Notice for account applicants. AMARIX provides tools that therapy centers use to manage clinical services. The operating organization must review this draft, disclose its actual service providers and retention schedule, and publish approved contact details before public registration is enabled.
1. Personal information processed
Center applications may include a business name, contact email, administrator name and authentication information. During clinical use, therapy centers may enter information about children and guardians, diagnoses or therapy needs, treatment plans, appointment attendance, session trial outcomes, clinical documents, messages and, when enabled and authorized, location information. These categories may include sensitive personal information.
2. Purposes and access
Information is processed to provide account access, manage therapy appointments and programs, record clinical progress, communicate with authorized caregivers and administrators, handle required operational records, prevent abuse and maintain service security. Center-specific roles restrict access; each participating therapy center must assign access based on clinical need.
3. Children and guardian authorization
Registering a therapy center is not consent to process any child's clinical records. Therapy centers must obtain and document applicable parent or legal guardian authorization, including any required consent for therapy, data processing, media and optional location features, before entering or sharing child records. Authorized guardians should be told what is collected and who can see it.
4. Service providers, cross-border transfers and security
Operating the service may involve hosting, email delivery, file storage, mobile push notifications, or optional AI providers as configured by the operator. The final policy must identify applicable providers, locations/transfers, security safeguards, incident response contacts and agreements. This draft does not claim that an audit, encryption configuration, or compliance certification has already been completed.
5. Retention, deletion and recovery copies
Clinical and account records should be retained only for documented business, clinical and legal needs. The final policy must state the operator's retention periods and explain how access, correction, deletion requests and encrypted recovery backups are handled, including when records must be retained by law.
6. Individual rights and requests
Individuals and guardians may request information about processing, access, correction, or other rights available under applicable Philippine data protection law. Submit requests through your therapy center administrator or the operator's designated privacy contact.
Privacy contact: The operator must publish a monitored address before launching public services.
7. Changes to this notice
Material changes should be communicated appropriately. The version displayed above is a draft version, not an automatically changing publication date.