Data Protection Notice

IHH Group Personal Data Protection Notice

IHH Healthcare Berhad including its subsidiaries, related corporations or any of its affiliates (collectively, referred to as “IHH Group” or “Group” and subsequently referring to ‘we’, ‘us’ or ‘our’) are committed to ensuring that your personal data is protected in accordance with IHH Group’s Personal Data Protection Policy (IHH’s PDP Policy) in line with all applicable laws and regulations including but not limited to the Malaysia Personal Data Protection Act (PDPA) 2010 or its amendments (Personal Data Protection Legislations).

This Personal Data Protection Notice (‘PDP Notice’) outlines how IHH Group collects, uses, discloses and manages personal data in compliance with the Personal Data Protection Legislations.

Please be aware that IHH Group may update this PDP Notice from time to time.  Any changes to the PDP Notice will be on our website.

1. Consent

   This PDP Notice serves to inform you that your personal data is being processed by us or on our behalf.  By providing us with your personal data or continuing to communicate with us, we shall regard that you have consented to the processing of such data pursuant to this PDP Notice.  Should we ask you to provide certain information by which you can be identified, then you can be assured that it will only be used in accordance with this PDP Notice.

2. Source of Personal Data

   We collect personal data directly from you or through information gathered during our ongoing relationship.  This includes data you provide through third parties, social media, or public sources.

   Further, we may request your assistance to procure the consent of third parties whose personal data is made available by you to us, and you hereby agree to use your best endeavours to do so.

3. Types of Personal Data Collection

   Your personal data processed by us may include, where relevant to your name, date of birth, identity card number or passport, name of employer/company, home and office address, telephone/handphone number, facsimile number, email address, occupation, age, gender, marital status, weight, height, photos, race, nationality, religion, family and/or next of kin information, remuneration information, EPF number, SOCSO Number, Income Tax Number, Bank details, education background, training attended, working experiences, medical checkup result, medical record, medical diagnosis, personal health information, criminal history, investigations result, insurance details and any personal data required for the purposes set out in Item 4 below (referred to as “Personal Data”).

4. Purposes of the Personal Data

   Your Personal Data may be processed for the following purposes but not limited to the following:

   (a) to provide medical and healthcare services;

   (b) to facilitate the patient’s personal needs (i.e. extension stay for health tourists)

   (c) to establish and manage medical records and medical reports;

   (d) to facilitate payment process relating to the patients;

   (e) to conduct research, analysis and improvement;

   (f)  to administer and respond to request, queries, complaints and legal issues;

   (g) to facilitate human resource management activities relating to employees;

   (h) for submission and registration of relevant forms, licenses to the relevant authorities and/or third parties under the governing laws relevant to the healthcare industries;

   (i) to provide marketing, advertisement, membership programmes, rewards schemes, offers and/or promotion on our products and services; and/or

   (j) for other purposes required to operate, maintain and better manage our business and your relationship with us,

   (collectively, “the Purposes”).  Your Personal Data will be collected from various on-line forms available during your visits to IHH Group’s website, existing guest lists, business cards, guest books and/or any events organised by us and/or any of the Group (as defined earlier).

   The processing of your Personal Data may be mandatory or voluntary, depending on the Purposes for which your Personal Data is collected.  Where it is mandatory for you to provide us with your Personal Data, and you fail or chose not to provide us with such data, or do not consent to the above or this PDP Notice, we will not be able to provide our services or otherwise engage with you.

5. Access and Update of Personal Data

   We do our best to ensure that the Personal Data we hold about you is accurate, complete, not misleading and up to date.  If there are any changes to your Personal Data or if you believe that the Personal Data, we have about you is inaccurate, incomplete, misleading or not up to date, please contact us so that we may take steps to update your Personal Data.

   If you would like to request access to your Personal Data, please contact us.  We recommend that your request access to your Personal Data held by us be made in writing.  We may also take steps to verify your identity before fulfilling your request for access to your Personal Data in accordance with IHH’s PDP Policy and the PDPA.

   Any Personal Data retained by us may be destroyed and/or deleted from our records and system in accordance with our retention policy in the event such data is no longer required for the said Purposes.

6. To contact us

In the event of any inconsistency between the English version and the Bahasa Malaysia version of this PDP Notice, the English version shall prevail.

Revision date:  27^th February 2025