Privacy Policy

1. INTRODUCTION

For Him Medical Centre (“Company”, “we”, “us”, or “our”) is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 of Malaysia (“PDPA”) and applicable data protection laws.

This Privacy Policy explains how we collect, use, disclose, process, store, and safeguard your personal data when you access or use our applications, products, services, programmes, or website (collectively, the “Services”).

By accessing or using our Services, you consent to the processing of your personal data as described in this Privacy Policy.

2. INFORMATION WE COLLECT

2.1 User Identity Information

Our Services allow you to register and participate using a nickname, alias, or pseudonym. You are not required to use your legal full name unless necessary for payment processing, regulatory compliance, or other lawful purposes.

We may collect:

Nickname or chosen username
Full legal name (where voluntarily provided or legally required)
NRIC/Identification number (only where legally required)
Date of birth (where applicable)

2.2 Contact Information

Email address
Telephone number

2.3 Service and Programme Information

Appointment and booking records
Participation data
Health or wellness-related information (if applicable)
Communications and enquiries
Payment information (processed securely via third-party providers)

2.4 Technical and Usage Data

IP address
Device and browser information
Application usage data
Cookies and similar technologies

We collect information directly from you or automatically when you use our Services.

3. PURPOSE OF PROCESSING

We process your data for the following purposes:

To provide and administer our Services;
To manage accounts and user participation (including nickname-based accounts);
To communicate with you regarding support, updates, or enquiries;
To process payments;
To improve, analyse, and develop our Services;
To comply with legal and regulatory requirements;
To conduct research and statistical analysis as described below.

We do not require users to disclose more personal data than is reasonably necessary for the provision of the Services.

4. RESEARCH PURPOSES AND DE-IDENTIFICATION

We may use collected data for research, statistical analysis, service development, and improvement.

By using our Services, you acknowledge and consent to the use of your data for research purposes.

Where data is used for research:

Real names, NRIC/IC numbers, contact details, and other directly identifying information will be removed, masked, or irreversibly anonymised prior to analysis;
If you use a nickname or pseudonym, research analysis will not attempt to identify your real-world identity;
Research findings will be presented only in aggregated, anonymised, or de-identified form;
No individual user will be identifiable in any publication, report, or presentation.

We take reasonable technical and organisational measures to prevent re-identification.

5. SENSITIVE PERSONAL DATA

Where our Services involve health, wellness, psychological, or therapeutic programmes, we may collect sensitive personal data as defined under the PDPA.

Such data will only be processed:

With your explicit consent;
For the provision of Services requested by you;
For research purposes in anonymised or de-identified form; or
Where otherwise permitted under applicable law.

Enhanced safeguards are applied to protect sensitive personal data.

6. DISCLOSURE OF PERSONAL DATA

We may disclose personal data to:

Authorised employees and consultants of For Him Medical Centre;
Third-party service providers (including IT, hosting, and payment providers) under confidentiality obligations;
Regulatory authorities where required by law;
Other parties with your consent.

We do not sell or trade personal data.

7. CROSS-BORDER TRANSFER

Where necessary, personal data may be processed or stored outside Malaysia. We will take reasonable steps to ensure such transfers comply with the PDPA and appropriate safeguards are in place.

8. DATA SECURITY

We implement appropriate technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction.

However, no system can guarantee absolute security.

9. DATA RETENTION

We retain personal data only as long as necessary for the purposes outlined in this Privacy Policy or as required by law. Data used for research may be retained in anonymised form for longer-term statistical analysis.

10. YOUR RIGHTS

Subject to the PDPA, you have the right to:

Request access to your personal data;
Request correction of inaccurate data;
Withdraw consent (subject to legal or contractual limitations).

Requests may be subject to an administrative fee as permitted by law.

11. CHILDREN AND MINORS

Our Services may be provided to individuals under the age of 18 (“Minors”) where they are registered, enrolled, or brought in by their parent or legal guardian.

We collect and process personal data of Minors only:

With the consent of their parent or legal guardian;
For the purpose of providing requested Services;
In compliance with the Personal Data Protection Act 2010 and applicable laws.

Where sensitive personal data (including health, behavioural, or therapeutic information) of a Minor is collected, explicit consent will be obtained from the parent or legal guardian prior to processing.

Parents or legal guardians have the right to:

Request access to the Minor’s personal data;
Request correction of inaccurate information;
Withdraw consent for processing (subject to legal or contractual limitations).

We take additional precautions to safeguard the personal data of Minors.

12. AMENDMENTS

We reserve the right to amend this Privacy Policy at any time. Updates will be published within our application or website with a revised effective date. Continued use of our Services constitutes acceptance of the updated Privacy Policy.