Personal Information Collection Statement
Last updated: 23 March 2026

This Personal Information Collection Statement (“Statement”) is provided by BCHK Medical Group Limited trading as Alluna Medical (“Alluna Medical”, “we”, “us”, or “our”) in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”).

1. Why we collect your data
We may collect, hold, process, use and disclose your personal data and health-related information for purposes directly related to our services and operations, including:

• patient registration, appointment booking, identity verification and administration;​

• medical assessment, diagnosis, treatment, procedures, prescriptions, follow-up care and continuity of care;

• arranging referrals, laboratory tests, imaging, pharmacy services and other ancillary healthcare services;​

• maintaining medical records and clinic documentation;​

• billing, payment processing, refunds, debt recovery, insurance pre-authorisation, claims and related administration;​

• communicating with you about appointments, reminders, test results, aftercare, safety information and other service-related matters by phone, SMS, WhatsApp, email or post;​

• handling enquiries, feedback, incidents, complaints, quality assurance, risk management and staff training;​

• complying with legal, regulatory, professional, licensing, infection control, public health, audit and reporting obligations;

• protecting your vital interests in urgent circumstances, including contacting your emergency contact where reasonably necessary.​

2. What data we may collect
The data we collect may include:

• your name, title, sex, date of birth, HKID/passport or other identification details;​

• contact details, address, emergency contact details and communication preferences;​

• payment and insurance details;​

• medical history, medications, allergies, past procedures, examination findings, clinical photographs, laboratory or imaging results, referral letters and other health information relevant to your care;

• website, booking and communications data, such as IP address, browser/device information, cookies, enquiry records and call/message logs.​

3. Mandatory or voluntary provision
Some personal data is mandatory for us to register you, verify your identity, provide medical care, maintain proper medical records, process payment, or comply with legal and professional requirements. If you do not provide the personal data marked as mandatory, we may be unable to provide or continue services to you. Other requested data is voluntary, but may help us deliver safer or more tailored care.​

4. Who your data may be shared with
Your personal data may be transferred or disclosed, where appropriate and on a need-to-know basis, to:

• doctors, nurses, allied health professionals, reception, administrative staff and authorised data processors of Alluna Medical;

• laboratories, radiology/imaging centres, pharmacies, hospitals, day procedure centres and other healthcare providers involved in your care;​

• your referring doctor, family doctor or other healthcare professionals involved in your treatment, where relevant;​

• insurers, medical financing administrators, claims handlers or payment service providers for billing and claims purposes;​

• IT, cloud, EMR, payment, communications, cybersecurity, document management and other service providers engaged by us under duties of confidentiality and security;

• government authorities, regulators, law enforcement agencies, courts, tribunals or professional bodies where disclosure is authorised, required, or permitted by law;

• any other person with your prescribed consent or as otherwise permitted under the PDPO.​

5. Data security and retention
We take practicable steps to protect personal data against unauthorised or accidental access, processing, erasure, loss or use, including administrative, technical and physical safeguards. Personal data will be retained only for as long as reasonably necessary to fulfil the purposes for which it was collected, or as otherwise required or permitted by law, professional guidance or legitimate operational needs.

6. Access and correction
You have the right to request access to, and correction of, your personal data held by us in accordance with the PDPO. We may charge a reasonable fee for complying with a data access request as permitted by law.​

Requests should be made in writing to:
Data Privacy Officer / Personal Data Officer
BCHK Medical Group Limited trading as Alluna Medical
Suite 2015A, 20/F, Hang Lung Centre, 2-20 Paterson Street, Causeway Bay, Hong Kong
Email: info@allunamedical.com​

7. Direct marketing
We will not use your personal data for direct marketing unless we have obtained your express and voluntary consent or indication of no objection in the manner required by the PDPO. Your consent is optional, and you may withdraw it at any time by contacting us in writing. Service-related messages about your care, appointments, safety or account are not direct marketing.​

8. Clinical photographs and treatment records
If clinical photographs are taken for identification, assessment, treatment planning, monitoring progress, or inclusion in your medical record, they will be handled as part of your confidential medical record. Any separate use beyond your care and internal clinical documentation, such as education, publication or marketing, will require separate consent where applicable.

9. Website and online enquiries
If you use our website, online forms or social media channels, we may also collect technical and usage information through cookies and similar technologies. Please also refer to our Privacy Policy and Cookie Notice on our website