The Personal Data Protection Act 2010 (“the Act”) governs the processing of personal data in all direct and incidental commercial transactions, and it applies to Medi Safetest Sdn Bhd 202001014717 (1371037-P), including its affiliates and subsidiaries (“Blessono Specialist Clinic (BMC)”). At BMC, we prioritize your privacy and are committed to safeguarding it in accordance with the Act. This Notice outlines our practices regarding the collection and use of data, as well as our accountability and responsibilities.

This Privacy Notice is issued to all customers, employees, and third-party service providers of Blessono Specialist Clinic pursuant to the Personal Data Protection Act 2010.

Collection of Personal Data

We may collect personal data about you, including but not limited to the following:

• Personal Information: Full name, age, gender, date of birth, race, passport or identity card number, nationality, religion, marital status, medical history, health information.
• Contact Information: Mailing address, telephone number, mobile phone number, fax number, email address.
• Payment Information: Debit or credit card information, including the name of the cardholder, card number, mailing address, expiry date, and other bank account details.
• Image and Photograph: Recordings of your image and photograph via CCTV cameras installed at our premises, during any of our events, third-party events, and for medical records purposes.
• Miscellaneous: Other information that we may collect as necessary.

Methods of Data Collection

• Forms: We collect data from forms you or your representative fill out at our locations, such as registration, consent, and purchase forms.
• Direct Contact: Data can be collected when you contact us in person, by phone, email, letter, or over the counter.
• Surveys and Promotions: We gather data through surveys, questionnaires, competitions, contests, offers, or promotions conducted by us or a third party.
• Third Parties: Information may be collected from third parties related to you, such as employers, potential employers, agents, insurance companies, and other healthcare providers.
• Premises Visits: Data is collected during your visits to our premises.
• Event Attendance: We collect information when you attend events organized by us or third parties.
• Websites: Data is gathered from our websites.
• Job Applications: Personal data is collected through job applications and interviews.
• Social Media: Information is gathered from your interactions with us via social media and interactive applications like Facebook, TikTok, Instagram, and XHS.
• Other Sources: Data may also come from other sources where you have consented to the disclosure of your personal information, or where it is lawfully permitted.

Use of Personal Data Collected

The purposes for which your personal data may be used and/or processed include, but are not limited to, the following:

• Ensuring continuity of treatments at our premises.
• Registering and verifying your identity.
• Contacting you regarding appointment details.
• Engaging in business transactions for services to be offered and provided to you.
• Informing you of benefits and updating you on changes to our services.
• Providing and improving our services, including fulfilling audit requirements and facilitating payments.
• Responding to any enquiries, complaints, comments, or feedback you submit to us.
• Facilitating and processing payments.
• Instituting debt recovery proceedings against defaulters.
• Submitting relevant forms, licenses, and required information to regulatory authorities.
• Transferring or assigning our rights, interests, and obligations under any agreements with you.
• Updating, consolidating, and improving the accuracy of our records.
• Managing medical records and reports.
• Administering services, competitions, contests, offers, promotions, campaigns, and events.
• Conducting research, analysis, and improvement activities.
• Engaging in business transactions for services to be offered and provided to you.
• Complying with legal or regulatory requirements under applicable laws, regulations, guidelines, or codes of practice.
• Internally managing the services provided to you.
• Maintaining records required for security, claims, or other legal purposes.
• Providing internal training for our staff.
• Any other purposes required or permitted by law, regulations, guidelines, and/or relevant regulatory authorities.

Disclosure of Personal Data

Personal data we hold about an individual will be kept confidential; however, we may disclose such information to the following parties (whether within or outside Malaysia):

• Affiliates and subsidiaries of BMC.
• Relevant third parties (in or outside Malaysia) as required by law, under relevant contractual relationships, or for the purposes stated above.
• Federal or state government authorities.
• Law enforcement agencies.
• Government agencies.
• Our regulatory bodies.
• Companies or organizations acting as our agents, contractors, service providers, or professional consultants.
• Companies or organizations assisting us in processing and/or fulfilling transactions and providing the services you have requested.
• Our business associates and other parties for purposes related to the collection and use of your personal data.
• Other parties to whom you have given your express or implied consent.
• Any credit reporting agencies or, in the event of default, any debt collection agencies, subject to applicable laws.

Your Rights to Access and Correct Your Personal Data

You may at any time request to obtain information, correct or update your personal data, withdraw your consent, and/or limit the processing of your personal data. If you have any queries related to this Notice or concerns about the misuse or suspected misuse of your personal information, you may email us at cs[at]blessono.com, and the officer in charge will attend to your request.

Miscellaneous

By submitting your personal data to us, you consent to the use of that data as outlined in this Notice. If you provide us with personal data relating to a third party (e.g., information about your spouse, children, parents, and/or employees), you represent that you have obtained the consent of the third party to provide us with their personal data for the purposes listed below.

Should there be any changes or amendments to this Notice, an updated version will be issued on this page. Continued use of our services signifies your agreement to any such changes.