Privacy Policy

At OneHealth Clinic, we are committed to protecting your personal data and health information. This policy outlines how we collect, use, and safeguard your information.

1. Introduction & Scope

This Privacy Policy applies to all personal information and patient health data collected by OneHealth Clinic ("we," "us," or "our") through our website, in-clinic visits, telephone conversations, WhatsApp communications, and any other interactions.

By using our services, you consent to the data practices described in this policy.

2. Information We Collect

We collect information necessary to provide you with safe, effective, and personalized healthcare services. This may include:

Personal Identification Information: Your name, identification number (NRIC/Passport), date of birth, contact details (phone, address, email).
Health & Medical Information: Your medical history, symptoms, diagnosis, treatment records, medication history, laboratory and test results, vaccination records, and clinical notes.
Transactional Information: Appointment details, billing information, payment records, and insurance data.
Technical Data (from website): When you visit our website, we may collect non-personal data such as your IP address, browser type, and pages visited to improve our site's functionality. This does not personally identify you.

3. How We Use Your Information

Your information is used strictly for purposes related to your healthcare and the operation of our clinic, including:

To provide, coordinate, and manage your medical treatment and care.
To process appointments, payments, and insurance claims.
To communicate with you regarding your appointments, test results, and health reminders.
For internal record-keeping, audit, and clinic administration.
To comply with legal and regulatory obligations under Malaysian law.

We do not sell, rent, or trade your personal or medical information to third parties for marketing purposes.

4. How We Protect Your Information

We implement a variety of security measures to maintain the safety of your personal information:

Secure Storage: Physical records are kept in secured access areas. Electronic records are protected with password security and encryption.
Access Control: Only authorized medical and administrative staff have access to your information, strictly on a need-to-know basis.
Training: Our team is trained on the importance of patient confidentiality and data protection.

5. Sharing of Information

We may disclose your information in the following limited circumstances:

With Your Consent: When you have given us explicit permission.
For Continuity of Care: To other healthcare professionals (e.g., specialists, laboratories, hospitals) directly involved in your treatment, upon your referral.
Legal Requirement: When required to do so by law, a court order, or a regulatory authority.

6. Your Rights

You have the right to:

Request access to the personal and health information we hold about you.
Request corrections to any inaccurate or incomplete data.
Withdraw consent for the use of your data, understanding that this may affect our ability to provide certain services.
Request information on our data protection policies and procedures.

To exercise these rights, please contact us in writing or via the contact details provided on our Contact page.

7. Data Retention

We will retain your personal and health records for as long as necessary to fulfill the purposes outlined in this policy, or as required by Malaysian medical record retention laws.

8. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.

Effective Date: 8 January 2024