Privacy notice

This notice explains how Best Malaysia Healthcare processes personal data under the Personal Data Protection Act 2010, as amended by the Personal Data Protection (Amendment) Act 2024.

What we collect

When you ask for a shortlist or send a message, we collect your name, email address, phone number, state, the type of care you are looking for, timeline, budget and what you write. We ask you not to send medical records, diagnoses or other health details: we do not need them to suggest providers. If you include them anyway, we treat them as sensitive personal data, use them only to reply to you and delete them with your request. We also collect anonymous usage analytics (Google Analytics 4).

Why

To reply to you, to suggest suitable providers, and to improve the site.

Weekly briefing (mailing list)

If you subscribe, we keep your email address only to send the weekly briefing. Every email has an unsubscribe link, or you can ask us through the contact form to remove you; we then delete your address within 30 days. We do not sell or share the list.

Who we share it with

We do not pass your details to any hospital, clinic or provider. Our form processor (Formspree, United States) and analytics provider (Google) process data on our behalf. That counts as a cross-border transfer under section 129 of the PDPA.

How long we keep it

We keep requests and messages for 12 months, then delete them.

Your rights

You can ask to access, correct or port your data, or withdraw your consent, at any time.

Data protection officer

Contact our Data Protection Officer through the contact form, choosing the topic “Data protection / PDPA”. We aim to reply within 21 days.

Last updated 2026-10-31.