If you are reading this Privacy Notice for yourself or on behalf of an individual or body corporate or business enterprise which maintains a contractual relationship or which has dealing with Beacon Wellspa Resort Sdn. Bhd. (“BR”/“we”/“us”), this Privacy Notice is intended to be addressed to, without limitation, the individual officers (including authorised signatories and personnel), directors, shareholders, partners and/or beneficial owners of the body corporate or business enterprise (“the Relevant Individuals”) and the word “you” herein shall be construed accordingly to mean the Relevant Individuals. Please assist to make available this Privacy Notice to the Relevant Individuals in your body corporate or business enterprise. This Privacy Notice relates to the personal data that BR collects about you in relation to the medical services that you have requested or are about to request from us or that have been requested or are about to be requested from BR by our client/potential client whom you represent and are authorised to act on behalf of or whom you are associated with (“the Services”). At BR, keeping your personal data confidential, secure and protected is our priority. In compliance with the Personal Data Protection Act 2010 and the rules and regulations prescribed thereunder from time to time (collectively “the Act”), this Privacy Notice is issued to inform you that your Personal Data (as defined below) is being and/or will be processed by or on behalf of BR as well as to make you aware of your rights in respect of such data.
1.1 Engaging BR to provide the Services;
1.2 Communicating or interacting with us;
1.3 Entering into any transactions or dealing with BR;
1.4 Accessing or browsing the website of BR (beaconresort.com.my); or
1.5 Visiting our hospital and/or our office and/or the office of BR’s clients or attending any sale launches, promotional or other events held by any of BR’s clients; you consent to the processing of your Personal Data by or on behalf of BR in the provision of the Services. The term “processing” shall have the meaning as prescribed in the Act.
2.1 Personal Data shall have the meaning as prescribed in the Act and it shall include information about you, such as your: –
2.1.1 Name, NRIC/Passport no., age & date of birth;
2.1.2 Nationality, race & gender;
2.1.3 Contact details including address(es), telephone/fax/handphone numbers & email address(es);
2.1.4 Job/profession particulars including name and address of company, title/position & income range;
2.1.5 Financial and legal status (including bank account or credit card information and bankruptcy); and
2.1.6 Any other information which may be pertaining to you, your spouse or family members that have been or may subsequently be collected, stored, used and processed by BR from time to time.
2.2 In respect of personal data of similar kinds of third parties such as your spouse and family members, you warrant that you have obtained their consent allowing us to process their personal data and you will extend a copy of this Notice to them.
2.3 You are responsible for ensuring that the Personal Data you provided or will provide to us is accurate, complete, not misleading and kept up to date.
3.1 BR may use and process your Personal Data for the purposes relating to the Services and any matter in connection thereto and for the business activities of BR, which shall include the following: –
3.1.1 To communicate with you;
3.1.2 To respond to any queries and/or comments from you;
3.1.3 To prepare documents or instruments as may be required for the purposes of the Services and such other ancillary work in connection with such purposes including letters, notices, forms, applications, agreements, affidavits or any other documents in whatever form or nature;
3.1.4 To carry out your or your employer’s instruction;
3.1.5 To conduct such surveys to help improve our services;
3.1.6 For our administrative use including historical, creditworthiness and conflict checking purposes;
3.1.7 To provide information to regulatory and governmental authorities in order to comply with statutory and governmental requirements and with BR’s obligations under the law; or
3.1.8 For any other purpose that is required by any law, regulations, guidelines and/or relevant regulatory body (collectively “Purposes”).
3.2 BR may also use and process your Personal Data for other purposes such as:
3.2.1 To send you materials such as season greeting cards, newsletters, articles, write-ups, other updates, and information of events, conferences, talks and seminars;
3.2.2 To provide to potential referees to editors/researchers in legal ranking publications and journals and potential clients who request for referees of past work in our credential statements, tenders and submissions; or
3.2.3 To provide to any bureau or agency established by Bank Negara Malaysia (including the Central Credit Reference Information System [CCRIS]), SME Credit Bureau or any other credit reporting or reference agency. If you do not agree or consent to BR processing your Personal Data for the purposes set out in this Section
3.3 Please notify BR by contacting BR via the contact details set out in Section 5.1 below.
We may obtain or collect your Personal Data directly from you, your employer and/or authorised representative. In addition, we may also obtain or collect your Personal Data from various other sources including but not limited to the following sources:
4.1 Agreements, forms and other documents that you may have signed and/or provided to us and/or to which we have access;
4.2 Our business partners or affiliates and/or other parties which we have dealings with;
4.3 At any events, seminars, conferences or talks held by BR and/or sale launches, promotional or other events held or organised by any of BR’s clients;
4.4 Other legal means and/or searches from the relevant governing authorities/bodies/agencies and/or credit reporting agencies and/or other bodies/agencies which are legally allowed to collect, use and/or process your Personal Data;
4.4 From the cookies used on the website of BR; and/or
4.5 Online search tools.
5.1 Subject to any exceptions under applicable laws, you may at any time request for access to and for correction of your Personal Data kept by us and contact us with any inquiry or complaint in respect of your Personal Data as follows: –
Beacon Wellspa Resort Sdn. Bhd., PT 4049, Mukim Sungai Gumut, Kampung Gumut Tambahan, 44100 Kalumpang, Hulu Selangor.
Telephone No.: 6019- 833 3378
Email: [email protected]
Attention to: The Data Protection Officer
5.2 In accordance with the Act:
5.2.1 We may charge a prescribed fee for processing your request for access or correction; and
5.2.2 We may refuse to comply with your request for access or correction to your Personal Data and if we refuse to comply with such request, we will inform you of our refusal and reason for our refusal.
While we maintain strict confidentiality policy on your Personal Data, we may engage other service or facilities providers to perform functions on BR’s behalf and consequently, we are allowed to disclose your Personal Data to third parties, within or outside Malaysia, such as the following parties (which are not exhaustive): –
6.1 Information technology (IT) and data entry service providers;
6.2 Storage facility providers;
6.3 Our professional advisors, external auditors, accountants, consultants, banks and financial institutions and insurance providers;
6.4 Regulatory and/or statutory authorities/bodies/agencies and/or credit reporting agencies and/or other bodies/agencies in order for BR to comply with statutory and governmental requirements;
6.5 Persons stated in Section 3.2(ii) above; and
6.6 Such other parties as BR deems necessary for the Purposes.
Subject to Section 8 below and subject further to such rights and restrictions as prescribed under the Act, you may at any time limit the processing of your Personal Data including the extent of the Personal Data and/or the purpose for which it is being processed by giving notice in writing to us, delivered by hand or sent by registered post to BR at our address stated in Section 5 above.
All Personal Data supplied by you to us shall be wholly voluntarily on your part and you may withdraw your consent to BR processing your Personal Data. However, if you do not provide or do not consent to BR processing your Personal Data, BR may not be able to: –
8.1 Provide you the Services you require;
8.2 Communicate with you;
8.3 Prepare the relevant agreements and/or any other documents for you;
8.4 Effectively carry out instruction in providing the Services to you; and/or
8.5 Perform or achieve the Purposes as set out in Section 3 above.
As BR’s information technology storage facilities and servers may be located in other jurisdictions, your Personal Data may be transferred to, stored, used and processed in a jurisdiction other than Malaysia. In any event, you understand and hereby consent to the transfer of your Personal Data to any place outside of Malaysia as provided for under the Act.
BR may modify and/or amend the terms of this Notice from time to time without prior notice by placing the updated Notice at our website. Your continued use of BR’s services or interaction or communication with BR following such modifications or amendments to this Notice shall signify your acceptance of such modifications or amendments.
We may request your assistance to procure the consent of third parties whose personal data is provided by you to us and you hereby agree to use your best endeavour to do so.
This Notice is issued in English and Bahasa Malaysia In the event of any conflict between the English and Bahasa Malaysia, the English version shall prevail.
BEACON WELLSPA RESORT SDN BHD