We at ACC Evesuite Medical Centre, Ara Damansara respect your right to privacy and we respect all Personal Information you provide to us.
We are committed to protecting all Personal Information kept by us. We are bound by the Personal Data Protection Act 2010 (“PDP Act”) and all other applicable laws in Malaysia in respect of privacy protection which set out a number of principles concerning Personal Information and consumer protection in Malaysia.
For the purpose of this Privacy Policy:
“Authorised Third Parties” means our contractors, agents or third party suppliers or service providers with whom we enter into an agreement.
“Personal Information” means any personal information relating to any individual that the individual has provided to us or made available to us.
“Sensitive Personal Information” comprises information as to the individual’s physical or mental health or condition, political opinions, religious beliefs or other beliefs of a similar nature, commission or alleged commission of any offence, or any other Personal Information designated as such.
“Services” comprises any communications, information or other products or services provided by us.
“We”, “us” or “our” means collectively, ACC Evesuite Medical Centre, group of companies incorporated in Malaysia and having its registered address at A-G-01, A-G, 02, Jalan PJU 1A/41, Ara Damansara, 47301 Petaling Jaya, Selangor, its subsidiaries and associate companies and all other entities operating under the brand name of ACC Evesuite Medical Centre.
1.1 We may obtain your Personal Information from the following sources, where applicable, or other sources which we may see fit from time to time:
information provided or submitted by you through, amongst others, enquiry form, waiting list form, school events/trips form, parent consent form, survey form, student profile form;
publicly available or publicly accessible information; and
such other written or verbal communications or documents delivered to us prior to and during the course of our dealings with you.
1.2 The types of Personal Information we may obtain about you are:
contact information;
business contact information;
username and password to access our Services;
financial information;
employment information;
medical records;
social media identifier;
other information (such as shopping behaviour and preferences, language preference, age, date of birth, gender and family status)
1.3 We also may obtain your Personal Information from publicly available information systems and reporting agencies in connection with our contract with you.
1.1 We may obtain your Personal Information from the following sources, where applicable, or other sources which we may see fit from time to time:
the delivery of relevant notices, appointment reminders, or services to you;
to enrol and/or register you as a patient at our facility;
to manage and/or process your appointment bookings, consultations, and treatment plans, including other services
to notify you of changes to our services, operating hours, or offerings;
to enable us to supply you with the healthcare services and information you have requested;
patient relationship management and continuity of care;
those purposes specifically provided for in any particular service offered by us;
verification checks as may be determined necessary or appropriate;
our internal record keeping and medical documentation;
collection of outstanding payments and/or fees;
prevention of crime, including but not limited to fraud, money-laundering, and bribery;
meeting legal or regulatory requirements relating to our provision of healthcare services, including disclosures required under applicable law, regulation, court order, or guideline (including Ministry of Health directives);
conducting marketing activities in connection with our services, where you have consented;
research, benchmarking, and statistical analysis purposes to develop and evaluate healthcare service quality;
to coordinate care planning and support between our medical team and, where relevant, referring practitioners;
to review treatment progress and assessment results to monitor your response to care;
feedback and enquiry purposes in relation to the services we offer;
for our other legitimate business activities; and
for such other purposes in relation to your relationship with us as a patient.
2.1 Personal data provided to us will, generally, be kept confidential. However, you consent and authorise us to disclose your personal data to the following categories of parties where necessary:
any person to whom we are compelled or required to disclose under law, or in response to a legitimate instruction from a competent authority or government agency;
pursuant to an order of a court of competent jurisdiction;
any of our related entities, including those established in the future;
where applicable, third parties who provide related services in connection with our operations, such as insurance providers, the Ministry of Health (MOH), referring specialists or cardiologists, diagnostic laboratories, and pharmacies;
government agencies, statutory authorities, and industry regulators;
our external auditors, consultants, accountants, lawyers, or other financial or professional advisers; and
other Authorised Third Parties engaged to support our operations.
We will only disclose the minimum amount of information necessary for the purpose, and we will take appropriate safeguards to protect the integrity and security of your personal data throughout.
3.1 General Principle
(a) We process personal data provided to us when you register, book an appointment, or express interest in our services, with your specific consent. (b) We may use your personal data for the Purposes listed above.
3.2 Notice and Choice Principle
If you provided personal data to us prior to this Policy, you may contact us using the details below to find out what data we hold and how it is used.
We will not process your personal data without your prior consent, except for the Purposes or where required or permitted under Malaysian law.
You may opt out of having your data used for purposes not directly related to your care at the point we collect it. If you do not wish to receive promotional updates, you may unsubscribe via the link in our emails or by contacting us directly. Please note that opting out of certain data uses may limit our ability to provide specific services to you.
3.3 Disclosure Principle
We will not sell or rent your personal data to third parties. Other than as set out in this Policy, we will not disclose your personal data to any third party without your consent.
We may work with Authorised Third Parties to fulfil the Purposes or to provide part of our services to you (e.g. laboratory partners, referral specialists). These parties are only permitted to process your data for the limited purpose of providing that specific service, on a strictly confidential basis.
Where necessary, your data may be transferred to service providers located outside Malaysia (e.g. cloud storage providers). In such cases, we will take reasonable steps to ensure your data continues to be protected in accordance with this Policy.
3.4 Security Principle
(a) We have implemented security policies and technical measures to protect your personal data from unauthorised access, misuse, disclosure, modification, or loss. All employees and data processors with access to your data are obligated to maintain its confidentiality. (b) Your data is stored and backed up securely, accessible only to authorised personnel. (c) Safeguards include physical measures (e.g. restricted access to records rooms), organisational measures (e.g. access on a need-to-know basis), and technological measures (e.g. passwords, encryption).
3.5 Retention Principle
We will retain your personal data for as long as the purpose for which it was collected remains valid, and thereafter for a period consistent with Malaysian medical records retention requirements, or any other period required or permitted by law.
3.6 Data Integrity Principle
(a) We take reasonable precautions to ensure the personal data we hold is accurate, complete, and up to date. Accuracy depends significantly on the information you provide to us. (b) You have the right to access your personal data, subject to exceptions permitted by law. Requests may need to be submitted in writing, and a fee may apply for retrieval where permitted. (c) We reserve the right to decline a request for access, with a written explanation for the refusal, where permitted by law.
3.7 Access Principle
(a) You may access your personal data held by us and request corrections for accuracy and completeness. (b) You may request removal of your data from our records at any time; however, please note this may affect our ability to continue providing you with care.
4.1 As a healthcare provider, we collect and process health information, medical history, and treatment records, which are classified as Sensitive Personal Data under the PDPA. We will obtain your consent before processing this data, except where processing without consent is permitted under Malaysian law (e.g. for medical treatment purposes or legal obligations).
4.2 We will only process your Sensitive Personal Data for purposes directly connected to your care, our legal obligations, or other circumstances permitted under Malaysian law.
5.1 When you visit our website, our servers may automatically record anonymous information such as the time, date, and pages requested. This helps us improve our website’s structure and performance. We may use Authorised Third Parties to analyse this anonymous data.
5.2 Where our website requires you to log in or submit personal data (e.g. to book a consultation), this information is used solely to provide the service requested. You are responsible for keeping your login credentials confidential.
6.1 We collect IP addresses as part of standard internet session management and for security purposes.
6.2 Our website may use cookies to identify and interact more effectively with your browser, improving your experience and login convenience. You may configure your browser to refuse, reject, or delete cookies at any time.
Interest Based Advertising is a way of making advertisements more relevant to the customer based on Personal Information provided by the customer. In order to provide the customer with Interest Based Advertising, we may collect information about a customer’s activities and use that information to associate the customer with one or more pre-defined interest categories. We may periodically provide you advertisements that are tailored to your interests.
(a) you have any questions in relation to this Privacy Policy; or
(b) for access to, or correction of, your Personal Information or limit the processing of your Personal Information upon payment of a prescribed fee;
To our Personal Data Protection Officer by post as set out below:
Postal Address: Data Protection Officer
ACC Evesuite Medical Centre A-G-01, A-G, 02, Jalan PJU 1A/41, Ara Damansara, 47301 Petaling Jaya, Selangor, acc-eve@acc-evesuite.my , 03-7886 4916 Operating hours for written requests: 8:30AM–5:00 PM, Monday to Friday
-end-
Copyright 2026 @ Qualitas Health (KKLIU 1855/2026). All Rights Reserved
