Privacy Policy

1. Introduction

Suami Sihat Clinic & Wellness (“Suami Sihat”, “we”, “our”, or “us”) is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA). This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our clinic, wellness centre, website, booking system, or when you engage with any of our health and wellness services. By accessing or using our services, you consent to the processing of your personal data as described in this Policy.

2. Information We Collect

We collect personal information such as your name, identification number, phone number, email address, and residential or mailing address for identification and communication purposes. For clinical and wellness services, we also collect relevant health information, including medical history, symptoms, health complaints, screening results, laboratory reports, diagnostic findings, prescriptions, treatment notes, and wellness assessment records. Additionally, we process data related to your appointments, service usage, and interactions with our practitioners. For administrative and financial matters, we collect payment details, invoices, and transaction records. When you access our website or booking platforms, technical information such as IP address, device details, browser type, cookies, and analytics data may also be collected.

3. How We Use Your Information

Your personal data is primarily used to provide clinical, wellness, physiotherapy, and consultation services, including conducting assessments, maintaining treatment records, managing bookings, sending reminders, and following up on your health progress. We also use your information to process payments, prepare invoices, and support customer service interactions. Internally, your data helps us improve treatment quality, enhance customer experience, and optimise our operations. Where permitted and with your consent, we may send service updates, promotions, or health-related communication. We also process data to comply with regulatory, legal, and audit obligations.

4. Disclosure of Information

We do not sell, rent, or trade your personal data. However, your information may be shared with authorised third parties when necessary to support the services we provide. These include licensed medical practitioners, wellness consultants, external laboratories, payment gateway providers, IT service providers, cloud or CRM platforms, logistics partners, and legal or regulatory bodies when required by law. All third parties are bound by confidentiality obligations and may access your data only for legitimate and authorised purposes.

5. Cookies and Tracking Technologies

Our website and online systems may use cookies and similar technologies to enhance user experience, improve website functionality, analyse usage behaviour, and deliver relevant content or recommendations. Cookies help us understand how you interact with our platform and allow us to tailor our services accordingly. You may disable cookies through your browser settings; however, certain features of the website may not function optimally if cookies are disabled.

6. Data Security

We implement strict security measures to protect your personal data, including SSL encryption, restricted staff access, secure digital storage systems, and internal data protection protocols. While no method of transmission or storage is completely secure, we take reasonable and industry-standard precautions to safeguard your data against loss, misuse, unauthorised access, modification, or disclosure.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Medical records are kept for a minimum of seven years in accordance with clinical and regulatory standards. Financial records, including invoices and payment documentation, are retained for seven years for compliance and audit requirements. General customer data is retained for as long as required or until an account is deleted or no longer needed.

8. Your Rights

Under the PDPA, you have the right to access your personal data and request corrections if any information is inaccurate or incomplete. You may also request to withdraw consent for certain types of processing, subject to legal and operational limitations. In addition, you may request deletion of non-essential data or limit the processing of your information for marketing purposes. All requests may be submitted to our appointed Data Protection Officer.

9. Third-Party Links

Our website or communications may contain links to third-party websites. We are not responsible for the privacy practices, security measures, or content of external websites, and encourage users to review their respective privacy policies.

10. Contact Information

If you have any questions regarding this Privacy Policy or how your personal data is processed, you may contact Suami Sihat Clinic & Wellness at [email protected] or through the contact details provided on our official website.