Data Protection

Privacy Policy

Effective Date: September 29, 2026 | Compliant with Republic Act No. 10173 (Data Privacy Act of 2012)

Last Updated September 29, 2026 RA 10173 Compliant

1 Introduction

Welcome to SecuRx. We are committed to protecting your personal and medical data. This Privacy Policy outlines how we collect, process, cryptographically secure, and store your information when you use our decentralized prescription network. By accessing the SecuRx portal, you consent to the practices described in this document.

2 Information We Collect

  • Medical Practitioners: Professional License Numbers (PRC), clinic affiliations, and digital signature data for identity verification.
  • Patients: Name, contact information, known allergies, and active prescription records linked to dynamic UUIDs.
  • Clinic Admins: Dispensing logs, terminal access locations, and override justification notes.

3 Cryptographic Data Handling

SecuRx does not distribute raw medical files over unverified channels. Instead, prescriptions are converted into a mathematically secure Universally Unique Identifier (UUID). The QR code provided to the patient contains only this encrypted identifier. Medical details are only decrypted and displayed when a verified clinic admin scans the code within our secure, authenticated portal.

4 Drug Utilization Telemetry

To prevent medication hoarding and abuse, SecuRx actively logs dispensing timestamps and refill counts. This telemetry is shared strictly between partnered clinics via the DUR engine to enforce "Max Refill" limits established by the prescribing physician.

5 Data Retention & System Audits

All prescription state changes (generation, scanning, dispensing, revocation) are recorded in an immutable ledger by the System Administrator. Data is retained for the period legally required by the Department of Health (DOH) before being securely archived or purged from active databases.