This policy explains how MH Clinic collects, uses, discloses and protects personal data when you visit mhclinic.com.my, send us an enquiry, or attend a consultation at one of our clinics. MH Clinic is operated by Maxenta Cosmeceuticals Sdn Bhd (Company No. 201401043850 / 1120036-H). This policy is issued in accordance with the Personal Data Protection Act 2010 of Malaysia (“PDPA”).

1. Personal Data We Collect

Details you give us

When you submit an enquiry form, message us on WhatsApp, call us, or book a consultation, we collect your name, phone number, email address, preferred branch, and whatever you choose to tell us about your hair or scalp concern.

Clinical information

If you attend a consultation, our doctors record medical history, assessment findings and treatment details as part of your patient record. That record is held under medical confidentiality and is managed separately from this website.

Technical information

When you browse this website we collect technical data such as your IP address, browser and device type, the pages you view and the link that brought you here. This is collected through cookies and analytics tools.

2. How We Use Your Personal Data

• To respond to your enquiry and arrange a consultation.
• To confirm, reschedule or follow up on an appointment.
• To provide care and keep accurate clinical records.
• To answer questions and handle feedback or complaints.
• To understand how this website is used and improve it.
• To send you information about our services, where you have agreed to receive it. You can withdraw that agreement at any time.

3. Why We Are Allowed To Process It

For enquiries and marketing we rely on the consent you give when you submit your details or opt in. For care provided at the clinic we also process personal data because it is necessary to provide the medical service you have asked for, to perform our obligations to you, and to comply with the record-keeping duties that apply to medical practice in Malaysia.

Providing your personal data is voluntary. If you choose not to provide the details marked as required on an enquiry form, we may not be able to respond to you or arrange a consultation.

4. Who We Share It With

We do not sell your personal data. We may disclose it to:

• the doctors, nurses and clinic staff involved in your care;
• service providers acting on our instructions, such as our website host, messaging and email providers, and analytics providers;
• our professional advisers, where needed to obtain advice;
• regulators, government bodies or law enforcement, where we are required or permitted by law to do so.

Where a service provider operates outside Malaysia, we take reasonable steps to require protection comparable to that required by the PDPA.

5. Marketing Messages

We send service information and promotional messages only to people who have agreed to receive them. Every message gives you a way to stop receiving them, and you can also ask us to stop at any time using the contact details below. Withdrawing consent to marketing does not affect the care we provide.

6. Cookies And Analytics

This website uses cookies and similar technologies to keep the site working, remember your preferences and measure how the site is used. Analytics cookies tell us things like which pages are read and how visitors arrive, in aggregate.

You can block or delete cookies in your browser settings. Some parts of the website may not work as intended if you do.

7. Security

We apply reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access, alteration or disclosure, and we require our service providers to do the same. No transmission over the internet can be guaranteed to be completely secure, so please do not send sensitive clinical details through the website enquiry form.

8. How Long We Keep It

We keep personal data for as long as it is needed for the purpose it was collected for, and for as long as we are required to keep it by law. Medical records are retained for the period required of medical practitioners in Malaysia. Data that is no longer needed is deleted or anonymised.

9. Your Rights Under The PDPA

Subject to the exceptions in the PDPA, you may:

• ask for access to the personal data we hold about you;
• ask us to correct personal data that is inaccurate, incomplete or out of date;
• withdraw your consent to our processing of your personal data;
• ask us to limit the processing of your personal data for marketing purposes;
• ask us about the parties to whom your personal data may have been disclosed.

To make a request, contact us using the details below. We may need to verify your identity before we act on it, and a reasonable fee may apply to a data access request as permitted by the PDPA. We will respond within the period allowed by the PDPA.

10. Links To Other Websites

This website may link to websites we do not operate, such as social media pages. We are not responsible for their content or their privacy practices. Please read their own policies before giving them your personal data.

11. Minors

Our services are intended for adults. Where treatment or an enquiry involves a person under 18, we require the consent and involvement of a parent or legal guardian.

12. Changes To This Policy

We may update this policy from time to time. The current version is always published on this page, and the date at the top shows when it was last updated.

13. How To Contact Us