Privacy Policy
PERSONAL DATA PROTECTION POLICY FOR PATHOLOGY & CLINICAL LABORATORY (M) SDN BHD (“PATHLAB”)
This Personal Data Protection Policy is issued to all our existing, immediate and/or prospective customers pursuant to the Personal Data Protection Act 2010 ("the Act"). We are committed to safeguarding your privacy and ensuring that your personal data is protected. We therefore make sure that our policies and practices in relation to personal data comply with the requirements of the Act under the laws of Malaysia.
1. Privacy Policy
This privacy policy applies to pathlab.com.my (“the Site”) and Pathlab App (“the App”) and to personal data collected about you by Pathlab (“we”, “us” or “our”). By using the Site and/or the App, you are agreeing to the terms of this privacy policy. If you do not agree with any term of this policy, please do not use the Site and/or the App.
Please note that this Privacy Policy may be amended from time to time by posting the updated version here on the Site and/or App. You are advised to check it on a regular basis.
2. Personal Data Collection and types of personally identifiable information collected
2.1 In the course of your dealings with Pathology & Clinical Laboratory (M) Sdn Bhd and its subsidiaries (“Pathlab”), we will require you to voluntarily provide data and information about yourself (“Personal Data”) to enable us to deliver notices, services and/or products in connection with our future services / products, new product launches and promotional events with business partners & associates.
2.2 When using the Site and/or App, you may be require to provide Personal Data which may include but not limited to information concerning your name, date of birth, Identity card number, passport number, medical history, address, gender, race, nationality, contact information, email address, education, occupation, telephone or fax number, preferred mode of communication, religion, credit card details, bank name and other information where permitted by applicable law.
2.3 We use cookies and similar technologies to collect data about your use of the Site and/or App. For your information, Cookies are small computer files that can be stored on your computer for the purposes of obtaining configuration information and analysing your browsing habits. They can save you from registering again when re-visiting a web site and are commonly used to track your preferences in relation to the subject matter of the website. You may refuse to accept Cookies (by modifying the relevant Internet options or browsing preferences of your computer system), but if you do so you may not be able to utilize or activate certain available functions on our Site and/or App.
3. Purpose
3.1 You agree that all the Personal Data provided by you to us may be used and retained by us for the following purposes and for other purposes as may be agreed between you and us or required by law from time to time:-
- Providing the service;
- Analyzing, verifying and / or checking your credit, payment and / or status in relation to the provision of the Services;
- Processing any payment instructions, direct debit facilities and / or credit facilities requested by you;
- Enabling the daily operation of your account and / or the collection of amounts outstanding in your account in relation to the Services;
- Carrying out data sorting and analysis to enable us to better understand your characteristics and buying behaviour and to provide other services better tailored to your needs, and to assist us in selecting goods and services that are likely to be of interest to you;
- Providing you with regular communications from us with details of the Services and its benefits;
- The normal management, operation and maintenance of the performance of the Services;
- Research for service improvement and designing new, or improving existing, services provided by us, and/or our subsidiaries to you;
- Investigation of complaints, and suspected suspicious transactions;
- Prevention or detection of crime;
- Disclosure as required by law;
- Our internal record keeping and maintenance of customer records;
- Aggregated behavioural analysis;
- Any subsequent commercial transaction in relation to any promotion, products and/or services.
3.2 Further, we would also use your Personal Data (including your name, telephone number, address and email address and other information provided to us when you register) for direct marketing to you (whether by post, email, phone, SMS, social network applications or internet social media or the like) in relation to:
- Offers and promotions from us;
- Offers and promotions offered by our subsidiaries; and
- Other offers and promotions from the third party merchants that we cooperate with to provide benefits to our customers.
4. Source of Personal Data
4.1 The Personal Data will be legitimately and transparently obtained in the following manner:-
- Official registration forms (either electronic or printed) or any other promotional events;
- Official Request for Information forms that are provided to you by our employees or agents;
- Any email or any correspondence that we have received from you requesting for information or making any inquiries;
- Any form that you have submitted on our Site and/or App or any websites contracted by us;
- Any referral from a person which have included their verifiable personal contact details;
- Business cards that were dropped or given to our employees, clinic and hospitals or associates; or
- Any document (including but not limited to statutory forms and returns) that were submitted to us for processing.
4.2 The Personal Data provided to us are wholly voluntary in nature and you are not under any obligation or under any duress to do so. The failure to provide the Personal Data may result in the following and we shall not be held liable for any of the consequences arising therefrom:
- The inability for us to provide you with the test results, notices, services and/or products requested;
- The inability for us to update you with the latest product and/or launches; and
- The inability to comply with any applicable law, regulation, direction, court order, by laws, guidelines and/or codes applicable to us.
5. Disclosure of Personal Data
5.1 We may disclose and/or transfer (whether in Malaysia or outside Malaysia) your Personal Data to:
- Any related entities and/or subsidiaries of Pathlab, including those incorporated in the future;
- Classes of third parties which shall include our business partners and affiliates that provide related services or products in connection with our business;
- Our auditors, consultants, lawyers, accountants or other financial or professional advisers appointed in connection with our business;
- Our third party service providers, third party management companies, sub-contractors or other parties as may be deemed necessary by us to facilitate your dealings with us; and
- Any of our actual or proposed assignees or transferees of our rights with respect to your Personal Data in connection with a sale of business, disposal, acquisition, merger, transfer or re-organization (whether in respect of assets or shares) to use, hold, process or retail such Personal Data.
5.2 Third parties are legally tasked with processing your Personal Data in line with principles specified by Pathlab. Third parties are also held legally responsible for securing your Personal Data at an appropriate level of security in relation to applicable data protection laws and widely accepted industry standards.
5.3 You may at any time withdraw, in full or in part, your disclosure consent given previously, in each case subject to any applicable legal restrictions, contractual conditions and a reasonable time period at our corporate offices located at the address given in 7.1 below.
6. Security
6.1 Your Personal Data will be kept and processed in a secured manner. The appropriate administrative, technical and physical safeguards, policies and procedures will be implemented, as far as practicable, in accordance to the applicable laws and regulations aim to prevent any unauthorized and/or unlawful processing of, and the accidental loss, destruction, alteration, access, disclosure or use of your Personal Data.
6.2 Pathlab is committed to taking appropriate technical, physical and organisational measures to protect your Private Data against unauthorised access, unlawful processing, accidental loss or damage, and unauthorised destruction of your Private Data.
6.3 Compliance with these provisions will be required of all third-party administrators who may access your Private Data, as described in the ‘Disclosure of Personal Data’ in Section 5 above.
7. Right of Access
7.1 You have the right to:-
- Request access to your Personal Data in our records for verification purposes. You may access and review all of your Personal Data held by us;
- Request for correction of your Personal Data in our records in the event the information is inaccurate, misleading, out-of-date or incomplete upon validation and verification of the new information provided;
- Request that your Personal Data shall only be kept for the fulfilment of the purpose of the collection of such information;
- Request for proof of policy and procedure in relation to the safeguarding and guarantee of your Personal Data in our records;
- Request that we specify or explain its policies and procedures in relation to data and types of Personal Data handled by us;
- Opt out from receiving direct marketing materials from us at any time;
- Withdraw your consent for the processing of your Personal Data. Any withdrawal of consent shall affect our ability to fulfil our obligations to you;
- Request that your Personal Data be deleted. However, this would be subjected to the applicable laws of Malaysia related to retention of Personal Data;
- Any request in relation to the above shall be done in writing (whether in person or sent by post or email) and addressed to:-
- In accordance with the Act, we have the right to charge you a reasonable fee for the processing of any Personal Data access request.
Database Department
Pathology & Clinical Laboratory (M) Sdn Bhd
Wisma KAM, 87-91, Jalan SS 25/2 Taman Bukit Emas,
47301 Petaling Jaya,
Selangor
8. Limit of Processing Personal Data
8.1 The Personal Data provided to us undergoes processing as and when required or upon scheduled maintenance. The definition of processing defines it as "any operation or set of operations which is performed upon Personal Data, whether or not by automatic means, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction;"
8.2 You have the right to limit in part or wholly any of the processes by which your data is subjected to in terms of the operations allowed to be performed upon it, the period of time allowed or alternatively the date line of the consent given. Pathlab is responsible to determine the purposes and means of the processing of Personal Data.
8.3 You may at any time withdraw or amend, in full or in part, your processing consent given previously, in each case subject to any applicable legal restrictions, contractual conditions and a reasonable time period in writing to our corporate offices located at the address given in 7.1 above
9. Retention of Personal Data
Your Personal Data will only be retained for as long as necessary to fulfil the purpose for which it was collected or as required by the laws of Malaysia (Limitation Act and any other laws related to Personal Data. Upon the expiry of the retention period or when the Personal Data is no longer required, it will be permanently deleted based on our internal policies.
10. Language
In accordance to the Personal Data Protection Act 2010, this Policy is issued in Bahasa Malaysia, English and Chinese languages. In the event of any inconsistency, the English language version of this Policy shall prevail.
This Personal Data Notice was last updated on 24 April 2026.
