Privacy Policy & Personal Data Protection Notice
Effective Date: 2 September 2026
HealthHub (“HealthHub”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy and Personal Data Protection Notice explains how we collect, use, disclose, store and protect your personal data when you visit our website, contact us, purchase our products or services, use our pharmacy services, or otherwise interact with us.
This Notice is intended to comply with the applicable requirements of the Personal Data Protection Act 2010 (Act 709) and other applicable Malaysian laws and regulations.
—
1. Personal Data We Collect
Depending on how you interact with us, we may collect the following information:
Personal and Contact Information
– Full name
– Identification or passport information where required
– Date of birth
– Gender, where relevant
– Telephone or mobile number
– Email address
– Residential or delivery address
Pharmacy and Health-Related Information
Where necessary to provide pharmacy or healthcare-related services, we may collect information such as:
– Prescription information
– Medication and treatment information
– Relevant health information provided by you
– Allergies or medication-related information
– Health screening results
– Information required to support medication counselling or pharmacy services
We only collect health-related information where it is reasonably necessary for the relevant pharmacy or healthcare purpose and will handle such information with appropriate care and confidentiality.
Transaction and Payment Information
– Products or services purchased
– Order and transaction details
– Billing and payment information
– Refund information where applicable
We may use third-party payment providers or financial institutions to process payments. We do not intend to retain complete payment card details unless necessary and lawfully permitted.
Website and Technical Information
When you visit our website, certain technical information may be collected automatically, including:
– IP address
– Browser type
– Device information
– Operating system
– Pages visited
– Date and time of visits
– Website usage and interaction information
We may also use cookies and similar technologies as described in our Cookie Policy.
—
2. How We Collect Your Personal Data
We may collect personal data through:
– Our website and online forms
– Contact or enquiry forms
– Email, telephone, WhatsApp or other communication channels
– Pharmacy visits and in-store interactions
– Prescription and medication services
– Health screening services
– Purchases and transactions
– Delivery or collection arrangements
– Customer feedback and reviews
– Promotions, campaigns and events
– Information provided directly by you
– Other lawful sources where appropriate
We will generally collect personal data directly from you unless collection from another source is permitted or required by law.
—
3. Purposes for Collecting and Using Your Personal Data
We may collect and process your personal data for purposes including:
Pharmacy & Healthcare Services
– Processing prescriptions and medication requests
– Providing medication-related services and counselling
– Conducting health screening services
– Supporting your healthcare needs
– Maintaining appropriate pharmacy and healthcare records
– Communicating with you regarding your medication, services or enquiries
Orders & Customer Services
– Processing purchases and orders
– Arranging delivery or collection
– Processing payments, refunds and transactions
– Responding to enquiries and customer requests
– Providing after-sales support
– Managing customer accounts where applicable
Business Administration
– Managing our business operations
– Maintaining business and transaction records
– Accounting, billing and auditing
– Managing suppliers and service providers
– Preventing fraud, misuse or unauthorised activities
– Complying with applicable laws and regulatory requirements
Website & Communication
– Operating and improving our website
– Understanding website usage and visitor behaviour
– Responding to online enquiries
– Sending service-related communications
– Improving our products, services and customer experience
Marketing
Where permitted and where you have provided the appropriate consent, we may use your contact information to send:
– Health and wellness information
– Pharmacy updates
– Promotions and special offers
– Events and campaigns
– New product or service information
You may opt out of marketing communications at any time.
—
4. Disclosure of Personal Data
We will not sell your personal data.
Where reasonably necessary for the purposes described in this Notice, we may disclose or provide access to relevant personal data to:
– Our employees and authorised pharmacy personnel
– Healthcare professionals or providers involved in your care, where appropriate
– Delivery and logistics providers
– Payment processors and financial institutions
– IT, website hosting and technology service providers
– Professional advisers, auditors and insurers
– Business partners where necessary to provide requested services
– Government authorities, regulators or law enforcement agencies where required or permitted by law
We take reasonable steps to ensure that third parties handling personal data on our behalf provide appropriate protection and use the information only for legitimate purposes.
—
5. Health and Medical Information
As a pharmacy, we may need to process health-related information in order to provide appropriate pharmacy and healthcare services.
We treat such information as confidential and restrict access to authorised personnel who need the information for legitimate business, pharmacy or healthcare purposes.
Please avoid submitting unnecessary medical or personal information through public areas of our website or social media pages.
—
6. Cookies and Website Technologies
Our website may use cookies and similar technologies to:
– Ensure the website functions properly
– Remember preferences
– Understand website traffic and usage
– Improve website performance
– Support analytics and website security
– Provide relevant website features
You may be able to control or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of the website.
—
7. Data Security
We take reasonable and appropriate measures to protect personal data against:
– Unauthorised access
– Unauthorised disclosure
– Loss or misuse
– Alteration or destruction
– Other unauthorised forms of processing
These measures may include appropriate technical, administrative and organisational safeguards.
However, no method of transmission or electronic storage can be guaranteed to be completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.
—
8. Retention of Personal Data
We will retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, to provide our services, maintain appropriate records, resolve disputes, enforce agreements, or comply with legal, regulatory, accounting or reporting requirements.
When personal data is no longer required, we will take reasonable steps to securely delete, destroy or anonymise it where appropriate.
—
9. Accessing and Correcting Your Personal Data
Subject to applicable laws and any applicable exceptions, you may request access to personal data that we hold about you and request correction of inaccurate, incomplete or outdated information.
To make a request, please contact us using the details provided in the Contact Us section below.
We may need to verify your identity before processing an access or correction request.
—
10. Withdrawal of Consent
Where the processing of your personal data is based on your consent, you may withdraw your consent by contacting us.
Please note that withdrawing consent may affect our ability to provide certain products or services where the relevant information is necessary for those services.
Withdrawal of consent will not affect processing that we are permitted or required to carry out under applicable law.
—
11. Marketing Communications
If you have agreed to receive marketing communications from us, you may unsubscribe at any time.
You can do so by:
– Using the unsubscribe option provided in our marketing messages; or
– Contacting us directly.
Please note that even if you opt out of marketing communications, we may still contact you regarding transactions, prescriptions, orders, appointments, services or other important operational matters.
—
12. Children’s Privacy
Our website and services are not intended to knowingly collect unnecessary personal information from children.
Where services are provided to a child or involve a child’s health information, we may require information or consent from a parent, guardian or other authorised person where appropriate and required by applicable law.
—
13. Third-Party Websites and Services
Our website may contain links to third-party websites, platforms or services.
We are not responsible for the privacy practices, content or security of third-party websites. We encourage you to review the privacy policies of those third parties before providing them with your personal information.
—
14. International Transfers
Where personal data is transferred, stored or processed outside Malaysia, we will take appropriate steps to ensure that such transfers are handled in accordance with applicable Malaysian data protection requirements.
—
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, business practices, technology or applicable laws and regulations.
Any updated version will be published on this page with a revised Effective Date.
We encourage you to review this page periodically.
16. Contact Us
If you have any questions about this Privacy Policy, wish to access or correct your personal data, or have concerns regarding the handling of your personal data, please contact us:
HealthHub
Address: 8-1, Ground Floor, Jalan PJU 8/5g, Bandar Damansara Perdana, 47820 Petaling Jaya, Selangor, Malaysia
Telephone: +603-7498 0462
Email: letsconnect@healthhub2u.com
We will endeavour to respond to your request within a reasonable period and in accordance with applicable laws.
—
17. Your Acknowledgement
By providing your personal data to HealthHub, you acknowledge that you have read and understood this Privacy Policy and Personal Data Protection Notice and understand how your personal data may be collected, used, disclosed and processed as described above.
Where consent is required by applicable law, we will seek the appropriate consent before processing your personal data for the relevant purpose.
Last Updated: 2 September 2026