At all times during the engagement of our services, Malaysia Healthcare Travel Council (“MHTC”) prioritises the safety of your personal information. We are committed to ensuring your personal information and your sensitive personal information provided to us remain secured and safe from any unauthorised and unwanted access.

This Personal Data Protection Notice sets out how we collect, use, access, transfer, store and handle (“process”) your Personal Information under the Malaysian Personal Data Protection Act 2010.

1. What is Personal Information / Sensitive Personal Information?

1.1.   Under Section 4 of the Malaysian Personal Data Protection Act 2010:

1. personal information (or personal data) means any information that could directly or indirectly help distinguish, identify or contact you.  These may include (but is not limited to) your name, personal contact number, picture, NRIC number, passport number, images recorded by the closed-circuit television (CCTV) or location tracking/GPS information and sensitive personal information;
2. sensitive personal information (or sensitive personal data) means any personal information consisting of information relating to your physical or mental health or condition, your medical history, allergies and diagnostics.

2. Where do we get your Personal Information?

2.1. MHTC collects your personal information directly from you or indirectly from your legal representatives (family members or next of kin), agents (such as medical tourism agents), outsourcing partners, etc, when you submit any completed enquiry forms or registration forms to us through various means, including online and physical copies at public venues or any other premises, web analytics services such as Google Analytics and comments and shares you posted about MHTC on social media.

2.2. By providing your or another individual’s personal information to us, you or the person which you are representing consent to our process of the personal information. If you do not consent for us to process the personal information, you may refrain from providing us with personal information of you or the person which you are representing.

3. Why do we collect Personal Information?

3.1 Subject to any laws and regulations (including guidelines and/or by-laws) imposed on us, we process your personal information to undertake your requested commercial transactions, including (but not limited to):

1. performing a contract to which you have entered with MHTC;
2. fulfilling your request of entering into a contract with our affiliated hospitals and/or any other medical healthcare facilities;
3. to administer and communicate with you in relation to our services, webinars, talks, and/or events;
4. for collaborations with a third party to advertise and market products and services to you
5. to conduct internal marketing analysis and customer patterns and choices;
6. to comply with MHTC’s legal obligations in the course of our business;
7. to optimise the customer and user experience of MHTC sites;
8. for MHTC’s internal records management;
9. to allow affiliated hospitals and/or any other medical healthcare facilities to contact you for further enquiries and/or performance of the relevant contract;
10. to support research and innovation of our products and services;
11. for insurance purposes;
12. to send you season’s greetings, special occasion messages or other similar communications;
13. to ensure the contents on MHTC’s website are up to date and represented in the most effective manner for you and your computer and/or device
14. for internal investigations, audit or security purposes;
15. to create a more personalised experience for you to enhance customer experience;
16. to store and carry out data analytics processes; and
17. for other legitimate business purposes.

3.2. You are obligated to provide us with the personal information which we have requested for unless stated otherwise. Should you fail to provide us with such requested information, we may be unable to process your request, enquiry and/or provide you with our services.

3.3. Where you have consented to receive any marketing or promotional updates from MHTC and wish to opt-out from our updates, you may select the “unsubscribe” option provided in MHTC’s email blasts or contact us at our details below.

4. Disclosure of Personal Information

4.1. Entities within MHTC

Your personal information may be transferred to entities (in or outside of Malaysia) within MHTC in the provision of any services related to the purposes stated above. Access to your personal information shall be limited to our staff, employees and/or agents who are contractually required by their scope of work to process your personal information.

4.2.   Disclosure to Third Parties

Your personal information (including sensitive personal data and non-sensitive data) may be processed by relevant third parties (in or outside of Malaysia) pursuant to the relevant contractual relationship. For example, we may appoint third-party providers to engage in the purposes stated above.

This includes (but is not limited to) disclosure to:

1. consultants;
2. contractors;
3. professional advisors;
4. service providers;
5. conference/training/event organisers;
6. travel agencies;
7. hotels;
8. airline companies;
9. rehabilitation and well-being centres;
10. technology and healthcare service providers;
11. insurance companies;
12. law enforcement agencies, including the local police;
13. relevant government authorities, statutory authorities i.e. Ministry of Health;
14. relevant accreditation bodies such as the Malaysian Society for Quality Health;
15. local council and industry regulators;
16. our affiliates who may jointly provide the service requested for (such as third-party hotels, transportation services, our affiliated hospitals and our other affiliated healthcare providers.

4.3.   In the event of a proposed or actual sale of a business, disposal, acquisition, merger or re-organisation, your personal information may be required to be disclosed or transferred to a third party as a result of or to facilitate the aforementioned events.

4.4.   Transfer of your personal information outside Malaysia.

1. It may be necessary for us to transfer your personal information outside Malaysia if any of the third parties mentioned above are located or have processing facilities in countries outside of Malaysia.
2. By providing us with your or another individual’s personal information, you or the individual which you are representing consent to us transferring your or his/her personal information outside Malaysia to such third parties in order to undertake the purposes stated above. 
3. We shall implement strict standards and security to ensure that such third parties are contractually bound to safeguard your personal information and can only process your personal information under our instructions and/or request.

5. What happens when you access our website?

5.1. Websites

Our website may provide links to other sites for your ease of convenience. Our Personal Data Protection Policy applies solely to MHTC’s website and does not apply to any third party websites. We recommend you to read and understand their respective Personal Data Protection Policy if you visit any linked websites.

5.2. Location enabled products or applications

We may utilise data analytic tools to help us build and improve on our customer experience by collecting your information.

5.3. Cookies

Our website may use cookies to help remember your preferences and habits. A cookie is a text file that contains an ID unique to your computer and/or device and it is stored in your computer. Each time when you visit a website that uses a cookie, your cookie will be exchanged to the network server (website). This in turn helps a website to identify you and suggest information based on your preferences and your habits online.

6. Your rights of access and correction

At all times during the processing of your personal information, you are entitled by right to access, correct and update any of your personal information. Should you wish to do so, you may contact us at our contact information set out below. Please allow us reasonable time to respond and effect any requested changes.

7. Limiting the processing of Personal Information

If you would like to make further enquiries on how to limit the processing of your personal information, make a complaint or have further enquiries regarding the processing of your personal information, you may contact us at our contact information set out below.

8. Changes to this Personal Data Protection Notice

We may review and update this Personal Data Protection Notice from time to time and without prior notice. Any changes made will supersede any and all previous versions. We encourage you to check our Personal Data Protection Notice page before you submit additional personal data to ensure that you are aware of the latest version.

9. Email Communication

It is our usual practice to send all official communications between ourselves and clients or other third parties using email accounts from the domains “@MHTC.org.my”. We have a strict policy of NOT issuing unsolicited emails and DOES NOT issue email soliciting engagements. Any such email purporting to be from us is a case of identity theft by a person or persons unknown to us. If you have received an email from any other domain, that communication does not represent and/or relate to our official business and neither will it be deemed to be endorsed by us. We are not liable for the content of such communications, or for the consequences of any actions taken based on such communications, regardless of any claims of association with us or any of our partners.

10. Questions and contact information

You may contact our [Customer Service Officer] at:

Malaysia Healthcare Travel Council

Call Centre: +603 2726 8688

Toll Free- Inside Malaysia: 1-800-188-688

Email: callcentre@MHTC.org.my