Privacy Policy

 

UltraVisit
(Powered by ALTRUE INC.)

Last Updated: December 1, 2025

UltraVisit (“UltraVisit”, “we”, “us”, or “our”) is an electronic medical record (EMR) platform designed for clinics and medical practitioners in the Philippines. UltraVisit is operated and powered by ALTRUE INC., a Philippine-registered corporation.

We are committed to protecting personal and sensitive personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the relevant issuances of the National Privacy Commission (NPC).

 

1. Scope of This Privacy Policy

This Privacy Policy explains how UltraVisit collects, uses, stores, shares, and protects personal and sensitive personal information of:

• Clinics and medical practitioners using UltraVisit
• Authorized clinic staff (e.g., secretaries, assistants)
• Patients whose data are recorded in UltraVisit
• Website visitors and users of our services

By accessing or using UltraVisit, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

 

2. Information We Collect

A. Personal Information

We may collect the following personal information:

• Name, address, contact details (email address, phone number)
• Professional information (clinic name, specialization, license number if voluntarily provided)
• Account information (usernames, assigned roles, access levels)

 

B. Sensitive Personal Information

As an EMR platform, UltraVisit processes sensitive personal information, which may include:

• Medical records and consultation notes
• Diagnoses, prescriptions, and treatment plans
• Patient medical history, vital signs, and laboratory results (if entered)
• Mental health-related records where applicable

 

C. Technical and Usage Information

• Login timestamps and access logs
• IP address, browser type, device information
• System activity records for audit, security, and troubleshooting purposes

 

3. Purpose of Collection and Processing

UltraVisit collects and processes personal and sensitive personal information for the following purposes:

• To provide, operate, and maintain the UltraVisit EMR platform
• To enable clinics and medical practitioners to document and manage patient medical records
• To support continuity of patient care and clinic operations
• To provide technical support, onboarding, and customer assistance
• To maintain system security, audit trails, and service reliability
• To comply with applicable Philippine laws and regulations

 

UltraVisit does not sell patient data or use patient medical information for advertising or marketing purposes.

 

4. Data Ownership and Roles

• Clinics and medical practitioners own all patient data entered into UltraVisit.
• UltraVisit, through ALTRUE INC., acts primarily as a Personal Information Processor with respect to patient medical records.
• In certain cases (such as account administration, billing, and platform operations), UltraVisit may act as a Personal Information Controller.

UltraVisit does not claim ownership over patient medical records.

 

5. Data Sharing and Disclosure

Personal and sensitive personal information may be shared only under the following circumstances:

• With authorized users designated by the clinic (e.g., doctors, nurses, clinic staff)
• With third-party service providers (such as cloud hosting, email, or SMS providers) strictly for operational purposes and subject to confidentiality obligations
• When required by law, regulation, or lawful order of government authorities

UltraVisit does not sell, rent, or trade personal or medical data.

 

6. Data Security Measures

UltraVisit implements reasonable and appropriate organizational, physical, and technical safeguards to protect personal and sensitive personal information, including:

• Secure servers and encrypted data transmission (HTTPS/SSL)
• Role-based access controls (e.g., doctor vs. staff access)
• Authentication and account security measures
• Regular system backups
• Access logging and audit trails

While we take reasonable measures to protect data, no system can guarantee absolute security.

 

7. Data Retention

• Patient and clinic data are retained for as long as the clinic maintains an active UltraVisit account.
• Upon termination of service, clinics may request data export, subject to applicable laws and medical record retention requirements.
• Certain information may be retained where required by law or for legitimate business purposes.

 

8. Rights of Data Subjects

In accordance with the Data Privacy Act, data subjects have the right to:

• Be informed about the processing of their personal data
• Access their personal data
• Request correction of inaccurate or incomplete information
• Object to certain forms of processing
• Request erasure or blocking of data, subject to medical and legal retention obligations
• File a complaint with the National Privacy Commission

Requests may be submitted using the contact details provided below.

 

9. Data Protection Officer (DPO)

UltraVisit has appointed a Data Protection Officer to oversee compliance with data protection laws.

Data Protection Officer:
Name: Kent Holden Custodio
Email: kcustodio@altrue.ph
Contact Number: +63 999 223 3504
Company: ALTRUE INC.

The Data Protection Officer of ALTRUE INC. also serves as the Data Protection Officer for UltraVisit, which is operated and powered by ALTRUE INC.

 

10. Updates to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in laws, regulations, or our services. Any updates will be posted on this page, and the “Last Updated” date will be revised accordingly.

 

11. Contact Information

For questions, concerns, or requests relating to this Privacy Policy, you may contact us at:

UltraVisit (Powered by ALTRUE INC.)
Email: official@altrue.ph
Website: https://ultravisit.ph