Skip to main content

    Privacy Policy

    Last Updated: April 10, 2026

    Welcome to Systhetica

    Welcome to Systhetica (the "Platform"). We are committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, and safeguard information in compliance with the Data Privacy Act of 2012 (RA 10173) of the Philippines.

    1. Our Role

    In the context of the Data Privacy Act:

    • Personal Information Controller (PIC): Your Clinic/Business is the PIC. You own and control the personal data of your patients and staff.
    • Personal Information Processor (PIP): Systhetica acts as the PIP. We process data only upon your instruction and through the features provided by our platform.

    2. Information We Process

    To provide our services, we process the following types of information:

    • Account Information: Name, email address, and contact details of clinic administrators and staff.
    • Patient Records: Names, contact information, medical history, skin conditions, treatment plans, and before and after photos uploaded by the Clinic.
    • Communication Data: Email addresses for automated appointment reminders. Mobile numbers are also processed if the Clinic opts to enable the optional SMS reminder feature.
    • Transaction Data: Billing information, appointment schedules, and service history.

    3. Purpose of Processing

    • To maintain and provide the features of the Systhetica platform.
    • To facilitate clinic management, appointment scheduling, and patient charting.
    • To send automated appointment reminders and system notifications.
    • To provide technical support and ensure system security.
    • To comply with legal and regulatory requirements.

    4. Security Measures

    • Encryption: Data is encrypted both in transit (SSL/TLS) and at rest.
    • Access Control: Role-based access ensures that only authorized clinic personnel can view sensitive patient information.
    • Reliable Infrastructure: Clinic data is stored in the cloud on the same class of infrastructure used by major enterprise applications, not on a physical server we maintain.
    • Audit Logs: The system maintains logs of data access and modifications to ensure accountability.

    5. Data Disclosure & Sub-processors

    We do not sell, rent, or share personal data with third parties for marketing purposes. Data is only shared with:

    • Authorized Clinic Personnel: Users within your specific clinic account.
    • Cloud Infrastructure Providers: Secure hosting services that store and protect your data.
    • Communication Providers: Email services used for automated system notifications and reminders.
    • SMS Gateway: If the Clinic enables the optional SMS feature, mobile numbers will be shared with our SMS provider solely for message delivery.

    6. Data Subject Rights

    Under the Data Privacy Act, your patients and staff have the right to:

    • Right to be Informed: To know how their data is being processed.
    • Right to Access: To request a copy of their data.
    • Right to Rectification: To correct inaccurate information.
    • Right to Erasure: To request the deletion of their data, subject to legal retention rules.

    7. Data Retention

    We retain data for as long as your subscription to Systhetica is active. Upon termination of service, we provide a grace period for data export, after which data will be securely deleted or anonymized in accordance with our internal policies and legal obligations.

    8. Contact Our DPO

    For any questions regarding your privacy or to exercise your rights, please contact our Data Protection Officer (DPO):

    Email: privacy@systhetica.com