Privacy Notice (PDPA)

Last updated: 20 September 2026

This notice explains how Klinik NurCahaya (NurCahaya Healthcare Sdn. Bhd.) (“KNC”, “we”) handles personal data under the Personal Data Protection Act 2010 (PDPA). It is provided in English and Bahasa Melayu; if they differ, the English version applies.

1. This website stores nothing about you

• Forms. The appointment, enquiry and feedback forms do not send your details to this website or save them on it. They simply open WhatsApp with your message already typed, and you choose whether to send it.
• No cookies, no advertising trackers. We do not use cookies, advertising pixels or social-media trackers.
• Anonymous statistics. We count page views and button taps (for example “WhatsApp” or “Call”) to improve the site. These counts contain no name, phone number, IP address or device fingerprint and cannot identify you.
• Google Maps. The map on the Contact page is loaded from Google, which may collect data under its own privacy policy.

2. When you contact us on WhatsApp

Messages you send to our WhatsApp numbers — including to Hana, our automated assistant — are received through WhatsApp (Meta) and kept in our clinic systems so that we can answer you, arrange appointments and send you documents you ask for. Before Hana releases a medical document (such as an MC, receipt or lab result) she will ask you to verify your identity. Please avoid sending IC numbers or detailed medical history unless we ask for them.

3. When you use the Klinik NurCahaya app

The app uses your account details (name, email, phone number and IC for verification) to link you to your clinic record, so that you can book appointments and view your own queue status, results and documents. Records are visible only to you and authorised clinic staff.

4. When you visit the clinic

We collect the personal and medical information needed to register and treat you, to bill you or your panel/insurer, and to meet our legal obligations as a private medical clinic. Medical records are kept for the period required by Malaysian law.

5. Who we share data with

Only where needed: your panel, insurer or employer scheme (for claims you ask us to make), laboratories and referral hospitals involved in your care, service providers who run our systems under confidentiality obligations, and authorities where the law requires it. We do not sell personal data.

6. Your rights

You may ask to access or correct your personal data, limit how we use it, or withdraw consent to marketing messages at any time. Some information must be kept because the law requires it.

7. Contact

Email klinik@cahaya.net.my, call 03-8922 1664, or write to No. 9 & 11 (Ground Floor), Jalan Puteri 3A/7, Bandar Puteri Bangi, 43000 Kajang, Selangor. Please mark your request “PDPA”.