Infinite Imaging Center Cyberjaya

Effective Date: May 2024

1. Collection of Personal Data

We collect personal data from you when you interact with us, including but not limited to:

Directly from you: When you register for our services, fill out forms (online or physical), make inquiries, provide feedback, or communicate with us via phone, email, or in person.

From third parties: Such as referring general practitioners (GPs), medical centers, insurance providers, or other healthcare professionals, with your consent or as permitted by law.

Automatically: Through your use of our website and digital platforms, including IP addresses, browser type, operating system, and browsing activity.

The types of personal data we may collect include:

Identification details: Name, NRIC/passport number, date of birth, gender, nationality, contact information (address, email, phone number).
Medical and health information: Medical history, diagnostic reports (including CT Angio and Calcium Scoring results), referral letters, and other health-related data necessary for providing our imaging services.
Financial information: Payment details for services rendered.
Other information: Any other information you voluntarily provide to us.

2. Purpose of Collection and Use of Personal Data

We collect and use your personal data for the following purposes:

To provide healthcare services: Including scheduling appointments, performing diagnostic imaging procedures (e.g., CT Angio, Calcium Scoring), generating reports, and communicating results to you and your referring healthcare professionals.
For patient management: To maintain accurate patient records, manage your appointments, and facilitate continuity of care.
For billing and payment processing: To process payments for our services and manage insurance claims.
For communication: To respond to your inquiries, provide information about our services, and send appointment reminders or other relevant communications.
For marketing and promotional activities: To inform you about our services, promotions, and health awareness campaigns, with your consent. This includes targeted advertising on platforms like Facebook and Instagram.
For internal operations: Including quality improvement, statistical analysis, research (anonymized or aggregated data), staff training, and compliance with internal policies and procedures.
For legal and regulatory compliance: To comply with applicable laws, regulations, legal processes, and governmental requests, including those related to healthcare and data protection.
For safety and security: To ensure the safety and security of our premises, patients, and staff.

3. Disclosure of Personal Data

We may disclose your personal data to the following parties, where necessary and appropriate, and in compliance with the PDPA:

Referring healthcare professionals: Your GPs, specialists, or other medical practitioners involved in your care.
Other healthcare providers: For referral purposes or continuity of care, with your consent.
Insurance companies and third-party payers: For billing, claims processing, and payment purposes.
Service providers: Third-party vendors, consultants, and other service providers who perform services on our behalf, such as IT support, data storage, and marketing services. These providers are contractually obligated to protect your data and use it only for the purposes for which it was disclosed.
Governmental and regulatory authorities: As required by law or to comply with legal obligations.
Affiliates and business partners: In the context of co-marketing initiatives (e.g., with Philips Malaysia), where such disclosure is necessary for the stated purposes and with appropriate safeguards.
In an emergency: To protect your vital interests or the vital interests of another person.

We will not sell, rent, or lease your personal data to third parties for their independent marketing purposes without your explicit consent.

4. Consent

By providing your personal data to Infinite Imaging Healthcare Centre, you consent to the collection, use, and disclosure of your personal data in accordance with this Privacy Policy. Where required by law, we will obtain your explicit consent for specific purposes, such as direct marketing.

You have the right to withdraw your consent at any time by contacting us. Please note that withdrawing consent may affect our ability to provide you with certain services.

5. Security of Personal Data

We implement appropriate administrative, technical, and physical security measures to protect your personal data against unauthorized access, collection, use, disclosure, copying, modification, disposal, or similar risks. These measures include:

Access controls: Restricting access to personal data to authorized personnel only.
Data encryption: Encrypting sensitive data where appropriate.
Secure systems: Using secure networks and systems to protect against cyber threats.
Staff training: Regularly training our staff on data protection and privacy best practices.

Despite our best efforts, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

6. Retention of Personal Data

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations (e.g., medical record retention periods), and to resolve disputes or enforce our agreements. Once your personal data is no longer required, we will securely dispose of it in a manner that prevents unauthorized access.

7. Your Rights

In accordance with the PDPA, you have the following rights regarding your personal data:

Right to access: You have the right to request access to your personal data held by us.
Right to correction: You have the right to request correction of any inaccurate, incomplete, or outdated personal data.
Right to withdraw consent: You have the right to withdraw your consent to the processing of your personal data for specific purposes.
Right to prevent processing for direct marketing: You have the right to request that we stop processing your personal data for direct marketing purposes.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided below.

8. Links to Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on our website with a revised effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer at:

Data Protection Officer
Infinite Imaging Healthcare Centre
No. 1-G, Nadayu Square, Cyber 8, 63000 Cyberjaya, Selangor
Email: info@infiniteimaging.com.my
Phone: +60 12-939 0887

Thank you for trusting Infinite Imaging Healthcare Centre with your personal data.