IMS-POS

Effective Date: May 25, 2026

1. Acceptance of Terms

By accessing and using IMS-POS (Integrated Medical System - Point of Sale), you accept and agree to be bound by these Terms of Service. If you do not agree to these terms, please do not use our services.

2. Description of Service

IMS-POS is a comprehensive healthcare management system that provides:

• Patient management and registration
• Laboratory test management and results processing
• Point of Sale (POS) functionality
• Pharmacy management
• Medical records and reporting
• Multi-tenant facility management

3. User Accounts

To use IMS-POS, you must:

• Create an account with accurate information
• Maintain the security of your account credentials
• Accept responsibility for all activities under your account
• Notify us immediately of any unauthorized access

4. Subscription Plans

IMS-POS offers various subscription tiers:

• Free Tier: Basic features for small facilities
• Pro Tier: Advanced features for medium facilities
• Complete Tier: Full suite for large facilities
• Custom Tier: Tailored plans based on specific needs

Subscription fees are billed monthly. You may cancel your subscription at any time, but no refunds will be provided for the current billing period.

5. Product Key and Access

Upon subscription activation, you will receive a unique product key. This product key:

• Is required for system access and API authentication
• Must be kept confidential and secure
• Cannot be shared with unauthorized users
• Is tied to your subscription and facility

6. Use Restrictions

You agree NOT to:

• Use the service for any illegal or unauthorized purpose
• Violate any healthcare regulations or privacy laws
• Attempt to gain unauthorized access to the system
• Interfere with or disrupt the service
• Share your product key or account credentials
• Reverse engineer or attempt to extract source code

7. Healthcare Compliance

As a healthcare facility using IMS-POS, you are responsible for:

• Compliance with RA 10173 (Data Privacy Act of 2012)
• Compliance with HIPAA regulations (if applicable)
• Maintaining patient confidentiality
• Proper handling of Protected Health Information (PHI)
• Obtaining necessary patient consents

8. Data and Privacy

Your use of IMS-POS is also governed by our Privacy Policy. We implement industry-standard security measures, but you are responsible for:

• Backing up your data regularly
• Maintaining secure access controls
• Training staff on data privacy
• Reporting any security incidents immediately

9. Service Availability

We strive to maintain 99.9% uptime but do not guarantee uninterrupted service. We reserve the right to:

• Perform scheduled maintenance
• Update or modify the service
• Suspend service for violations of these terms

10. Limitation of Liability

IMS-POS is provided "as is" without warranties. We are not liable for:

• Any indirect, incidental, or consequential damages
• Loss of data or business interruption
• Errors or omissions in the system
• Third-party actions or services

11. Termination

We may terminate or suspend your account immediately if you:

• Violate these Terms of Service
• Fail to pay subscription fees
• Engage in fraudulent or illegal activities
• Breach healthcare regulations

12. Changes to Terms

We reserve the right to modify these terms at any time. Material changes will be notified via email. Continued use of the service constitutes acceptance of modified terms.

13. Contact Information

For questions about these Terms of Service, please contact:

IMS-POS Support
Email: support@ims-pos.com
Website: https://ims-pos.com

Effective Date: December 2, 2025
Last Updated: May 25, 2026
Data Privacy Officer: VICTOR
Compliance: RA 10173 (Data Privacy Act of 2012), HIPAA Privacy Rule

1. Data Privacy Officer

Name: VICTOR
Position: Data Privacy Officer
Contact: [Contact Information]

Responsibilities:

• Overseeing data privacy compliance
• Handling data subject requests
• Managing data breach incidents
• Ensuring privacy by design implementation

2. Information We Collect

2.1 Personal Health Information (PHI)

• Demographic Information: Name, date of birth, age, gender
• Contact Information: Email address, phone number, physical address
• Medical Information: Medical history, diagnoses, lab test results, prescriptions
• Financial Information: Payment methods, insurance information, billing records
• Identification: Patient ID, senior/PWD number (if applicable)

2.2 How We Collect Information

• Directly from you during patient registration
• From healthcare providers during consultations
• From laboratory tests and medical procedures
• From billing and payment transactions
• From medical records and prescriptions

3. How We Use Your Information

3.1 Primary Purposes

• Medical Treatment: Providing healthcare services, diagnosis, and treatment
• Billing & Payment: Processing payments, insurance claims, and financial transactions
• Laboratory Services: Processing lab tests, generating results, and medical reports
• Pharmacy Services: Managing prescriptions and medication dispensing
• Medical Records: Maintaining comprehensive medical history and records

3.2 Secondary Purposes (with consent)

• Research: Medical research and quality improvement (de-identified data)
• Marketing: Healthcare-related communications (with explicit consent)
• Analytics: System improvement and service enhancement

4. Data Protection Measures

4.1 Technical Safeguards

• ✅ Encryption at Rest: All PHI encrypted using AES-256 encryption
• ✅ Encryption in Transit: TLS 1.3+ for all data transmission
• ✅ Access Controls: Role-based access control (RBAC) system
• ✅ Audit Trails: Comprehensive logging of all PHI access
• ✅ Secure Authentication: Multi-factor authentication support
• ✅ Session Security: Encrypted sessions and secure cookies

4.2 Administrative Safeguards

• ✅ Privacy training for all staff
• ✅ Regular access reviews
• ✅ Incident response procedures
• ✅ Vendor management and Business Associate Agreements (BAAs)

5. Your Rights (Data Subject Rights)

Under RA 10173 and HIPAA, you have the following rights:

• Right to Access: Request access to your medical records and personal data
• Right to Rectification: Request correction of inaccurate information
• Right to Erasure: Request deletion of your data (subject to legal requirements)
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: Withdraw consent for data processing

6. Data Sharing and Disclosure

We may share your information only:

• With your explicit consent
• For treatment, payment, and healthcare operations
• As required by law or court order
• To prevent serious harm to health or safety
• With business associates under strict agreements

7. Data Retention

We retain your data:

• As long as necessary for healthcare purposes
• As required by law (minimum 7 years for medical records)
• Until you request deletion (subject to legal requirements)

8. Security Breach Notification

In the event of a data breach affecting your PHI, we will:

• Notify you within 72 hours (as required by RA 10173)
• Notify relevant authorities as required by law
• Provide details of the breach and steps taken
• Offer credit monitoring if applicable

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email and posted on our website. Continued use of the service constitutes acceptance of the updated policy.

10. Contact Us

For questions, concerns, or to exercise your rights, please contact:

Data Privacy Officer: VICTOR
Email: privacy@ims-pos.com
Website: https://ims-pos.com/privacy