Medlads
    Backed byElevenLabs Grants
    © 2026 Medlads Sdn Bhd. All rights reserved.
    About UsEditorial PolicyContactTerms & ConditionsPrivacy Policy

      Privacy Policy

      Last Updated: December 2024

      Medlads Sdn Bhd ("we", "us", or "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our healthcare information and doctor reviews platform.

      1. PDPA Compliance Statement

      This Privacy Policy is issued in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. As a data user under the PDPA, we are committed to protecting your personal data and ensuring that all processing activities comply with the seven principles of the PDPA:

      General Principle: Personal data shall not be processed without your consent.
      Notice and Choice Principle: We inform you of our data processing activities and give you choices.
      Disclosure Principle: Personal data shall not be disclosed for purposes other than those stated.
      Security Principle: We take practical steps to protect your personal data.
      Retention Principle: Personal data shall not be kept longer than necessary.
      Data Integrity Principle: We take reasonable steps to ensure personal data is accurate and up-to-date.
      Access Principle: You have the right to access and correct your personal data.

      2. Information We Collect

      We collect the following categories of personal data:

      Personal Identification Information:
      • Full name, email address, phone number
      • National ID or Passport number
      • Date of birth and country of residence

      Sensitive Personal Data (with explicit consent):
      • Medical history and health conditions
      • Medical records and test results you choose to upload
      • Treatment preferences and requirements

      Technical Information:
      • IP address and browser type
      • Device information and usage patterns
      • Cookies and similar tracking technologies

      3. Purpose of Data Collection

      Your personal data is collected and processed for the following purposes:

      • Facilitating medical appointment bookings and enquiries
      • Connecting you with healthcare providers in Malaysia
      • Providing personalized hospital and doctor recommendations
      • Processing and managing your account
      • Communicating with you about services and appointments
      • Improving our platform and user experience
      • Complying with legal and regulatory requirements
      • Detecting and preventing fraud or unauthorized access

      We will not process your personal data for any purpose other than those stated above without obtaining your prior consent.

      4. Consent

      By using our platform and submitting your personal data through our enquiry forms, you consent to:

      • The collection and processing of your personal data as described in this Privacy Policy
      • The sharing of your personal data with healthcare providers you enquire with
      • Receiving communications from us regarding your enquiries and appointments

      For sensitive personal data (such as medical information), we obtain your explicit consent before processing. You may withdraw your consent at any time by contacting us at [email protected]. However, please note that withdrawal of consent may affect our ability to provide services to you.

      5. Disclosure of Personal Data

      We may disclose your personal data to the following third parties:

      Healthcare Providers: Hospitals, clinics, and doctors you choose to enquire with
      Service Providers: Our technology and infrastructure partners (e.g., Supabase for data storage, Hetzner for hosting) who assist in operating our platform
      Legal Authorities: When required by law, court order, or to comply with legal processes

      We ensure that all third parties who receive your personal data are bound by confidentiality obligations and process data in accordance with the PDPA.

      6. Data Security

      We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction, including:

      • Encryption of data in transit (TLS/SSL) and at rest
      • Secure database storage with access controls
      • Regular security assessments and audits
      • Employee training on data protection
      • Multi-factor authentication for administrative access

      While we take all reasonable precautions to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your personal data.

      7. Data Retention

      We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

      • Active account data: Retained while your account is active and for 3 years after last activity
      • Enquiry and booking records: Retained for 7 years for legal and regulatory compliance
      • Medical records uploaded: Retained until you request deletion

      After the retention period, your personal data will be securely deleted or anonymized.

      8. Your Rights Under PDPA

      Under the Personal Data Protection Act 2010, you have the following rights:

      Right of Access: You may request access to your personal data held by us
      Right of Correction: You may request correction of any inaccurate or incomplete personal data
      Right to Withdraw Consent: You may withdraw consent for processing at any time
      Right to Limit Processing: You may request that we limit how we process your data
      Right to Data Portability: You may request to receive your data in a structured format

      To exercise these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 21 days as required by the PDPA. A fee may be charged for access requests as permitted under the PDPA.

      9. Cross-Border Data Transfer

      Your personal data may be transferred to and processed in countries outside Malaysia where our service providers are located. We ensure that any such transfers comply with the PDPA's requirements for cross-border data transfer, including ensuring that the receiving country has adequate data protection laws or implementing appropriate safeguards.

      10. Cookies and Tracking Technologies

      We use cookies and similar tracking technologies to enhance your experience on our platform. These technologies help us:

      • Remember your preferences and settings
      • Analyze platform usage and performance
      • Provide personalized content and recommendations

      You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our platform.

      11. Limitation of Liability

      While we take all reasonable measures to protect your personal data in compliance with the PDPA, we shall not be liable for:

      • Any unauthorized access, hacking, data loss, or breach that occurs despite our reasonable security measures
      • Actions of third parties, including healthcare providers, after your data has been shared with your consent
      • Data breaches caused by your failure to safeguard your account credentials
      • Technical failures or circumstances beyond our reasonable control

      Our total liability for any claims arising from data protection matters shall be limited to the extent permitted by law.

      12. Changes to This Policy

      We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our platform with a new "Last Updated" date. We encourage you to review this Privacy Policy periodically.

      13. Contact Us

      If you have any questions, concerns, or complaints about this Privacy Policy or our data protection practices, please contact our Data Protection Officer:

      Data Protection Officer
      Medlads Sdn Bhd
      Email: [email protected]