The Harley Street Vascular Centre

Last Updated: 26 Aug 2026

Introduction

The Harley Street Vascular Centre operates under Harley Street Holdings Pte. Ltd. and its subsidiaries (“Harley Street,” “we,” “us,” or “our”), part of the Health Management International group of companies. We are committed to protecting the personal data of our patients, website visitors, and enquirers in accordance with the Personal Data Protection Act 2012 (“PDPA”) and other applicable healthcare regulations in Singapore, including the Private Hospitals and Medical Clinics Act and the Healthcare Services Act.

This Privacy Policy explains what personal data we collect, how we use it, who we may share it with, and the choices available to you. By using our website at vascular.harleystreet.sg or engaging our clinical services, you acknowledge that you have read and understood this Policy. This Policy supplements any other consents you may have previously given us regarding your personal data.

What Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data.

• Identification details, such as your name, NRIC, passport or other identification number, date of birth, mailing address, and contact information.
• Health and medical information, including information relating to your physical or mental health or condition, medical history, diagnosis, treatment records, and clinical notes related to your care under our vascular specialists.
• Insurance and billing information, including insurer or corporate client details and claims data.
• Enquiry details submitted through our contact form, email, phone, or WhatsApp, including screening, media, or general enquiries.
• Images captured by CCTV within our premises, or photographs and videos taken at our events, where applicable.
• Technical data collected through our website, such as IP address, browser type, and browsing behaviour, typically gathered through cookies.

We collect NRIC or other national identification numbers only where required by law or necessary to accurately identify a patient for clinical purposes. If you submit personal data relating to a third party, such as a family member, you represent that you have obtained their consent for us to collect, use, and disclose that data for the purposes set out in this Policy.

How We Use Your Personal Data

Personal data collected by Harley Street may be used to:

• Provide consultation, diagnosis, and treatment for vascular conditions, including screening, circulation lab tests, and surgical and minimally invasive procedures.
• Facilitate and provide reminders for appointments, process admissions, and provide follow-up care.
• Coordinate care with other specialists, clinics, hospitals, or medical institutions involved in your treatment.
• Process billing, insurance claims, and payment matters, including administering insurance coverage with your insurer or corporate client where applicable.
• Respond to enquiries submitted through our website, phone, or messaging channels.
• Maintain medical records in line with regulatory retention requirements.
• Conduct market research and analytics to improve our service offerings, where permitted.

Comply with legal and regulatory obligations, including reporting requirements under applicable health legislation, and assist relevant authorities with investigations where required.

We will only use your personal data for purposes that a reasonable person would consider appropriate in the circumstances, and for which we have obtained consent, unless an exception under the PDPA applies.

Consent

By providing your personal data to us, whether in person, over the phone, or through our website, you consent to our collection, use, and disclosure of that data for the purposes described in this Policy. You may withdraw consent at any time by contacting our Data Protection Officer, subject to legal or contractual restrictions. Withdrawing consent may affect our ability to continue providing certain services to you, and we will explain the likely consequences before acting on your request. Even where you withdraw consent to marketing communications, we may still contact you for matters relating to services you have requested.

Disclosure of Personal Data

We do not sell personal data. We may disclose personal data to third parties in limited circumstances, such as:

• Other entities and affiliates within the Harley Street and Health Management International group, including their medical, nursing, and allied health staff involved in your care.
• Third-party specialists, clinics, hospitals, or medical institutions involved in your treatment.
• Insurance providers and corporate clients, for claims processing.
• Regulatory bodies and government authorities, where required under Singapore healthcare legislation or a court order.
• Vendors, agents, contractors, or third-party service providers who support our clinic operations, such as IT, billing, and administrative vendors, under confidentiality obligations.

Where personal data is transferred outside Singapore, including to other members of the Harley Street or Health Management International group, we take reasonable steps to ensure it receives a standard of protection comparable to that required under the PDPA.

Data Protection and Security

We adopt appropriate administrative, physical, and technical measures to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, leakage, loss, damage, or similar risks. While we take reasonable care to safeguard personal data, no method of transmission or storage can be guaranteed as completely secure, and we will not be responsible for unauthorised use of your personal data by third parties wholly attributable to factors beyond our control.

Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required under applicable healthcare recordkeeping regulations and professional obligations. Medical records may be retained for a longer period where they may reasonably be consulted for your future care, even where there is no current indication that you will return for further consultation. Personal data relating to insurance claims is retained for the period required under regulatory requirements.

Access and Correction Requests

You may request access to, or correction of, your personal data held by us. To make such a request, please contact our Data Protection Officer using the details below. We will respond within a reasonable timeframe and may verify your identity or charge a minimal fee before processing your request. Certain requests may be declined where permitted under the PDPA, in which case we will inform you in writing of the reasons.

Cookies and Website Usage Data

Our website may use cookies, web beacons, and similar technologies to support functionality, improve performance, and understand general visitor patterns. You can adjust your browser settings to limit or block these technologies, though this may affect certain website features.

Third-Party Links

Our website, including our resources and blog sections, may contain links to third-party websites for informational purposes. We are not responsible for the privacy practices or content of external sites, even where they may be co-branded with our name, and we encourage you to review their respective privacy policies.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. Continued use of our website or services after such changes constitutes acceptance of the revised Policy.

Contact Us

If you have questions, feedback, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer:

The Harley Street Vascular Centre
Gleneagles Hospital
Annexe Block #02-38/41
6A Napier Road
Singapore 258500

Phone: +65 6472 0503
WhatsApp: +65 8822 8164
Clinic enquiries: circulation@harleystreet.sg

For general information on personal data protection in Singapore, you may also refer to the Personal Data Protection Commission at pdpc.gov.sg.