Privacy Policy
Last Updated: 1st November 2025
Your privacy matters to us. This policy explains what information we collect, how we use it, and how we keep it safe.
1. Introduction
Care 360 Clinic (“we,” “us,” or “our”) is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy describes how we collect, use, store, and protect your information when you visit our clinic or use our website.
We comply with Malaysia’s Personal Data Protection Act 2010 (PDPA) and maintain strict confidentiality of all medical information.
2. Information We Collect
Personal Information
- Name, identification number (NRIC/passport)
- Contact details (phone number, email, address)
- Date of birth and gender
- Emergency contact information
Medical Information
- Medical history and current health conditions
- Medications and allergies
- Test results and diagnoses
- Treatment records and clinical notes
- Insurance and payment information
Website Usage Information
- IP address and browser type
- Pages visited and time spent on site
- Referring website and search terms used
- Device information (for mobile users)
3. How We Collect Your Information
We collect information:
- Directly from you during registration, consultations, and appointments
- From your healthcare providers (with your consent)
- Through our website when you browse, contact us, or book appointments
- From insurance companies and TPAs for claims processing
- Through cookies and similar technologies on our website
4. How We Use Your Information
We use your information to:
- Provide medical care, diagnosis, and treatment
- Maintain accurate medical records
- Process billing and insurance claims
- Schedule and confirm appointments
- Send appointment reminders and health notifications
- Comply with legal and regulatory requirements
- Improve our services and website experience
- Communicate important clinic updates
We never use your medical information for marketing purposes without explicit consent.
5. Legal Basis for Processing
We process your personal data based on:
- Consent: You have given clear permission for specific purposes
- Contract: Processing is necessary to provide medical services you’ve requested
- Legal Obligation: We must comply with Malaysian healthcare regulations
- Legitimate Interests: Necessary for clinic operations while respecting your rights
6. How We Share Your Information
We may share your information with:
Healthcare Providers
- Specialists, laboratories, and hospitals for continuity of care (with your consent)
- Emergency services when medically necessary
Third Parties
- Insurance companies and TPAs for claims processing
- Legal authorities when required by law
- Accreditation and regulatory bodies (anonymized data)
We never sell your personal or medical information to third parties.
Corporate Clients
For corporate health services, we may share:
- Medical fitness-for-work status with employers (not detailed medical information)
- Required occupational health reports as per your employment contract
7. Data Security
We protect your information through:
- Secure, encrypted storage systems
- Restricted access limited to authorized personnel only
- Regular security audits and updates
- Secure disposal of physical and electronic records
- Staff training on confidentiality and data protection
Despite our efforts, no system is 100% secure. We cannot guarantee absolute security but commit to promptly addressing any breaches.
8. Your Rights
Under Malaysian law, you have the right to:
Access: Request copies of your personal and medical records
Correction: Update inaccurate or incomplete information
Withdrawal: Withdraw consent for non-essential processing
Complaint: Lodge complaints about our data handling practices
Limit Processing: Request restrictions on how we use your data
To exercise these rights, contact us or visit our clinic in person with proper identification.
9. Data Retention
We retain your information for:
- Medical Records: Minimum 7 years from last consultation (or longer as required by law)
- Billing Records: 7 years for tax and audit purposes
- Website Data: 2 years unless you request earlier deletion
Records of minors are retained until they reach age 25.
10. Cookies and Website Tracking
Our website uses cookies to:
- Remember your preferences and settings
- Analyze website traffic and usage patterns
- Improve user experience and functionality
You can disable cookies in your browser settings, though some website features may not function properly.
Types of Cookies We Use:
- Essential Cookies: Necessary for website operation
- Analytics Cookies: Help us understand how visitors use our site
- Functional Cookies: Remember your preferences
We do not use advertising or tracking cookies from third parties.
11. Third-Party Links
Our website may link to insurance providers, health organizations, or partner websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any information.
12. Children's Privacy
We do not knowingly collect personal information from children under 18 through our website without parental consent. Medical treatment of minors is conducted with parental/guardian knowledge and consent as per Malaysian medical practice standards.
13. International Data Transfers
Your information is stored and processed in Malaysia. We do not transfer personal data outside Malaysia unless required for specific medical reasons (e.g., specialist consultations abroad) and only with your explicit consent.
14. Changes to This Privacy Policy
We may update this policy periodically to reflect changes in our practices or legal requirements. Updates will be posted on this page with a new “Last Updated” date. Significant changes will be communicated via email or clinic notices.
15. Contact Us
If you have questions about these Terms & Conditions, please contact us:
Care 360 Clinic
No. 3-G, Jalan AP 8, Bandar Bukit Puchong 2
47120 Puchong, Selangor, Malaysia
Phone: +6011-1701 9576
Email: [email protected]