Legal
Privacy Policy
How we collect, use and protect your personal data when you reach out to or receive care from OneHealth Clinic.
Effective 10 July 2026
Who we are
This privacy policy explains how OneHealth Clinic & Surgery (Sunrise Edenland Sdn Bhd), trading as OneHealth Clinic ("OneHealth", "we", "us"), collects, uses and protects your personal data in line with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
Information we collect
We may collect your name, identification number (NRIC or passport), date of birth, and contact details (phone, WhatsApp, email) when you enquire, book, or receive care.
When you receive care from us, we collect health information relevant to your treatment, including medical history, symptoms, diagnosis, treatment records and medication history, as well as appointment details, billing and payment records, and insurance information where applicable.
When you message us on WhatsApp or submit an enquiry, we collect the details you provide so we can respond and arrange your care. Like most websites, we may also collect general technical information such as your IP address, browser type and the pages you visit.
How we use your information
We use your information to respond to enquiries, arrange and provide medical care, keep your clinical records, send appointment reminders and follow-ups, process billing, payments and insurance claims, and meet our legal and professional obligations.
We do not sell, rent or trade your personal data.
How we protect your information
We take reasonable steps to keep your personal data secure and limit access to those who need it to provide your care.
How long we keep your information
We keep your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by Malaysian medical record retention laws.
Sharing your information
We may share your information with healthcare providers involved in your care, and where required to do so by law, a court order, or a regulatory authority. Any third parties who process data on our behalf are required to protect it.
Your rights
Under the PDPA you may request access to or correction of your personal data, and you may withdraw consent to certain uses. To make a request, contact us using the details below.
Contact us
For any questions about this policy or your personal data, message us on WhatsApp and we will help you.