QL Clinic Privacy Policy

QL Clinic (QL ONE SDN BHD) (“QL Clinic”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (“PDPA”) and applicable Malaysian laws. QL Clinic may collect, use, process, store, disclose, and protect personal data, including health, treatment, and other sensitive personal data, in connection with its services, operations, and related lawful purposes, and shall obtain such consent as may be required under applicable law.

This Privacy Notice explains how we collect, use, process, store, disclose, and protect your personal data when you visit our website, submit an enquiry, contact us, make a booking, attend a consultation or treatment, or otherwise interact with QL Clinic.

1. Personal Data We May Collect

We may collect and process personal data including, where applicable:

1. • name;
   • mobile number;
   • treatment of interest;
   • medical or treatment history;
   • consultation details;
   • before-and-after photographs or other treatment-related images;
   • communication records;
   • appointment and booking details; and
   • other personal information provided by you in the course of your enquiry, booking, consultation, or treatment.

Health and treatment-related information can amount to sensitive personal data under

Malaysia’s PDPA.

2. Sources of Personal Data

We may collect your personal data through:

1. • website forms;
   • WhatsApp;
   • phone calls;
   • social media messages or enquiries;
   • consultation forms;
   • walk-in registration forms; and

clinic operational systems used in connection with your booking, consultation, treatment, or follow-up.

3. Purpose of Collection and Processing

We may use and process your personal data for purposes including:

1. • responding to enquiries;
   • scheduling, confirming, rescheduling, and managing appointments;
   • conducting consultations, assessments, and treatments;
   • determining treatment suitability and safety;
   • maintaining consultation and treatment records;
   • processing payments and internal administration;
   • managing packages, sessions, and clinic follow-ups;
   • handling customer care, feedback, and service-related communication;
   • sending clinic updates, promotions, or marketing communications; and
   • complying with legal, operational, and regulatory requirements.

4. Systems and Platforms Used

Personal data may be collected, processed, stored, or handled through the systems and communication channels used by QL Clinic, including our patient management and clinic operational systems, website forms or backend systems, email, WhatsApp, and social media platforms.

5. Marketing Communications

QL Clinic may send marketing, promotional, campaign, event, or service-related communications through channels such as:

1. • WhatsApp;
   • SMS; and
   • email.

If you no longer wish to receive promotional communications, you may contact QL Clinic to update your preferences. You may opt out of promotional or marketing communications at any time by contacting QL Clinic, but QL Clinic may still send communications necessary for appointments, bookings, consultations, treatments, follow-up, payments, safety, operational matters, or compliance.

6. Photographs, Before-and-After Images, and Testimonials

QL Clinic may collect photographs, videos, scans, or treatment-related images for consultation, treatment planning, progress tracking, clinical documentation, and recordkeeping purposes.

Any use of before-and-after photographs, testimonials, reviews, or patient images for social media, website, advertising, or marketing purposes shall only be done where separate consent has been obtained in writing, electronically, or in such other recorded form as QL Clinic may accept.

7. Disclosure of Personal Data

QL Clinic may disclose personal data, where reasonably necessary, to:

1. • doctors, nurses, therapists, clinic assistants, front desk staff, customer service personnel, and authorised internal staff;
   • clinic management or related internal support teams;
   • service providers or systems engaged in clinic operations, communication, technology support, or administration; and
   • regulators, authorities, advisers, or other parties where disclosure is required or permitted by law.

QL Clinic does not sell personal data to third parties.

8. Security of Personal Data

QL Clinic takes practical steps to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. Such safeguards may include administrative controls, restricted access, internal authorisation, and appropriate operational measures.

9. Retention of Personal Data

QL Clinic retains personal data only for as long as reasonably necessary for the purposes for which it was collected, for clinic operations, for follow-up and recordkeeping, for dispute handling, or as required by applicable law or internal policy, after which QL Clinic may destroy, delete, anonymise, or otherwise dispose of such personal data in accordance with applicable law, internal policy, and operational requirements.

10. Access, Correction, and Privacy Requests

If you wish to request access to your personal data, correct your personal data, or make any privacy-related enquiry, you may contact QL Clinic using the contact details below.

QL Clinic will review and handle such requests in accordance with applicable law and internal procedures. QL Clinic reserves the right to require sufficient information to verify the identity and authority of the requester before processing any such request.

11. Third-Party Platforms

Our website or communications may link to third-party platforms such as payment gateways, social media platforms, maps, or messaging tools. These platforms operate under their own terms and privacy policies, and QL Clinic is not responsible for their separate practices.

12. Updates to This Privacy Notice

QL Clinic may amend or update this Privacy Notice from time to time. The latest version published on our website shall apply from the date of publication.

13. Contact Us

For any privacy-related request, including access or correction of personal data, please contact:

QL Clinic (QL ONE SDN BHD)

36, Jalan SS 21/35, Damansara Utama, 47400 Petaling Jaya, Selangor

Email:enquiry@qlclinic.com.my
WhatsApp / Contact: 0182789338