Medlads - Find Doctors with Real Patient Reviews

This Privacy Policy is issued in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. As a data user under the PDPA, we are committed to protecting your personal data and ensuring that all processing activities comply with the seven principles of the PDPA:

General Principle: Personal data shall not be processed without your consent.
Notice and Choice Principle: We inform you of our data processing activities and give you choices.
Disclosure Principle: Personal data shall not be disclosed for purposes other than those stated.
Security Principle: We take practical steps to protect your personal data.
Retention Principle: Personal data shall not be kept longer than necessary.
Data Integrity Principle: We take reasonable steps to ensure personal data is accurate and up-to-date.
Access Principle: You have the right to access and correct your personal data.

We collect the following categories of personal data:

Personal Identification Information:
• Full name, email address, phone number
• National ID or Passport number
• Date of birth and country of residence

Sensitive Personal Data (with explicit consent):
• Medical history and health conditions
• Medical records and test results you choose to upload
• Treatment preferences and requirements

Technical Information:
• IP address and browser type
• Device information and usage patterns
• Cookies and similar tracking technologies

Your personal data is collected and processed for the following purposes:

• Facilitating medical appointment bookings and enquiries
• Connecting you with healthcare providers in Malaysia
• Providing personalized hospital and doctor recommendations
• Processing and managing your account
• Communicating with you about services and appointments
• Improving our platform and user experience
• Complying with legal and regulatory requirements
• Detecting and preventing fraud or unauthorized access

We will not process your personal data for any purpose other than those stated above without obtaining your prior consent.

By using our platform and submitting your personal data through our enquiry forms, you consent to:

• The collection and processing of your personal data as described in this Privacy Policy
• The sharing of your personal data with healthcare providers you enquire with
• Receiving communications from us regarding your enquiries and appointments

For sensitive personal data (such as medical information), we obtain your explicit consent before processing. You may withdraw your consent at any time by contacting us at support@medlads.com. However, please note that withdrawal of consent may affect our ability to provide services to you.

We may disclose your personal data to the following third parties:

Healthcare Providers: Hospitals, clinics, and doctors you choose to enquire with
Service Providers: Our technology and infrastructure partners (e.g., Supabase for data storage, Vercel for hosting) who assist in operating our platform
Legal Authorities: When required by law, court order, or to comply with legal processes

We ensure that all third parties who receive your personal data are bound by confidentiality obligations and process data in accordance with the PDPA.

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure database storage with access controls
• Regular security assessments and audits
• Employee training on data protection
• Multi-factor authentication for administrative access

While we take all reasonable precautions to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your personal data.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Active account data: Retained while your account is active and for 3 years after last activity
• Enquiry and booking records: Retained for 7 years for legal and regulatory compliance
• Medical records uploaded: Retained until you request deletion

After the retention period, your personal data will be securely deleted or anonymized.

Under the Personal Data Protection Act 2010, you have the following rights:

Right of Access: You may request access to your personal data held by us
Right of Correction: You may request correction of any inaccurate or incomplete personal data
Right to Withdraw Consent: You may withdraw consent for processing at any time
Right to Limit Processing: You may request that we limit how we process your data
Right to Data Portability: You may request to receive your data in a structured format

To exercise these rights, please contact our Data Protection Officer at support@medlads.com. We will respond to your request within 21 days as required by the PDPA. A fee may be charged for access requests as permitted under the PDPA.

Your personal data may be transferred to and processed in countries outside Malaysia where our service providers are located. We ensure that any such transfers comply with the PDPA's requirements for cross-border data transfer, including ensuring that the receiving country has adequate data protection laws or implementing appropriate safeguards.

We use cookies and similar tracking technologies to enhance your experience on our platform. These technologies help us:

• Remember your preferences and settings
• Analyze platform usage and performance
• Provide personalized content and recommendations

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our platform.

While we take all reasonable measures to protect your personal data in compliance with the PDPA, we shall not be liable for:

• Any unauthorized access, hacking, data loss, or breach that occurs despite our reasonable security measures
• Actions of third parties, including healthcare providers, after your data has been shared with your consent
• Data breaches caused by your failure to safeguard your account credentials
• Technical failures or circumstances beyond our reasonable control

Our total liability for any claims arising from data protection matters shall be limited to the extent permitted by law.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our platform with a new "Last Updated" date. We encourage you to review this Privacy Policy periodically.

If you have any questions, concerns, or complaints about this Privacy Policy or our data protection practices, please contact our Data Protection Officer:

Data Protection Officer
Medlads Sdn Bhd
Email: support@medlads.com

Privacy Policy

1. PDPA Compliance Statement

2. Information We Collect

3. Purpose of Data Collection

4. Consent

5. Disclosure of Personal Data

6. Data Security

7. Data Retention

8. Your Rights Under PDPA

9. Cross-Border Data Transfer

10. Cookies and Tracking Technologies

11. Limitation of Liability

12. Changes to This Policy

13. Contact Us