Skip to content

Legal

Privacy Policy

Last updated: June 9, 2026

Sandbox Clinic, operated by Sapphire Clinics East, Inc. (SCEI), respects your privacy and is committed to protecting your personal information in accordance with the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

1. Information We Collect

We collect only the personal information necessary to serve you. When you book a session or apply for HMO coverage, this typically includes your name, contact number, email address (optional), preferred branch and service, schedule, and any notes you choose to share, as well as HMO provider and member ID where relevant.

2. How We Use Your Information

We use your information to process and confirm bookings, coordinate your care, verify HMO eligibility and benefits, communicate with you about your sessions, maintain records, and improve our services. We do not sell your personal information.

3. Legal Basis and Consent

We process your personal information based on your consent, the performance of services you request, our legitimate interests in operating the clinic, and compliance with legal obligations. You may withdraw consent at any time, subject to legal and contractual limitations.

4. Sharing and Disclosure

We may share your information with accredited HMO partners (to verify and process coverage you request), trusted service providers acting on our behalf under confidentiality obligations, and government authorities where required by law. We require all such parties to protect your data.

We use reputable technology sub-processors to run this website and securely store data — including cloud hosting, a managed database, error monitoring, and abuse-prevention (rate-limiting) services. Some process limited data on servers outside the Philippines (including Singapore and the United States). We remain accountable for your information and require these providers to maintain appropriate safeguards.

5. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described here, to comply with legal, regulatory, and clinical record-keeping requirements, and to resolve disputes. When no longer needed, information is securely disposed of.

6. Data Security

We implement reasonable organizational, physical, and technical measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Access is limited to authorized personnel on a need-to-know basis.

7. Your Rights

Under the Data Privacy Act, you have the right to be informed, to access and obtain a copy of your data, to correct inaccurate data, to object to or restrict processing, to erasure or blocking under certain conditions, to data portability, and to lodge a complaint with the National Privacy Commission. To exercise these rights, contact our Data Protection Officer below.

8. Cookies and Analytics

This website uses only the cookies and similar technologies needed for basic functionality and to understand site usage in aggregate. You can control cookies through your browser settings.

9. Children's Privacy

We provide care to minors through their parents or legal guardians. Where we collect a minor's information for therapy, we do so with the consent and involvement of a parent or guardian.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The Last updated date above reflects the latest version. Material changes will be communicated through this page.

11. Contact and Data Protection Officer

For privacy questions or to exercise your rights, contact our Data Protection Officer at info@thesandboxclinic.com.