Privacy & Policy

Last updated: July 3, 2026

This Notice is issued in accordance with the Personal Data Protection Act 2010 (“PDPA”) and its 2024 amendments. It explains how Onco Life Centre Sdn Bhd (“we”, “us”, “the Centre”) collects, uses, discloses, and protects your personal data, including sensitive personal data such as health and medical information.

This Notice is available in both Bahasa Malaysia and English; in case of discrepancy, the Bahasa Malaysia version shall prevail as required under the PDPA.

1. Personal Data We Collect

Depending on your relationship with us (patient, next-of-kin/caregiver, website visitor, job applicant, or vendor), we may collect:

• Identification data: full name, NRIC/passport number, date of birth, gender, nationality
• Contact data: address, phone number, email
• Health and medical data (sensitive personal data): medical history, diagnosis, treatment records, test results, prescriptions, next-of-kin/emergency contact details
• Financial data: billing information, insurance details, payment records
• Website/technical data: IP address, browser type, device information, cookies, and usage data collected when you visit oncolifecentre.com
• Other data: information you or your authorized representative choose to provide

We collect this data directly from you, your authorized representatives, referring healthcare providers, insurers, government/regulatory bodies, or publicly available sources.

2. Sensitive Personal Data and Consent

Health and medical information is classified as sensitive personal data under the PDPA. We will only collect, use, or disclose your sensitive personal data with your explicit consent, except where permitted or required by law, such as medical emergencies or statutory reporting obligations.

You may withdraw consent at any time by contacting us using the details in Section 9. However, withdrawal of consent may affect our ability to continue providing treatment or services to you.

3. Purpose of Collection and Use

We use your personal data to:

• Provide medical consultation, diagnosis, treatment, and related healthcare services
• Process billing, insurance claims, and payments
• Communicate with you about appointments, treatment, and services
• Conduct internal audits, quality assurance, and research (using de-identified information where possible)
• Comply with regulatory obligations, including reporting to the Ministry of Health and other authorities
• Send service-related updates (you may opt out of marketing or promotional communications at any time)

4. Disclosure of Personal Data

We may disclose your personal data to third parties who work with us or on our behalf, including:

• Specialists, laboratories, pharmacies, and allied healthcare providers involved in your care
• Insurance companies and third-party payers for claims processing
• Regulatory and government authorities where legally required
• IT service providers, auditors, and professional advisors bound by confidentiality obligations

Some of these parties may be located outside Malaysia. Where we transfer your data overseas, we will ensure that appropriate safeguards are in place and that the receiving party provides an adequate level of protection in accordance with applicable data protection requirements.

5. Consequences of Incomplete Data

If the personal data you provide is incomplete or inaccurate, we may be unable to provide our services to you, including scheduling appointments or delivering treatment.

6. Your Rights

Subject to the PDPA, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for processing of your personal data, including direct marketing
• Request data portability where technically feasible
• Lodge a complaint with us or the Personal Data Protection Commissioner of Malaysia if you believe your data has been mishandled

To exercise these rights, please contact us using the details in Section 9.

7. Retention and Security of Personal Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law, including medical record retention requirements under Malaysian healthcare regulations.

We implement appropriate administrative, technical, and physical safeguards to protect your personal data against unauthorized access, loss, misuse, or disclosure.

In the event of a data breach that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and affected individuals in accordance with applicable legal requirements.

8. Data Protection Officer

In accordance with the PDPA amendments, we  need not appoint a Data Protection Officer (“DPO”) yet as the quantity of sensitive data being processed is still below the defined threshold as stated in the PDPA (Amendment) Act 2024.

9. Contact Us

For any questions, requests, or complaints regarding this Notice or your personal data, please contact:

Email: info@oncolifecentre.com
Phone: +603-2242 3260

10. Changes to This Notice

We may update this Notice from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this Notice periodically.

11. Consent

By submitting your personal data to us, including sensitive personal data such as health information, you consent to its collection, use, and disclosure as set out in this Notice, save where explicit consent is separately required by law.