Privacy Policy

Carewell Dental Clinic ("we", "our", or "the Clinic") is committed to protecting your personal information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Information We Collect

We collect information you provide directly to us, including:

• Personal identification: Full name, date of birth, gender, identity card or passport number
• Contact details: Phone number, WhatsApp number, email address, home or work address
• Medical and dental information: Dental history, treatment records, X-rays, diagnoses, medications, allergies, and clinical notes
• Insurance and panel details: Panel provider name, membership or policy number, eligibility status
• Appointment information: Date, time, service requested, booking notes
• Payment information: Payment method and transaction records (we do not store full card details)
• Technical data: IP address, browser type, device information, and pages visited on our website

2. How We Use Your Information

We use the information collected for the following purposes:

• To schedule, confirm, and manage your dental appointments
• To provide and improve dental treatment and clinical care
• To process insurance and panel claims on your behalf
• To send appointment reminders via WhatsApp, SMS, or email
• To maintain accurate and complete dental records as required by Malaysian law
• To respond to your enquiries and feedback
• To comply with legal, regulatory, and professional obligations
• To improve our website and services through analytics

3. Legal Basis for Processing

We process your personal data on the following lawful bases under the PDPA 2010:

• Consent: Where you have given explicit consent for specific uses
• Contractual necessity: To fulfil our obligations in providing dental services to you
• Legal obligation: Where processing is required to comply with applicable laws
• Legitimate interests: For operational purposes such as appointment management and service improvement

4. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with:

• Panel insurance providers: To process claims, verify eligibility, and obtain authorisation
• Dental laboratories: To fabricate crowns, dentures, aligners, or other dental appliances (shared anonymously where possible)
• Specialist referrals: Where your treatment requires referral to a specialist, with your prior consent
• Technology service providers: Such as Google (for Calendar and Gmail services used for appointment management) under appropriate data processing agreements
• Regulatory authorities: Where required by Malaysian law, court order, or regulatory authority

5. Data Retention

We retain your dental records and personal information for a minimum of 7 years from your last visit, in compliance with Malaysian healthcare regulations. After this period, data is securely destroyed. Appointment booking data collected via the website is retained for 2 years for operational purposes.

6. Your Rights Under PDPA 2010

You have the following rights regarding your personal data:

• Right to access: Request a copy of personal data we hold about you
• Right to correct: Request correction of inaccurate or incomplete data
• Right to withdraw consent: Withdraw consent for specific processing activities (note: this may affect our ability to provide services)
• Right to be informed: Know how your data is being used

To exercise any of these rights, please contact us at ✉️ carewellclinickl@gmail.com or via WhatsApp at 📱 +60 18-299 7531. We will respond within 21 days.

7. Cookies and Website Analytics

Our website uses cookies to improve your browsing experience. These include essential cookies (required for the site to function), and optional analytics cookies. You may disable cookies via your browser settings, though this may affect website functionality. We currently use basic analytics to understand website traffic. We do not use advertising cookies.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include secure HTTPS connections, restricted staff access to clinical records, and regular security reviews. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

9. Third-Party Links

Our website may contain links to third-party websites (such as insurance panel websites or social media). We are not responsible for the privacy practices of these external sites and encourage you to review their privacy policies independently.

10. Children's Privacy

We provide paediatric dental services and collect information about child patients as necessary for their treatment. Such information is collected with the consent of a parent or legal guardian. Parents or guardians may exercise data rights on behalf of their children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised effective date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact: