We, Vascue Limited (“Vascue”, “Company”, “we”, “us”, “our”) are the owners of the website www.vascue.io, the WhatsApp Assistant and AI Claims Assistance (collectively the “Platform”).

The WhatsApp Assistant is an AI-powered tool that automates patient interactions via WhatsApp, handling tasks like clinic introductions, appointment scheduling, service inquiries, and reminders, with multilingual support and integration with systems like Google Calendar.

The AI Claims Assistant is a solution designed to automate insurance claim processes and managing complaints based on system data, aiming to reduce administrative workload and errors.

The Clinical Management System is a comprehensive system offering features like assessment logging with analytical charts, consultation note recording, diagnosis, prescription and billing management, dispensary inventory management, and access to patient records via the Electronic Health Record Sharing System.

We respect data privacy rights and are committed to protecting personal data collected on this Platform. This privacy notice (“Privacy Notice”) sets forth how we collect, use and protect the personal data collected on this Platform.

PLEASE READ THIS PRIVACY NOTICE CAREFULLY. BY CLICKING ON THE CONSENT CHECK BOX, AND BY PROVIDING US PERSONAL DATA, YOU CONSENT TO OUR USE OF YOUR PERSONAL DATA IN ACCORDANCE WITH THE TERMS OF THIS PRIVACY NOTICE. IF YOU DO NOT AGREE TO THIS PRIVACY NOTICE, YOU MAY WITHDRAW YOUR CONSENT OR ALTERNATIVELY CHOOSE NOT TO PROVIDE YOUR PERSONAL DATA ON THE PLATFORM. SUCH AN INTIMATION TO WITHDRAW YOUR CONSENT CAN BE PROVIDED BY EMAIL at privacy@vascue.io.

IF YOU ARE ACCESSING THE PLATFORM ON BEHALF OF A THIRD PARTY, YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND SUCH THIRD-PARTY TO THE TERMS AND CONDITIONS OF THIS PRIVACY NOTICE AND, IN SUCH AN EVENT YOUR USE OF THE PLATFORM SHALL REFER TO USE BY SUCH THIRD PARTY. IF YOU DO NOT HAVE SUCH AN AUTHORITY (TO PROVIDE ANY PERSONAL DATA OF A THIRD PARTY) OR DO NOT AGREE TO THE TERMS OF THIS PRIVACY NOTICE, THEN YOU SHOULD REFRAIN FROM USING THE PLATFORM.

This Privacy Notice is an electronic record in the form of an electronic contract being compliant and construed in accordance with data protection laws of the applicable jurisdictions.

Definitions

• User/s, you, your shall mean and include individuals who visit, access, and/ or use the Platform.
• Customer shall mean and include persons, companies, and entities who have purchased/ subscribed to our services.

Personal Data Collected

For the purpose of this Privacy Notice, Personal Data means any information that can be used to personally identify a person, including but not limited to, as first and last name, home address, billing address, or other physical address, email address and contact number.

We may collect your Personal Data in the following ways:

• Personal Data collected on the Platform: When you sign up or create an account on our Platform, we may collect certain Personal Data, including your first name, last name, email address, phone number, address, city, state, province, postal code and usage data.
• Personal Data collected when you contact us: When you contact us through our Website, write to us on our email address/ WhatsApp, or schedule a Demo of our Platform, we may collect your Personal Data, including name, phone number, email address and any other information that you provide us.
• Payment information: You may elect to pay for the services through our Platform, we may collect certain information such as name and email address to process your request. You will be required to provide certain payment information directly to our payment processing partners, including but not limited to your name, credit/debit card information. We do not access, store or collect your credit/debit card information.
• Personal Data collected for recruitment purposes: We may collect Personal Data from job applicants when they apply for a job at Vascue through the careers page on our website.
• Usage Data: Usage Data may be collected automatically when using the Platform and may include information such as your device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Platform that you visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
• Information from Third Party Social Media Service Providers: We may also collect, store and use your Personal Data when you access social media pages operated by us on Google, Meta, X, and/or LinkedIn.
• Protected Health Information received from Customer(s): For the purpose of this Privacy Notice, Protected Health Information or “PHI” shall mean individually identifiable health information that is:
  • Transmitted by electronic media;
  • Maintained in electronic media; or
  • Transmitted or maintained in any other form or medium.
  We do not intend to collect, use, store, access Protected Health Information in any manner. We may on a limited and case to case basis and/or solely at the discretion of the Customer, be provided access to your Protected Health Information. Such PHI will be governed by the business associate agreement.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on our Platform and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze our Platform. The technologies We use may include:

• Cookies or Browser Cookies. A cookie is a small file placed on your device. You can instruct your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if you do not accept Cookies, you may not be able to use some parts of our Platform. Unless you have adjusted your browser setting so that it will refuse Cookies, our Platform may use Cookies.
• Web Beacons. Certain sections of our Platform and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit Vascue, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on your personal computer or mobile device when you go offline, while Session Cookies are deleted as soon as you close your web browser. We use both Session and Persistent Cookies for the purposes set out below:

Accuracy of information

The User undertakes that he shall be solely responsible for the accuracy, correctness, or truthfulness of the Personal Data shared with us whether of its own or any third party. In the event the User is sharing any Personal Data on behalf of a third person, the User represents and warrants that he has the necessary authority to share such Personal Data with the Company, obtained a written consent from such third party and the Company shall not be responsible for verifying the same. The User understands and acknowledges that such Personal Data shall be subject to the terms and conditions of this Privacy Notice.

Use of Your Personal Data

• to inform you about our services and to respond to your requests;
• for the creation or development of business intelligence or data analytics in relation to the services provided by us;
• to process transactions with you;
• to provide you with a better experience when you access our Platform and to improve the services;
• to process job applications (if you apply for a position with our organization);
• to provide, maintain and manage our Platform;
• to manage your account;
• to manage our relationship with you;
• to communicate with you;
• to send you e-mail newsletters;
• for internal record keeping;
• and to comply with our legal or statutory obligations.

Disclosures

We do not sell, rent, share, distribute, lease or otherwise provide your Personal Data to third parties, without your prior consent. Keeping this in mind, we may disclose your Personal Data in the following cases:

• Affiliates: We may provide your Personal Data to our affiliates to enable them to improve the offerings, provide feedback and respond to their queries.
• Service Providers: We may share your Personal Data with the service providers who work with us in connection with operating the Platform and/ or providing the offerings. All such service providers are subject to stringent confidentiality restrictions consistent with this Privacy Notice.
• Merger or Acquisition: We may transfer your Personal Data if we are acquired by another entity, or if we merge with another company or transfer a part of our business, including the Platform, to a third party. Any such third party or resultant entity that receives your Personal Data shall have the right to continue to use your Personal Data in line with the purposes set out herein. In the event of such a sale or transfer, we may notify you.
• Legal and Regulatory Authorities: We may disclose your Personal Data in order to comply with our legal obligations/ court orders/ requests by Govt. authorities.

Data Retention

We will retain User’s Personal Data as long as it is required to be retained for the purpose of provision of the services. We may also retain and use User’s Personal Data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Security

Your Personal Data is securely stored on trusted third-party cloud infrastructure. We are compliant with ISO 27001 standards. We have implemented robust safeguards, including encryption techniques, to help protect your data. While we maintain strong firewalls and advanced security measures, it's important to note that no system is entirely immune to risks. In the unlikely event of unauthorized access, virus attacks, or technical issues, we are committed to taking prompt and appropriate action to mitigate any impact and ensure continued data protection.

Your Rights

You have the right to access Personal Data in our possession, right to have us rectify or modify any such Personal Data, right to have us erase/delete your Personal Data, right to restrict us from processing such Personal Data, right to object to our use of Personal Data, withdraw consent at any time where we are relying on consent to process Personal Data. Depending on the nature of the request, we may ask you to complete a Personal Data request form or seek certain details to verify the request. All requests for Personal Data will be handled within a reasonable period of time. If you would like to exercise ANY of these rights, please contact us at privacy@vascue.io.

Hong Kong Legal Compliance

As Vascue operates in Hong Kong, we comply with the Personal Data (Privacy) Ordinance (“PDPO”). In accordance with the PDPO, we ensure:

• Collection of personal data is done for lawful purposes directly related to our functions and activities
• Collection of data is necessary, adequate, and not excessive for those purposes
• You are informed of the purpose for which the data is collected and how it will be used
• All practicable steps are taken to ensure personal data is accurate and not kept longer than necessary
• Personal data is only used for the purpose for which the data is collected or for a directly related purpose
• All practicable steps are taken to ensure personal data is protected against unauthorized or accidental access, processing, erasure, loss or use.

Your Rights Under PDPO

Under the PDPO, you have the following rights regarding your personal data:

• Right to be Informed: To receive information about how we collect and use your personal data, whether providing data is obligatory or voluntary, and potential recipients of your data.
• Right of Access: To request access to your personal data that we hold.
• Right of Correction: To request correction of inaccurate personal data.
• Right to withdraw Consent: To withdraw any consent previously given for processing your personal data.
• Right to Opt-Out: To opt out of direct marketing communications.
• Right to Data Erasure: To have your personal data erased when no longer required for the purpose for which it was collected.

To exercise any of these rights, please contact us at privacy@vascue.io.

Choice and Opt-Out

We may send you communications including but not limited to (a) notices about your use of our Platform and services, including those concerning violations of use, (b) updates, (c) promotional information regarding our services, and (d) newsletters. You may opt out of receiving promotional emails and newsletters from us by following the unsubscribe instructions provided in those emails. Alternatively, you can opt out, at any time, by writing to us at privacy@vascue.io with your specific request.

Governing laws

This Privacy Notice shall in all respects be governed by and construed and enforced in accordance with the laws of Hong Kong shall have exclusive jurisdiction to adjudicate any subject matter under this Privacy Notice.

Links to other Websites

Our Platform may contain links to other websites/platforms/applications of your interest. Please note that we do not have any control over such other websites/platforms/applications, and you will be accessing these websites/ platforms/applications at your own risk. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such websites/platforms/applications and those are not governed by this Privacy Notice. You should exercise caution and look at the privacy policy/ notice applicable to such websites/platforms/applications.

Children’s Privacy

Our Platform is not meant for individuals under the age of 18. We do not knowingly collect Personal Data from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 18 without verification of parental consent, we take steps to remove that information from our servers.

If we need to rely on consent as a legal basis for processing your information and your country requires consent from a parent, we may require your parent's consent before we collect and use that information.

Changes To This Privacy Notice

Please revisit this page periodically to stay aware of any changes to this Privacy Notice, which we may update from time to time. If we modify this Privacy Notice, we will make it available through the Platform and indicate the date of the latest revision. If such modifications materially alter your rights or obligations hereunder, we will make reasonable efforts to notify you of the change via email or through our Platform.

Contact Us

If you have any questions or concerns regarding this Privacy Notice, or to exercise your rights, please contact us at privacy@vascue.io.