At A.M Clinic, we respect your privacy and are committed to handling your personal information responsibly, lawfully, and transparently. This Privacy Policy explains how we collect, use, store, share, and protect the personal information you provide to us, reflecting the principles set out in the Personal Data Protection Act 2010 (Malaysia), together with the amendments introduced by the Personal Data Protection (Amendment) Act 2024.

This Privacy Policy applies to:

• Visitors to our website (https://amclinic.com.my/) 
• Individuals who submit enquiries through our website, contact forms, or messaging channels
• Individuals who book or request a consultation
• Patients who receive medical aesthetic treatments or healthcare services at any A.M Clinic location

By using our website or providing your personal data to A.M Clinic, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how your information is handled, please refrain from submitting personal data through our digital channels.

The information we collect depends on how you interact with A.M Clinic. We aim to collect only data that is relevant and necessary for clinical and operational purposes.

Personal Identification Information

•  Full name and identification details
• Email address and telephone/mobile numbers
• Date of birth, gender, and age
• Mailing address and contact preferences

Medical and Health Information (Sensitive Personal Data)

• Information submitted voluntarily through enquiry or consultation forms
• Details regarding your aesthetic concerns, skin history, and treatment goals
• Medical history, allergies, current medications, and past aesthetic procedure records
• Before-and-after treatment photographs, where taken as part of your consultation or treatment record

Note: Under the Personal Data Protection Act 2010, health information and biometric data are categorised as sensitive personal data. We process this information with heightened technical and administrative security measures and your explicit consent, including for any use of identifiable photographs beyond your own treatment record, such as marketing or before-and-after galleries.

Website and Technical Information

• IP address, browser type, and operating system
• Device information and network connection details
• Cookies, pixel tags, and website analytics data

Communication Records

• WhatsApp messages and chat logs
• Website contact form submissions
• Emails, phone call logs, and customer service records

We use personal data strictly for legitimate clinical, administrative, and legal purposes connected to A.M Clinic. These include:

•  Clinical Services: Conducting doctor-led assessments, providing personalised aesthetic treatments, and maintaining accurate medical records.
• Appointment Management: Arranging, confirming, reminding, or rescheduling consultations and follow-up reviews.
• Customer Support: Responding to enquiries, providing transparent cost outlines, and addressing feedback.
• Marketing Communications: Sending you promotions or updates where you have agreed to receive them.
• Digital Operations: Optimising website performance, improving navigation, and enhancing digital security.
• Financial Processing: Processing payments, issuing invoices, and maintaining audit logs.
• Legal Compliance: Fulfilling statutory requirements under Malaysian healthcare laws and regulatory frameworks.

We do not process your personal data for unrelated purposes without seeking your prior consent, unless required or permitted by law. If you no longer wish to receive marketing communications, you may opt out at any time using the unsubscribe link provided or by contacting us directly; this will not affect service-related communications about your appointments or care.

We maintain strict patient confidentiality. Your personal information is disclosed only to authorised parties where necessary, including:

• Healthcare Professionals: Clinical staff and aesthetic physicians directly involved in your care.
• Operational Service Providers: IT, web hosting, and appointment system vendors acting under data processing agreements.
• Financial Institutions: Payment gateway and e-wallet providers for secure transaction processing.
• Regulatory Bodies: The Ministry of Health Malaysia (KKM), the Malaysian Medical Council (MMC), or other authorities when required by law.

A.M Clinic does not sell, rent, or trade your personal data to third parties for commercial marketing.

Some of the service providers and platforms we use, including website analytics tools and messaging services such as WhatsApp, may store or process personal information on servers located outside Malaysia. Where we transfer personal information outside Malaysia, we take reasonable steps to ensure the receiving party provides a standard of protection comparable to that required under the Personal Data Protection Act 2010, in line with the cross-border transfer requirements introduced by the Personal Data Protection (Amendment) Act 2024.

Our website uses cookies and similar digital technologies to maintain site functionality, remember user preferences, and analyse visitor traffic.

• Essential Cookies: Necessary for core site navigation and form submissions.
• Analytics Cookies: We use Google Analytics to collect information such as pages visited, session duration, and general location derived from your IP address; this information is personal data and is handled in accordance with Google’s own privacy policy. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.
• Advertising Cookies: Our website may use cookies for advertising and remarketing purposes, which may show you A.M Clinic advertisements on other websites based on your visit to our site. You can manage or disable advertising cookies through your browser settings or through your Google Ads Settings.

You can manage or block cookies through your browser settings. Disabling cookies may limit access to certain features on our website.

We implement robust administrative, technical, and physical safeguards to protect your personal and medical data against unauthorised access, loss, alteration, or disclosure.

• Electronic medical records are stored on encrypted, access-controlled platforms.
• Physical clinic records are maintained in secured, monitored facilities.
• Clinical staff undergo mandatory training on medical confidentiality and data privacy.

While we maintain rigorous security protocols, no digital transmission over the internet can be guaranteed as completely secure. We work continuously to mitigate risks using industry-standard security frameworks.

In the event of a personal data breach that is likely to cause significant harm to affected individuals, we will notify the Personal Data Protection Commissioner in accordance with the timeframes prescribed under the Personal Data Protection (Amendment) Act 2024. Where a breach is likely to cause significant harm to you, we will also notify you directly, where practicable, explaining what occurred and the steps we are taking in response. We maintain an internal record of any personal data breach in accordance with our regulatory obligations.

Personal and medical data is retained only for as long as necessary to fulfil clinical, legal, accounting, and regulatory obligations. As a general guide, medical records for adult patients are typically retained for around seven years from the date of your last visit, in line with Malaysian private healthcare record-keeping guidance; records relating to minors are retained for a significantly longer period to reflect the applicable limitation periods.

When personal data is no longer required, it is securely destroyed, permanently deleted, or anonymised.

Under the Personal Data Protection Act 2010 and its 2024 amendments, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate, incomplete, or out-of-date information.
• Right to Withdraw Consent: Withdraw consent for data processing at any time, subject to clinical and legal retention requirements.
• Right to Data Portability: Request transfer of your data to another provider where technically feasible and permitted under applicable statutory guidelines.
• Right to Limit Processing: Request restrictions on how your data is used for secondary communications, such as marketing.
• Right to Complain: Lodge a complaint with the Personal Data Protection Commissioner if you are not satisfied with how we have handled your personal information or your request.

To exercise any of these rights, please contact our Data Protection Officer using the details provided below. If you wish to lodge a complaint with the Commissioner directly, you may do so through the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi).

Our website may contain links to external sites, social media channels, or third-party platforms. A.M Clinic is not responsible for the content, security, or privacy policies of third-party websites. We encourage you to review their privacy notices independently.

We may update this Privacy Policy periodically to reflect updates in legal requirements, technology, or clinic operations. Any revised policy will be posted on this page with an updated “Last Updated” date.

If you have questions regarding this Privacy Policy, wish to update your preferences, or want to exercise your data protection rights, please reach out to us:

A.M Clinic Malaysia

• Phone: +604-658 8555
• Mobile / WhatsApp: +60 12-480 5088
• Email: [email protected]
• Website: https://amclinic.com.my/

Clinic Locations

• Kuala Lumpur (Publika): Publika A1-G1-7 Solaris Dutamas, 1 Jalan Dutamas 1, 50480 Kuala Lumpur, Malaysia
• Penang (Jelutong): 88-N Jalan Masjid Negeri, Taman Greenview, 11600 Jelutong, George Town, Penang, Malaysia
• Johor Bahru (Pelangi): 02, Blok D, Pusat Komersial Pelangi (Pelangi Avenue), 2 Jalan Sri Pelangi 4, Taman Pelangi, 80400 Johor Bahru, Johor, Malaysia