Privacy Policy

The Personal Data Protection Act 2010 (the “Act “) regulates the processing of personal data in all direct and incidental commercial transactions and it is applicable to KLINIK DR CHONG SDN BHD, (1178163-H) including its affiliates and subsidiaries (“KDC”).At KDC, we view your privacy as our top priority and we are committed to protect your privacy in accordance with the Act. This Notice explains the collection and utilisation of data, accountability, and responsibility.

This Privacy Notice is issued to all customers, employees and third party service providers of KLINIK DR CHONG SDN BHD pursuant to the Personal Data Protection Act 2010.

NOTICE REGARDING PERSONAL DATA PROTECTION ACT 2010

(issued on 1 September 2022)

COLLECTION OF PERSONAL DATA

We may collect personal data about yourself, including but not limited to the following:-

Personal information: full name, age, gender, date of birth, race, passport or identity card number, nationality, religion, marital status, medical history, heath information;
Contact information: mailing address, telephone number, mobile phone number, fax number and email address;
Payment information: debit or credit card information, including the name of cardholder, card number, mailing address, expiry date and other bank account details;
Image and photograph: Recording of your image and photograph via CCTV cameras installed at our premises, during any of our events, third party events and for medical records purposes; and
Miscellaneous: Other information that we may

METHOD OF DATA COLLECTION

We may collect personal data either from you, your authorized representatives, third parties, or any publicly available sources which may include but not limited to the following:-

Registration form, consent forms, purchase forms or any other forms that you or your representative fill in at our premises;
When you contact us in person, by a phone call, email or letter and over the counter;
Any surveys, questionnaires, competitions, contests, offers, or promotions done by KDC or via an appointed third party
Any third parties connected with you such as your employer/ potential employer, agents, insurance companies, other healthcare facilities/ providers;
Your visit at any of our premises;
Your attendance at any of our events or events organised by third party;
From our websites;
Job application and interview;
From your interaction with us via social media or interactive applications including but not limited to Facebook, Twitter, Instagram, Xiao Hong Shu and etc.; and
From such other sources where you have given your consent for the disclosure of personal data relating to you, and/or where otherwise lawfully permitted.

Use of Personal Data Collected

Purposes for which data may be used and/or processed are as follows:-

To ensure continuity of treatments at our premises;
To register and verify your identity;
To contact you regarding appointment details;
To engage in business transactions in respect of services to be offered and provided to you;
To inform you of the benefits and to update you of the changes to the services;
To provide and improve our services to you including fulfilling audit requirements and facilitating payments;
To respond to any enquiries, complaints, comments or feedbacks that you have submit to us;
To facilitate and process payments;
To institute debt recovery proceedings against defaulters;
To submit relevant forms, licenses and any information required to the regulatory authorities;
To transfer or assign our rights, interests and obligations under any of your agreements with us;
To update, consolidate and improve the accuracy of our records;
To manage medical records and medical reports;
To administer services, competitions, contests, offers, promotions, campaigns, events and etc.;
To conduct research, analysis and improvement;
To engage in business transactions in respect of services to be offered and provided to you;
To comply with any legal or regulatory requirements under the applicable laws, regulations, guidelines or codes of practice;
For internal management of the services being provided to you;
To maintain records required for security, claims or other legal purposes;
To provide internal training for our staff; and
For any other purposes that is required or permitted by any law, regulations, guidelines and/or relevant regulatory authorities.

Disclosure of Personal Data

Data held by us relating to an individual will be kept confidential but we may provide or disclose such information to the following parties (whether within or outside Malaysia):-

Affiliates and subsidiaries of KDC;
Relevant third parties (in or outside of Malaysia) as required under law, pursuant to relevant contractual relationship or for the purposes stated above;
Federal or state government
Law enforcement agencies
Government agencies
Our regulators
Companies or organisations that act as our agents, contractors, service providers or professional consultant
Companies or organisations that assist us in processing and/or otherwise fulfilling transactions and providing you with services that you have requested
Our business associates and other parties for purposes that are related to the purpose of collecting and using your personal data
Other parties in respect of whom you have given your express or implied consent
Any credit reporting agencies or in the event of default, any debt collection agencies subject to the permitted law applicable to us.

Your Rights to Access and Correct Your Personal Data

You may at any time request to obtain information, correct/update your personal data, withdraw your consent and/or limit the processing of your personal data. If you have any queries relating to this Notice or otherwise relating to misuse or suspected misuse of your personal information, you may email us at [email protected], the officer in charge shall attend to you.

Miscellaneous

By submitting your personal data to us, you consent to the use of that personal data as set out in this Notice. If you provide us with any personal data relating to a third party (e.g. information of your spouse, children, parents, and/or employees), you represent to us that you have obtained the consent of the third party to provide us with their personal data for the purposes as listed below.

Data Retention

We believe you should have full control over your personal information. This section explains what happens to your data afterward.

Data Retention Period

We do not keep your data longer than necessary. Our retention logic follows these timelines:

Personal Profile (Name, Email) will be deleted Immediate (within 30 days). Permanent removal from active servers.
Transaction Records will be kept for up to 7 years. Required by law for tax and audit purposes.
Customer Support Logs will be kept for 2 years. To resolve ongoing disputes or quality assurance.

Should there be any changes or amendments to this Notice, an amended version will be issued on this page. Continued use of the service will signify that you agree to any such changes.