Privacy Notice

Last updated: May 30, 2026

1. Who we are

Hummingbirds for Homme is a private medical clinic located at Unit 204, 1409 P. Ocampo Ext., Brgy. San Antonio, Makati City, Metro Manila. For the purposes of the Data Privacy Act, we act as the Personal Information Controller (PIC) for all data collected through our website, our clinic, and our communication channels.

2. Information we collect

Depending on how you interact with us, we may collect:

• Identifying information: name, age, gender, contact number, email address.
• Sensitive personal information (as defined by the Data Privacy Act): health and medical history, sexual and reproductive health information, lifestyle factors relevant to clinical assessment, and information you voluntarily provide through our online assessments or contact forms.
• Booking and consultation records: appointment history, treatment notes, clinical assessments, prescriptions, and follow-up plans.
• Technical information: browser type, IP address, pages visited, and similar data captured by our website's analytics — used only in aggregated form.

3. Why we collect it (purpose & lawful basis)

We collect and process your information for the following purposes:

• To provide clinical assessment, treatment, and continuity of care (lawful basis: provision of medical care under the Medical Act).
• To respond to your inquiries through our website forms, WhatsApp, Viber, phone, or Instagram (lawful basis: your consent to be contacted).
• To send appointment confirmations and reminders (lawful basis: legitimate interest in service delivery).
• To generate and securely deliver a personal copy of your completed self-assessment, if you choose to take one (lawful basis: your explicit consent within the assessment form).
• To comply with our regulatory obligations to the Department of Health, the Philippine Food and Drug Administration, and the Professional Regulation Commission.
• To improve our services through anonymized analysis (lawful basis: legitimate interest, with appropriate safeguards).

4. How we store and protect your information

Clinical records are stored in encrypted form on secure systems accessed only by authorized members of the care team. Paper records, where used, are stored in locked, access-controlled cabinets within the clinic.

Communications you initiate through third-party platforms (WhatsApp, Viber, Instagram, Facebook, email) are subject to those platforms' own privacy policies and security standards. We recommend you do not send sensitive medical details through these channels and instead share them in person during your consultation.

5. Who we share it with

We do not sell, rent, or trade your personal information. We share it only:

• With members of the care team directly involved in your treatment.
• With laboratory, imaging, or specialist partners — only as required for your care, and only with your knowledge.
• With third-party data processors (for example, secure cloud storage providers, email or appointment-reminder services) operating under written confidentiality and data-protection agreements that meet the standards of the Data Privacy Act.
• Where required by Philippine law, court order, or lawful regulatory request.

We will never share or distribute intimate images, video, or sensitive sexual-health information for any purpose other than your care. Doing so is criminal under RA 9995 (Anti-Photo and Video Voyeurism Act) and RA 10175 (Cybercrime Prevention Act), and is contrary to our core ethics.

6. How long we keep your information

We retain clinical records for the period required by Philippine medical records regulations (typically 15 years from the last consultation, or longer where indicated by professional guidelines). Non-clinical website inquiries are retained for up to 24 months unless you ask us to delete them sooner.

7. Your rights

Under the Data Privacy Act, you have the right to:

• Be informed about the processing of your personal information.
• Access your records and obtain a copy.
• Correct or update inaccurate information.
• Object to or restrict certain processing.
• Erase or block personal data that is incomplete, outdated, false, unlawfully obtained, or used for unauthorized purposes — subject to limitations required by clinical record-keeping laws.
• Be informed of and obtain a copy of your data in a structured format (data portability).
• File a complaint with the National Privacy Commission if you believe your rights have been violated.
• Be compensated for damages caused by inaccurate, false, or unlawfully obtained personal information.

8. Cookies and website analytics

We do not use cross-site advertising trackers or marketing pixels, and we do not sell or share your browsing data with advertisers. You can disable cookies at the browser level without losing access to clinical content.

To understand how visitors find and use the site, we use Google Analytics 4, a web-analytics service provided by Google. It uses cookies and similar identifiers to produce aggregated, statistical reports (for example, which articles are read most and whether visitors arrived via search, social media, or a direct link). We have enabled IP-address anonymisation, and these reports are not used to identify you personally. This processing rests on our legitimate interest in maintaining and improving the website, with appropriate safeguards, consistent with the Data Privacy Act. Google processes this data as a separate controller under its own privacy policy; you can opt out across all sites using Google's opt-out browser add-on.

Our website is hosted and delivered through Cloudflare, which processes limited technical data (such as IP address and request information) to serve pages securely and protect against abuse. Inquiry-form submissions are delivered by email to our clinical team so we can respond to your request.

9. Children's privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect information from individuals under 18 without parental or guardian consent. If you believe we have inadvertently collected such information, please contact us so we can delete it.

10. Updates to this notice

We may update this Privacy Notice from time to time. Material changes will be reflected in the "Last updated" date at the top of this page. We encourage you to review this notice periodically.

11. Contact us · Data Protection Officer

If you are not satisfied with our response, you may lodge a complaint with the National Privacy Commission of the Philippines.

This Privacy Notice has been drafted in plain language to be readable by patients. It should be read together with our Terms of Service and Patient Confidentiality statement.