Privacy Policy

1. Who We Are

Klinik Dr. Yaya is a clinic operating in Malaysia. We are the data user responsible for your personal data under the Personal Data Protection Act 2010 (“PDPA”). If you have any questions about this policy or your personal data, you may reach us at dryaya@gmail.com or +60 12-345 6789.

2. Personal Data We Collect

Depending on how you interact with us, we may collect:

• Identity & contact details — such as your name, phone number, email address, and WhatsApp number.
• Appointment & enquiry information — the service you are interested in, preferred dates/times, and the content of your messages.
• Health-related information (sensitive personal data) — any health concerns, symptoms, or medical information you choose to share with us so that we can assist you.
• Technical data — limited, standard information your browser sends when visiting our website (for example, basic device or log information).

Health information is treated as “sensitive personal data” under the PDPA and is only processed with your explicit consent or where otherwise permitted by law.

3. How We Collect Your Personal Data

We collect personal data directly from you when you:

• Contact us through WhatsApp, email, or phone;
• Make or enquire about an appointment;
• Visit our clinic in person; or
• Otherwise communicate with our team.

This website does not contain an online booking or registration form — enquiries are handled through WhatsApp and the contact channels listed above.

4. Purpose of Processing (Notice & Choice)

We process your personal data for the following purposes:

• To respond to your enquiries and provide information about our services;
• To arrange, confirm, reschedule, or manage your appointments;
• To provide clinic services and care;
• To maintain our records and for internal administration;
• To comply with legal, regulatory, and professional obligations.

Providing your personal data is voluntary; however, if you do not provide certain information, we may be unable to respond to your enquiry or provide our services.

5. Consent & Withdrawal of Consent

By providing your personal data to us, you consent to our processing of it for the purposes set out in this policy. You may withdraw your consent at any time by contacting us at dryaya@gmail.com. Please note that withdrawing consent may affect our ability to provide services to you, and may be subject to legal or record-keeping requirements.

6. Disclosure of Personal Data

We do not sell your personal data. We may disclose your personal data only where necessary, to:

• Healthcare professionals, laboratories, or partners involved in providing your care;
• Service providers who support our operations (for example, IT or communication services), under appropriate confidentiality obligations;
• Regulators, government authorities, or other parties where required or permitted by law.

7. Security of Personal Data

We take reasonable practical steps to protect your personal data from loss, misuse, unauthorised access, modification, or disclosure. While we strive to safeguard your information, no method of transmission or storage is completely secure.

8. Retention of Personal Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required to meet legal, regulatory, and professional obligations. When no longer required, we will take reasonable steps to securely destroy or permanently delete it.

9. Accuracy of Personal Data

We rely on you to provide accurate and complete information. Please notify us of any changes to your personal data so that our records remain accurate and up to date.

10. Your Rights

Under the PDPA, you have the right to:

• Request access to the personal data we hold about you;
• Request correction of inaccurate, incomplete, or outdated personal data;
• Withdraw your consent to the processing of your personal data;
• Limit the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us using the details in the “Contact Us” section below. We may need to verify your identity before acting on your request, and certain requests may be subject to limitations under the law.

11. Cookies & Website Data

Our website is primarily informational. It may use limited, standard technical data necessary for the site to function. We do not use it to collect sensitive personal data without your knowledge.

12. Minors

Where services are provided to a minor, we expect personal data to be provided and consented to by a parent or legal guardian.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. Please review it periodically.

14. Contact Us

If you have any questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact us:

• Clinic: Klinik Dr. Yaya
• Email: dryaya@gmail.com
• Phone / WhatsApp: +60 12-345 6789
• Address: Klinik Dr. Yaya, Malaysia