Privacy Policy

Last updated: 14 October 2025

1. Our Commitment to Privacy

OncoCare Medical Malaysia Sdn Bhd (“we”, “us”, “our”) is part of Tamarind Health, a regional healthcare network committed to protecting your personal data.

We comply with applicable data protection and privacy laws in Malaysia, including but not limited to the Personal Data Protection Act 2010 (Malaysia).

This Privacy Policy explains how we collect, use, disclose, protect, and manage your personal data across our clinics, services, and digital platforms.

By providing your personal data to us, you acknowledge and consent to its collection, use, and disclosure as described in this Policy.

2. Scope

This Policy applies to:

  • Visitors to our website and digital platforms
  • Patients, caregivers, and family members
  • Healthcare professionals, employees, and contractors
  • Vendors, suppliers, and service providers
  • Corporate and institutional partners

This Policy should be read together with the Tamarind Health Privacy Policy, available at [tamarindhealth.com/privacy-policy].

3. Personal Data We Collect

Depending on your relationship with us, we may collect:

  • Identity and contact information: name, ID or passport number, address, phone number, email, date of birth, nationality.
  • Health and medical information: medical history, test results, diagnoses, treatment details, prescriptions, and other data related to your care.
  • Administrative and financial information: billing, payment, and insurance claims data.
  • Digital and technical information: IP address, cookies, device identifiers, browser type, analytics data.
  • Employment and professional information: work history, qualifications, and related data for staff or applicants.

We may collect this data directly from you or from third parties such as referring physicians, partner hospitals, insurers, or lawful public sources.

4. Purpose of Collection and Use

Your personal data may be collected, used, or disclosed for purposes including:

  • Providing and managing healthcare and diagnostic services
  • Scheduling and managing appointments, referrals, and follow-ups
  • Processing billing, payments, and insurance claims
  • Conducting laboratory, pharmacy, and allied health services
  • Supporting patient education, wellness, and survivorship programs
  • Managing recruitment, HR, and training matters
  • Conducting audits, quality improvement, and research (where permitted)
  • Fulfilling legal, regulatory, or reporting obligations
  • Communicating updates, programs, or marketing (with your consent)
  • Ensuring security, risk management, and operational integrity

5. Disclosure of Personal Data

We may share your personal data with:

  • Tamarind Health and its affiliated entities
  • Hospitals, laboratories, and specialists involved in your care
  • Service providers and vendors (IT, billing, marketing, data storage, audit)
  • Regulatory bodies, insurers, or authorities as required by law
  • Research and academic collaborators under appropriate safeguards
  • Business partners or successors in mergers, acquisitions, or corporate transactions

All third parties handling data on our behalf must comply with this Policy and applicable privacy laws.

6. Cross-Border Data Transfers

Your personal data may be transferred to or stored in other countries where Tamarind Health operates.

When such transfers occur, we ensure that your data is protected through appropriate legal, technical, and organisational safeguards, and that your consent is obtained where required.

7. Data Retention

We retain personal data only as long as necessary to fulfil the purposes outlined above or as required by local laws and regulations in Malaysia.

Medical records are generally retained for a minimum of seven (7) years from the date of the last entry, or longer where required by law, clinical necessity, or institutional policy.

When no longer required, personal data is securely deleted, anonymised, or destroyed.

8. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal data from loss, misuse, unauthorised access, or disclosure.

These include secure systems, access controls, encryption, and periodic reviews.

However, no data transmission or storage system is completely secure, and we cannot guarantee absolute protection.

9. Access, Correction, and Withdrawal of Consent

You have the right, in accordance with the Personal Data Protection Act 2010 (Malaysia), to:

  • Access the personal data we hold about you
  • Request correction of any inaccurate or incomplete personal data
  • Withdraw your consent to the collection, use, or disclosure of your personal data (subject to legal, regulatory, or contractual restrictions)

Requests should be made in writing to our Data Protection Officer (see Section 12).

We will acknowledge and respond to your request within twenty-one (21) calendar days, or as otherwise permitted under applicable Malaysian law.

10. Use of Cookies and Analytics

Our websites use cookies and analytics tools to improve functionality and enhance your browsing experience.

You may choose to disable cookies through your browser settings, though some site features may not work properly as a result.

11. Third-Party Links

Our website may contain links to external websites operated by third parties.

We are not responsible for their content, security, or privacy practices. You are encouraged to review their privacy policies.

12. Contact Us

If you have any questions, feedback, or complaints about this Policy or how your personal data is handled, please contact:

Data Protection Officer (DPO)

OncoCare Medical Malaysia Sdn Bhd
SPC1 Ground Floor, Thomson Hospital Kota Damansara 11
Jalan Teknologi, Taman Sains Selangor
1, PJU 5, Kota Damansara
47810 Petaling Jaya, Selangor, Malaysia

Email: enquiries@oncocare.sg

13. Policy Updates

We may update this Policy periodically to reflect changes in law, technology, or our operations.

The most recent version will always be available on our website, and continued use of our services constitutes acceptance of any revisions.

14. Local Addendum

This Local Addendum supplements the Tamarind Health Privacy Policy with requirements specific to Malaysia.

Applicable Law: Personal Data Protection Act 2010 (Malaysia)

Regulatory Authority: Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi Malaysia)

https://www.pdp.gov.my/jpdpv2/

Retention Requirements: Medical records are generally retained for a minimum of seven (7) years from the date of the last entry, or longer if required by applicable law, clinical necessity, or institutional policy, in accordance with the Private Healthcare Facilities and Services Regulations 2006.

Advertising License / Regulatory Reference: KKLIU 3124 / EXP 31.12.2026

© 2025 OncoCare Medical Malaysia Sdn Bhd. All rights reserved.

Part of Tamarind Health.

KKLIU 3124 / EXP 31.12.2026