Privacy Policy.

1. Introduction

AARO operates the website at aaro.sg and provides specialist radiation oncology and cancer care services in Singapore. We are committed to protecting your privacy and handling your personal data responsibly, in accordance with the Singapore Personal Data Protection Act 2012 (PDPA) and applicable medical confidentiality obligations.

This Privacy Policy applies to personal information collected through our website, in our clinics, by phone, and through any other interaction with AARO.

2. Information we collect

Depending on your interaction with us, we may collect:

• Contact information — name, phone number, email address, postal address.
• Identification information — NRIC / FIN / passport number, date of birth, nationality (where required for medical records or insurance claims).
• Medical and health information — medical history, imaging, pathology reports, treatment records, medication lists, and other clinically relevant information.
• Insurance and billing information — insurance plan details, MediShield Life / Medisave information, payment information.
• Website usage data — IP address, device type, browser type, pages visited, referring URL, and similar information collected via cookies and analytics tools.
• Correspondence — records of communications with our clinic, including via email, phone, WhatsApp, and our website forms.

3. How we use your information

We use your personal information to:

• Provide medical assessment, diagnosis, treatment, and follow-up care.
• Communicate with you about appointments, treatment plans, and clinical matters.
• Process payments and submit insurance and government-subsidy claims.
• Coordinate with your other healthcare providers (e.g., referring physicians, pathology labs, imaging centres).
• Comply with our legal, regulatory, and professional obligations under Singapore law.
• Improve our services, including through internal audits and quality reviews.
• Respond to your enquiries and feedback.

4. Disclosure of your information

We may disclose your personal information to:

• Other healthcare providers involved in your care, with your consent.
• Insurers, the Ministry of Health, the Central Provident Fund Board, and other government agencies for claims processing and statutory reporting.
• Trusted third-party service providers who support our operations (e.g., laboratory partners, IT and payment processors), under confidentiality and data protection obligations.
• Regulators, law enforcement, courts, and other bodies, where required by law or to protect our rights or the safety of others.

We do not sell your personal information to any third party.

5. Cookies and analytics

Our website uses cookies and similar technologies to operate effectively, remember your preferences, and analyse how visitors use the site. You can control cookies through your browser settings. Disabling cookies may affect site functionality.

6. Data security

We implement administrative, technical, and physical safeguards to protect personal data against unauthorised access, disclosure, alteration, and loss. These include access controls, encryption of medical records in transit and at rest, staff training, and regular security reviews.

7. Data retention

We retain medical records for the period required under Singapore healthcare regulations (currently a minimum of 6 years from the last patient interaction, or longer for paediatric or specific case types). Other personal data is retained only for as long as necessary for the purposes for which it was collected, and as required by law.

8. Your rights

Under the PDPA, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw your consent to our use or disclosure of your personal data, subject to legal and contractual restrictions.

To exercise these rights, contact our Data Protection Officer (see Section 10).

9. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the current version. Material changes will be communicated via our website or directly to you where appropriate.

10. Contact us

For privacy questions, requests, or complaints, contact our Data Protection Officer:

Asian Alliance Radiation & Oncology Pte Ltd
Centre for Stereotactic Radiosurgery
19 Adam Road, Crawfurd Hospital, Basement 1
Singapore 289891

Email: dpo@aaro.sg
Phone: +65 8102 3838