PERSONAL DATA PROTECTION NOTICE AND PATIENT CONSENT

In compliance with Law on Personal Data Protection No. 91/2025/QH15 (effective from 1 January 2026), Family Medical Practice HCMC Joint Stock Venture (“FMP HCMC”) is committed to protecting the privacy, confidentiality, and security of patient’s personal data, including sensitive health-related information.

You confirm that all information You have provided, or will provide, to FMP HCMC in the course of our relationship is lawful, true, accurate, complete, and up to date at the time it is provided.

You understand, agree and consent that the personal data that has been, is and will be provided may be sensitive personal data.

1. Personal Data Collection

In order for FMP HCMC to provide medical services, FMP HCMC may need and require to collect personal data where relevant and lawful, including:

(I) Basic Personal Data includes information that identifies the patient and is necessary for administrative, operational, and service-related purposes, including but not limited to: Full name, date of birth, gender, nationality, passport number or other valid identification, residential address, telephone number and email address, emergency contact details, insurance policy information, appointment and visit records, billing and payment information.

(II) Sensitive Personal Data will be processed strictly for lawful and medical purposes including but not limited to medical records and clinical notes, diagnoses, treatment plans, prescriptions, medical advice, test results, vaccination records, medical history, health history, emergency and ambulance service records.

FMP HCMC may collect these personal data directly or indirectly from Third Party Sources which are necessary to complete the services provided by FMP HCMC, or sources which collection are required or permitted by laws.

FMP HCMC will be, depending on the situation, the (I) controller of the personal data or the (ii) controller and processor of the personal data.

2. Purpose of Data Collection and Processing

By signing this form, or using our medical services, you understand, acknowledge and consent that FMP HCMC will collect, use, store, and process your personal data, including sensitive personal data related to health, for one or more of the following purposes:

➢ Verify the accuracy and completeness of the information you provided verbally, internet or any other form.
➢ Medical consultation, diagnosis, treatment, and follow-up care.
➢ Appointment scheduling and patient administration.
➢ Billing, invoicing, and payment processing.
➢ Insurance eligibility verification, claims submission, and reimbursement.
➢ Compliance with legal, regulatory, medical, and public health obligations.
➢ Internal reporting, quality assurance, and operational management.
➢ Prevent or reduce a threat to life, health, honor, dignity of yourself or others.
➢ For any other purpose required by law, regulation, guideline and/or Competent Authorities.
➢To respond to emergencies.

Only personal data that is necessary, lawful, relevant and proportionate will be collected and retained in accordance with applicable laws.

3. The transfer and disclose of personal data

You explicitly consent and agree that your personal data may be shared and transferred, where necessary and lawful, with:

➢ Any Clinic and/or Department part of the Family Medical Practice Group.
➢ Local and international insurance companies.
➢ Authorized third parties such as laboratories, referral hospitals, IT providers, auditors, and regulators as needed for the purpose of the collection of the data.
➢ Competent authorities where required by Vietnamese law.

4. International Transfer of Personal Data

In order to fulfill the purposes of processing personal data FMP HCMC your be required to provide/share your personal data to a Third Party that may be located in Vietnam or in any other location outside the territory of Vietnam.

When providing/sharing personal data abroad, FMP HCMC will require the third party to ensure that your personal data will be confidential and secure. FMP HCMC will ensure that transfer of personal data is in compliance with Law No. 91/2025/QH15, including appropriate safeguards.

5. Data Protection Measures

FMP HCMC The Company has implemented the necessary security measures to ensure the proper and confidential use of your data, in accordance with Law No. 91/2025/QH15.

6. Rights

Patient have the right to (I) be informed about personal data processing (ii) access and request copies (iii) request correction or updating (iv) withdraw consent where legally permitted (v) request deletion or restriction subject to legal requirements.

The above mentioned rights may be exercised at our registered office in HCM, Hanoi, Da Nang, or Care1.

Withdrawal of, your consent must be done in writing and may affect the ability of FMP HCMC to continue providing services or billing properly.

FMP HCMC will, in its reasonable endeavors, execute a lawful and valid request of your rights. FMP HCMC has the right to invoke any exemptions or exceptions as permitted by law.