Privacy Notice (PDPA)

Last updated: 26 September 2026

This notice explains how Klinik NurCahaya (NurCahaya Healthcare Sdn. Bhd.) (“KNC”, “we”) handles personal data under the Personal Data Protection Act 2010 (PDPA). It is provided in English and Bahasa Melayu; if they differ, the English version applies.

1. When you use this website

• Forms. When you press the button on the appointment, enquiry, feedback or Umrah group form, the details you typed (such as your name, phone number, the service, preferred date and your message) are sent to our clinic system, and WhatsApp opens with the same message typed out. We keep this copy even if you don’t send the WhatsApp message, so our team can follow up. Appointment and enquiry messages go to Hana, our automated assistant; feedback and Umrah group requests go to our clinic team. Only authorised clinic staff can see these copies, and they are deleted automatically after 6 months. What you then send on WhatsApp is handled as described in section 2. Please don’t include IC numbers or detailed medical history in a form.
• No cookies, no advertising trackers. We do not use cookies, advertising pixels or social-media trackers.
• Anonymous statistics. We count page views and button taps (for example “WhatsApp” or “Call”) to improve the site. These counts contain no name, phone number, IP address or device fingerprint and cannot identify you.
• Google Maps. The map on the Contact page is loaded from Google, which may collect data under its own privacy policy.

2. When you contact us on WhatsApp

Messages you send to our WhatsApp numbers — including to Hana, our automated assistant — are received through WhatsApp (Meta) and kept in our clinic systems so that we can answer you, arrange appointments and send you documents you ask for. Before Hana releases a medical document (such as an MC, receipt or lab result) she will ask you to verify your identity. Please avoid sending IC numbers or detailed medical history unless we ask for them.

3. When you use the Klinik NurCahaya app

The app uses your account details (name, email, phone number and IC for verification) to link you to your clinic record, so that you can book appointments and view your own queue status, results and documents. Records are visible only to you and authorised clinic staff.

4. When you visit the clinic

We collect the personal and medical information needed to register and treat you, to bill you or your panel/insurer, and to meet our legal obligations as a private medical clinic. Medical records are kept for the period required by Malaysian law.

5. Who we share data with

Only where needed: your panel, insurer or employer scheme (for claims you ask us to make), laboratories and referral hospitals involved in your care, service providers who run our systems under confidentiality obligations, and authorities where the law requires it. We do not sell personal data.

6. Your rights

You may ask to access or correct your personal data, limit how we use it, or withdraw consent to marketing messages at any time. Some information must be kept because the law requires it.

7. Contact

Email klinik@cahaya.net.my, call 03-8922 1664, or write to No. 9 & 11 (Ground Floor), Jalan Puteri 3A/7, Bandar Puteri Bangi, 43000 Kajang, Selangor. Please mark your request “PDPA”.