Privacy Policy Statement

The following privacy policy governs how Gleneagles collects, uses, communicates, discloses and safeguards your personal information. You may also refer to the Personal Data Protection Notice of our parent company IHH Healthcare Berhad. 

For the purposes of this privacy policy, “Gleneagles” means GHK Hospital Limited and Parkway Medical Services (Hong Kong) Limited and any of their existing and future subsidiaries, hospitals, clinics, medical centres, wellness centres, pharmacies and laboratories. 

Types of Personal Data We Collect
a.            The purposes for which personal information is being collected will be identified before or at the time of collecting it. This may include:

1. 1. identification information such as your full name, date of birth, gender, residential address, correspondence address, telephone number, email address, Hong Kong identity card and/or travel document number, marital status, occupation, employer and the details of your guarantor and emergency contact person;
   2. medical and health information such as your medical history, conditions, symptoms, diagnoses, test results, treatments and medications;
   3. biometric information such as your height, weight, blood pressure, heart rate, photographs, imaging scans, DNA and genetic test results (which may be collected through third party diagnostic or monitoring tools or devices);
   4. financial information such as your credit card details and insurance details; and
   5. browsing information such as your device, IP address, browser type and your preferences when you access or browse our platforms, including our websites, mobile applications and portals.

If you provide the personal data of another person to us (e.g. as a parent/guardian, caretaker, authorized representative or guarantor), you confirm that you have obtained that person’s consent to provide their personal data to us for the purposes stated in this Privacy Policy Statement.

Purposes of Collection

b.　　All personal data collected will be used solely for the purpose for which it was gathered, for purposes directly related, or for one or more of the following purposes:

1. 1. to identify and verify your identity and to register you as a user of our products and services, including our websites, mobile applications and portals;
   2. to assist you in making enquiries, and for service quality control;
   3. to provide you with medical, healthcare or related products, services, treatments and facilities, such as those in relation to appointment booking and reminder, telehealth, diagnosis, healthcare technologies, laboratory and testing, remote health monitoring, hospital admission, our online shop products and services or for other compatible purposes including insurance administration, account management through our facilities or other platforms or tools;
   4. for research purposes, such as data analytics and clinical research and development, as well as clinical teaching and professional training carried out by us jointly with medical, healthcare or educational institutions (e.g. The University of Hong Kong);
   5. billing and payments in connection with your use of our products and services;
   6. subject to your consent, direct marketing purposes as detailed in paragraph m. below;
   7. to make disclosure where required by law or court order; and
   8. any other purposes as may be agreed between you and Gleneagles.
      

c.　　Personal data may also be collected, used, transferred or otherwise processed for one or more of the purposes set out in the Personal Data Protection Notice of our parent company IHH Healthcare Berhad.

Retention and Security

d.　　Gleneagles will only retain personal information as long as necessary for the fulfillment of those purposes, unless the personal data is also retained to satisfy any applicable statutory or contractual obligations. 

e.　　Gleneagles will take practicable steps to ensure that the personal data is accurate having regard to the purpose for which the personal data is or is to be used.

f.　　Computer data are stored on computer systems and storage media to which access is strictly controlled. Where Gleneagles holds, uses, and/or transmits your personal data it will take all practicable steps to ensure the data is protected from accidental and/ or unauthorized access, disclosure, copying, use, destruction or modification.

g.　　Gleneagles may utilise Artificial Intelligence (AI) tools, including an AI note taking tool to record accurately details of discussions between patients and clinician(s) and the outcome of consultations in order to improve accuracy, enhance efficiency and improve the quality of clinical care. The data undergoes a de-identification process to remove personal identifiers and is handled securely with encryption and regular audits to ensure compliance. Please inform your clinician if you do not agree to the use of the tool.

Transfer of Personal Data

h.     All personal data held by us will be kept confidential but Gleneagles may, where such disclosure is for the purposes stated above, provide such information in or outside Hong Kong to:

1. Any entity within Gleneagles and any of their holding companies, associated companies, or affiliates;
2. Any person or company who is acting for or on behalf of any entity within Gleneagles, or jointly with such entity, including medical staff, doctors, consultants, nurses, secondees and student trainees of medical, healthcare or educational institutions (e.g. The University of Hong Kong);
3. Any other person or company who is under a duty of confidentiality to Gleneagles and has undertaken to keep such information confidential, provided such person or company has a legitimate right to such information;
4. Gleneagles ’s dealers, agents, contractors, suppliers and service providers providing services such as laboratories and testing, clinical trials, insurance, payment, debt collection service, logistics, research, data analytics, telecommunication, information service, cloud service, technology service, healthcare technologies, and design and content;
5. Gleneagles’s professional advisers, including its accountants, insurers, auditors and lawyers; and
6. Government and regulatory authorities and other organisations, as required or authorized by law or court order. 
   

Data Access and Correction

k.　　You have the right to ascertain whether Gleneagles holds any of your personal data and, if so, obtain copies of such data, and require us to correct personal data in its possession which is inaccurate. You may request access to and/or correction of your personal data under the Ordinance by sending a written request to our Health Information and Records Department by email (record@gleneagles.hk) subject to a fee as permitted by the Ordinance.

l.　　We will make readily available to customers information about our policies and practices relating to the management of personal information.  

Use of Personal Data in Direct Marketing

m.　　With your consent, Gleneagles may use personal data (including your name, age, gender, contact information and service history with us) for making direct marketing communications (including by post, telephone calls, email, SMS, instant messaging services or mobile application notifications) in relation to the following classes of products and services:

• 1. medical, healthcare (e.g. healthcare technologies, vaccination, screening services), and related products or services such as wellness and aesthetics, and products and services from our retail pharmacies (including online shop); and
  2. promotional and loyalty programmes and offers relating to the above.

In every subsequent direct marketing communication which is made to you, we will offer you the opportunity to opt out of further marketing communications. We will not transfer your personal data to third parties for their direct marketing use without your consent.

Cookies 
n.　　Cookies are small text files stored on your device when you visit our our platforms, including our websites, mobile applications and portals. We use cookies and similar technologies to collect non-identifiable data to enhance user experience, analyse visitor traffic, and for other related purposes. The types of cookies we use include:
•    Essential Cookies: These are necessary for the basic functionality of our platforms, such as maintaining session information and remembering items in the shopping cart.
•    Performance Cookies: These cookies collect information on how users use the website, which helps us improve its performance and functionality.
•    Functionality Cookies: These cookies enable our platforms to remember user preferences and provide contents/features according to those preferences.
•    Advertising Cookies: These cookies display advertisements with reference to  browsing behaviour. 

By using our platforms, you consent to our use of cookies. You can manage your cookie preferences by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of our platforms.

Miscellaneous

o.　　Gleneagles participates in the Hong Kong SAR Government’s Electronic Health System (eHealth). If you are registered or would like to register with eHealth, please refer to the eHealth website (www.ehealth.gov.hk), the eHealth mobile application or call the eHealth enquiry hotline (3467 6300) for details.

p.　　If there is any inconsistency or ambiguity between the English version and the Chinese version of this Privacy Policy Statement, the English version shall prevail.

q.　　Gleneagles reserves the right to amend or modify this policy from time to time without prior notifications. Any changes to this Privacy Policy Statement shall be effective immediately upon posting.

UPDATED February 2026