Privacy Policy
MRIC Healthcare Sdn Bhd (“MRIC Healthcare”, “Company”, “we”, “our” or “us”) respects your privacy. This Privacy Policy explains how we access, collect, use, store, share and protect your information when you visit https://mrichealthcare.com (the “Website”), use the SIHAT App on mobile and web application (the “App”), or take part in the Hidup Sihat Registry (the “Registry”). It should be read together with our Notice under the Personal Data Protection Act 2010 (“PDPA Notice”). By using the Website, the App or the Registry, you agree to the practices described here.
1. Information We Collect
We collect different types of information to provide and improve our services. The types of information we collect include:
a. Personal Information
Information that identifies you, which you provide to us, such as:
Name, identity card or passport number, date of birth and age, gender, ethnicity, nationality, marital status and preferred language
Email address, phone number and mailing or residential address
Emergency contact details
Education, occupation, household income range, living arrangement and social support
Account log-in details
Account log-in details
Any other information you voluntarily submit, including messages and emails you send us
b. Health Information
When you use the App or take part in the Registry, we access and collect health information that you, or a caregiver or family member acting for you, enter or upload. This is sensitive personal data. It includes and is not limited to:
Heart rate, resting heart rate, heart rate variability, oxygen saturation (SpO2), body temperature, active calories, height, weight, blood glucose, blood pressure
Chronic medical conditions and medical history, previous surgeries, and family medical history
Allergies, current medications, traditional medicines and health supplements
Immunisation and preventive screening status
Lifestyle information such as smoking, alcohol use, physical activity, nutrition and sleep
Hospital admissions, emergency department visits and intensive care admissions
Information about your caregivers and the care and support services you use
Medical records and documents you upload, such as laboratory reports
Records of tele-consultations with medical practitioners through the App
If applicable: health and wellness data synced from a fitness application or wearable device that you choose to connect, such as steps or heart rate
c. Device and Location Information
When you use the App we may collect your device model, operating system, app version, crash logs and if location is enabled: your approximate or precise location. You can turn location off in your device settings, but some App features may then not work.
d. Non-Personal Information
When you visit the Website we may automatically collect non-personal information, including IP address, browser type, operating system, pages visited, referring website and other analytical data.
e. Cookies and Tracking Technologies
We use cookies, web beacons, and similar technologies on our Website to improve your experience . You can manage cookie settings through your browser.
2. How We Collect Your Information
Directly from you when you register, fill in forms, enter health data, upload documents, or contact us
From a caregiver or family member who completes a form on your behalf, who must be authorised by you
From a connected wearable or fitness application, only if you choose to connect it
Automatically from your device or browser when you use the Website or the App
From healthcare providers or other third parties, where you have authorised them to share your information with us
3. How We Use Your Information
We use the information we collect to:
Provide, manage and maintain our services, your account and your participation in the Registry
Record and organise your health information so that you, and the healthcare providers you authorise, can view it
Understand the health, lifestyle and support needs of individuals and communities, using statistics and research based on aggregated or de-identified information
Respond to your inquiries and customer service requests
Personalise your experience and analyse Website and App performance and trends
Keep our services secure and prevent fraud and misuse
Comply with legal and regulatory obligations
Send you service messages, and, using your contact details only, promotional emails or newsletters (you can opt out at any time)
We do not use your health information for advertising, and we do not sell it.
4. How We Share Your Information
We do not sell, trade or rent your personal information. We share it only in the following cases:
Healthcare Providers: With medical practitioners, clinics and hospitals, where you ask us to or authorise us to.
Service Providers: With trusted third parties who help us run the Website, the App and the Registry, such as hosting, analytics, communications and support providers. They may use your information only to provide services to us.
Related companies and business partners: With our related corporations and partners, for the purposes described in the PDPA Notice.
Insurers and employers: Only where you ask us to or authorise us to.
Legal requirements: With government departments, regulators and other bodies, if required by law, regulation or government request.
Professional advisors: With our legal, financial and other professional advisors, where needed.
Business transfers: In a merger, sale or transfer of assets, your information may be part of the transaction, and we will tell you if this changes how your information is handled.
We may transfer your information to places outside Malaysia, for example where our service providers host data. When we do, we take steps to keep it protected.
5. Data Retention
We keep your information only for as long as we need it for the purposes in this Policy, or as required by law.
Account and Registry data: We keep your personal and health information while your account is active or you remain in the Registry, and for 7 years after your last activity or until you ask us to delete it.
After you ask us to delete your data: We delete or anonymise it within 30 days, except for the data described below.
Data we may need to keep: We may keep certain information for longer for legitimate reasons: to comply with legal or regulatory requirements (including record-keeping rules for medical records, for 7 years, to resolve disputes, and for security and fraud prevention. We will keep only what is needed and will not use it for other purposes.
Backups: Deleted data may remain in secure backups for up to 90 days until they are overwritten.
Aggregated or de-identified data: Information that can no longer identify you may be kept for statistics and research.
Website data: Analytics and cookie data are kept for up to 3 months.
6. Deleting Your Account and Data
You can ask us to delete your account and the data linked to it at any time.
By email: Write to hello@mrichealthcare.com with the subject “Delete my SIHAT account and data”. Include the name, email address or phone number you registered with so we can verify the request.
Web form: Via the “Contact Us” form.
We will confirm your request and complete it within 30 days. Deleting your account removes your personal and health information from the App and the Registry, apart from the data we are required or permitted to keep as described in Section 5. If you only want to stop us using your data, you can instead withdraw your consent in writing, as explained in Section 8.
7. Data Security
We use security measures to protect your information, including but not limited to encryption in transit and at rest, access controls limited to authorised staff, and regular security reviews. No data transmission over the internet is 100% secure, so we encourage you to take precautions when sharing personal data online, such as keeping your log-in details private.
8. Your Rights and Choices
Under the Personal Data Protection Act 2010 you have the right to:
Request access to, and correction of, your personal information
Withdraw your consent, in full or in part, by written notice
Opt out of marketing communications and limit direct marketing
Ask us to delete your account and data (see Section 6)
Disable cookies through your browser settings
Request information about how your data is used
We may charge a prescribed fee for access or correction requests, and may refuse a request as the Act allows, in which case we will tell you why. If you withdraw consent, we may not be able to keep providing some services. To use any of these rights, contact us as set out in Section 12.
9. Information About Other People
If you give us information about another person, such as when you complete a form for someone you care for, you must be authorised to do so and must make sure they have been informed of this Policy and the PDPA Notice.
10. Third-Party Links
The Website and the App may contain links to third-party sites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies separately.
11. Children’s Privacy
Our Website, the App and the Registry are intended for adults aged 18 and over, and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with information, please contact us and we will remove it.
12. Contact Us
MRIC Healthcare Sdn Bhd,
C-4-3 Radius Business Park Jalan Teknokrat 2,
Cyber 4 63000,
Cyberjaya
Customer Service: hello@mrichealthcare.com, +6012 349 4399
C-4-3 Radius Business Park Jalan Teknokrat 2,
Cyber 4 63000,
Cyberjaya
Customer Service: hello@mrichealthcare.com, +6012 349 4399
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Effective Date”, and in the App where the change is significant. We encourage you to review this Policy periodically.
