletter with the link in a newsletter email or through the unsubscribe page. Withdrawing consent does not affect processing that already happened lawfully, and it does not erase records we must keep for care or for a legal duty.

If you believe your rights were violated, you may also complain to the National Privacy Commission at https://privacy.gov.ph.

This website is written for adults. We do not knowingly collect personal data from children through the public forms. Care for a minor is arranged with a parent or legal guardian and the attending physician, and the child's information is handled as sensitive personal information.

We will update this page when our practices change, and we will change the effective date. If a change affects sensitive personal information or direct marketing in a material way, we will tell affected people through the contact details we hold and, where the law requires it, ask for consent again.