Healthscape Website Privacy Policy

In conducting our business, we, Healthscape Sdn. Bhd. may collect, use, disclose or otherwise process Personal Data relating to you.

This Privacy Policy sets out how we comply with our obligations under the Personal Data Protection Act 2010 of Malaysia (“PDPA”).

Please read the following carefully to understand our views and practices regarding your Personal Data, and how we will treat such Personal Data.

In this Data Privacy Policy, “Personal Data” refers to any data, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which we have or are likely to have access, including data in our records as may be updated from time to time.

By visiting our website or using our services, you are accepting and agreeing to our practices described in this Privacy Policy

1. COLLECTION AND PROCESSING OF PERSONAL DATA

a) We may collect Personal Data (which may include sensitive Personal Data) when you provide it to us. Generally, we collect Personal Data in the following ways:

When you submit any form, including but not limited to consent and order forms, as well as customer inquiry forms or other forms relating to any of our services;
when you enter into any agreement or provide documentation or information in respect of your interactions with us, or when you use our services;
when you interact with our staff, either directly or indirectly through referral intermediaries (for example, the doctors, nurses or customer service officers at hospitals or at any medical institutions) via telephone calls (which may be recorded), letters, fax, face-to-face meetings and emails;
when you request that we contact you or request that you be included in an email or other mailing list;
when we seek information about you and receive your Personal Data in connection with us, including our services, for example, from business partners, public agencies, referral intermediaries and the relevant authorities; and/or
when you have chosen to provide or submit your Personal Data to us.

Examples of such Personal Data you may provide to us include (depending on the nature of your interaction with us) your name and identification information such as your National Registration Identification Card (NRIC) number, passport or other identification), contact information such as your address, email address or telephone number, nationality, gender, date of birth, marital status, photographs and other audio-visual information, and any other information which you have provided us (including financial information such as credit card numbers, debit card numbers or bank account information), in any forms you may have submitted to us, or via other forms of interaction with you.

b) If you provide us with any Personal Data relating to a third party (e.g. information of your spouse, children and/or parents), by submitting such information to us, you represent to us that you have obtained the consent of the third party to provide us with their Personal Data for the respective purposes.

c) We may also use various technologies on our websites which may lead to information being automatically collected and stored by us, including device-specific and other technical information about your mobile or computer device such as the hardware model, operating system version, browser type and version, Internet Protocol (IP) address, advertising identifier, unique application identifiers, unique device identifiers, browser type, language, wireless network, and mobile network information. This information does not generally, but may, contain your Personal Data, and we, and our data intermediaries, do not use such information to identify you unless permitted by law.

We use cookies on our website, which are small text files that a website stores on your PC, telephone or any other device with information on your navigation on our website, whose principal objective is to improve your experience on our website, track use of the website and to provide us subsequently with aggregated information that are either necessary for the functioning of our services, help us improve our performance or serve to provide you with extra functionalities. By default, cookies are enabled on web browsers but if you prefer, you may disable the use of cookies in your browser and delete the cookies saved in your browser associated with our website.

2. PURPOSES OF USE

a) All Personal Data and other information collected may be used by us for any of the following purposes:

providing customer service and support (including but not limited to customer relationship management, processing and settlement of bills, and contacting you regarding your reports and results);
responding to, handling, and processing your enquiries or requests pursuant to your emails, telephone calls, faxes and/or submission of form(s);
responding to and taking follow-up action on feedback or complaints;
troubleshooting crashes associated with specific hardware and software used to access our website;
monitoring and tracking your usage of our website, in order to assist us in understanding user behaviour, trends and preferences;
managing our administrative and business operations and complying with internal policies and procedures;
liaising with third party specialist doctors, clinics, hospitals and/or medical institutions in relation to our services to you;
administering debt recovery and debt management;
complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority; and/or
any other purpose(s) that do not appear above where permissible under any written law, as may be notified by us to you from time to time

b) The purposes listed in the above clauses may continue to apply even in situations where your relationship with us (for example, pursuant to a contract) has been terminated or altered in any way, for a reasonable period thereafter (including, where applicable, a period to enable us to enforce our rights under any contract with you).

3. DISCLOSURE OF PERSONAL DATA

It may be necessary for us to disclose your Personal Data to our affiliates or to third parties (such as third party specialist doctors, clinics, hospitals and/or medical institutions, other medical or wellness providers) in order to carry out any of the purposes set out above. We do not sell, rent, licence or otherwise disclose your Personal Data to third parties. You hereby authorize us to transfer your Personal Data to such third parties, who will process your Personal Data in accordance with this Privacy Policy. Your Personal Data will not be disclosed to any further parties, unless we have obtained your consent or are legally required to do so.

4. STORAGE AND TRANSFER OF PERSONAL DATA

a) Pursuant to the purposes and activities as set out herein, it may be necessary for the Personal Data that we collect from you to be transferred to, and stored at, a destination outside Malaysia. It may also be processed by staff operating outside Malaysia who work for us or for one of our service providers.

b) By providing your Personal Data, you agree and consent to the aforesaid transfer, storing and processing, on the understanding that the recipients of such Personal Data will take appropriate steps to ensure that your data is treated securely and continues to receive a standard of protection that is at least comparable to that provided under the PDPA, applicable laws and in accordance with this Privacy Statement.

5. WITHDRAW CONSENT, REQUEST ACCESS TO AND CORRECTION OF PERSONAL DATA

a) You have the right to withdraw consent, request access to or make corrections to the Personal Data that we hold about you in accordance with applicable laws.

b) All requests for withdrawal of consent, access to, or correction of Personal Data held by us shall be made in writing or via email addressed to our Data Protection Officer at:

Attention : Healthscape Data Protection Officer
Address :

Healthscape Sdn Bhd.
7.1 Mahsa Avenue, Block A, Level 7
Jl. Ilmu off Jalan Profesor Diraja Ungku Aziz (Jalan University)
59100 Kuala Lumpur, Malaysia
Email : marketing@healthscape.com.my

c) We may charge a reasonable fee for processing your request for access. If so, we will inform you of the fee before processing your request.

d) Please note that if your Personal Data has been provided to us by a third party (for example, a general practitioner) you should contact that organization or individual to make such queries, complaints, and access any correction request to us on your behalf.

e) We will respond to your request as soon as reasonably possible. Should we not be able to respond to your request within thirty (30) days after receiving your request, we will inform you in writing within thirty (30) days of the time by which we will be able to respond to your request. If we are unable to provide you with any Personal Data or to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under applicable laws).

f) If you withdraw your consent to any or all use of your Personal Data, depending on the nature of your request, we may not be in a position to continue to provide our services to you, or administer any contractual relationship in place, which in turn may result in the termination of any agreements with us.

6. PROTECTION OF PERSONAL DATA

a) To safeguard your Personal Data from unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, we have introduced appropriate administrative, physical and technical measures such as up-to-date antivirus protection, encryption and the use of privacy filters to secure all storage and transmission of Personal Data by us, and disclosing Personal Data both internally and to our authorised third party service providers and agents only on a need-to-know basis.

b) You should be aware, however, that no method of transmission over the Internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures However, we cannot accept responsibility for misuse or loss of, or unauthorised access to your Personal Data.

7. DISCLAIMER

To the fullest extent permitted by law, we shall not be liable in any event for any special, exemplary, punitive, indirect, incidental or consequential damages of any kind or for any loss of reputation or goodwill, whether based in contract, tort (including negligence), equity, strict liability, statute or otherwise, suffered as a result of unauthorized or unintended use, access or disclosure of your Personal Data.

8. RETENTION OF PERSONAL DATA

a) We retain the Personal Data we receive as described in this Privacy Policy for as long as necessary to fulfill the purpose(s) for which it was collected, resolve disputes, conduct audits, pursue legitimate business purposes and comply with applicable laws.

b) Whilst we will securely dispose of or anonymise Personal Data which we can reasonably determine is no longer needed and we do not generally hold on to Personal Data “just in case” - it is in the interests of any caregiver or person treating you, as the patient, to be able to refer to a complete set of medical records to avoid risks to your health and safety. As such, in respect to any medical records, unless specific contrary instructions are received from you, as a patient, we may (but is not obliged to) retain such medical records.

c) We will cease to retain your Personal Data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the Personal Data was collected, and is no longer necessary for legal or business purposes.

9. THIRD PARTY WEBSITES

Our website may, from time to time, contain links to and from third party websites who are not related to Healthscape If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. These links are provided for your information and convenience only and are not an endorsement by Healthscape of the content of such websites or third parties.

10. DATA PROTECTION OFFICER

a) Any complaints, enquiries or feedback regarding your Personal Data or this Privacy Policy should be addressed to our Data Protection Officer at marketing@healthscape.com.my or to our physical office:

Healthscape Sdn Bhd.
7.1 Mahsa Avenue, Block A, Level 7
Jl. Ilmu off Jalan Profesor Diraja Ungku Aziz (Jalan University)
59100 Kuala Lumpur, Malaysia

b) All complaints will be evaluated by us in a timely manner. After we have completed our evaluation, our Data Protection Officer (or duly appointed representative) will respond to the person who submitted the complaint or feedback, with the results of the evaluation.

c) We may be prevented by law from complying with any request that you make. We may also decline any request that you may make if the law permits us to do so.

11. EFFECT OF PRIVACY POLICY AND CHANGES TO PRIVACY POLICY

a) This Privacy Policy applies in conjunction with any other notices, contractual clauses and consent clauses that apply in relation to the collection, use and disclosure of your Personal Data by us.

b) We may revise this Privacy Policy from time to time without any prior notice. You may determine if any such revision has taken place by referring to the date on which this Privacy Policy was last updated. Your continued use of our services constitutes your acknowledgement and acceptance of such changes.

12. GOVERNING LAW

The terms and conditions of this Privacy Policy are governed by the laws of Malaysia. In the event of any disputes arising from this Privacy Policy, you must first contact our Data Protection Officer regarding your concern and use your best endeavours to amicably settle any dispute in good faith. We on our part will also use our best endeavours to amicably settle your concerns in good faith. However, if no amicable resolution is reached within thirty (30) days, you agree to submit to the exclusive jurisdiction of the Courts of Malaysia.