Malaysia
|
ZH
|
FLABEE PERSONAL DATA PRIVACY NOTICE
Last Updated / Effective Date: July 1, 2026
1. Introduction
FLABEE SDN. BHD. [202101015272 |(1415572M)] (which shall include its holding companies, its subsidiary(s), and any other associated company(s), including any company as a result of any restructuring, merger, sale or acquisition) ("FLABEE", “We” or “Us”) values the privacy of individuals with regards to personal data and strive to protect the same in accordance to the Personal Data Protection Act 2010 ("PDPA 2010"). As part of FLABEE's efforts to protect your personal data, this Personal Data Privacy Notice is formulated in accordance with the Act. For the purpose of this Personal Data Privacy Notice, "Personal Data" shall have the meaning as ascribed in the Act.
This Personal Data Privacy Notice serves to inform you how your Personal Data is being processed by and/or on behalf of FLABEE. This Privacy Policy explains how we collect, use, share, keep, protect and otherwise process the personal information of our customers and users, subject to applicable laws (PDPA 2010) relating to protection of personal data. We are definitely committed to protect each user's privacy, thus this Personal Data Privacy Notice provides our full disclosure on our data processing practice. This is our pledge to you.
2. Application
This Personal Data Privacy Notice applies to any person whose Personal Data is processed by FLABEE including but not limited to FLABEE's customers, platform users, business partners, vendors, supplier, staff and employees:
1. FLABEE Customers. Any customer who has registered for FLABEE services ("Registered User”) such as pregnancy scans, health screening services, health wellness programs, blood tests, lab tests, shopping at our Flabee Mart, using our Flabee Care App and AI Insights, workshops, medical research, ultrasound training and licensing or other related services available and provided by FLABEE (hereinafter collectively referred as the “Service”, “Services”).
2. Platform User. Visitor of our FLABEE websites, webforms, application, software, and other related platforms (hereinafter collectively referred as the “Platform, “Platforms””).
3. Business Partner. Our business partners, vendors, suppliers and other affliates, hereinafter collectively referred as (“FLABEE Partner”, “FLABEE Partners”).
4. FLABEE employees, including full, permanent, on-term basis or part-time staff. (“FLABEE Employee”)
5. Any other personnel or individuals where FLABEE receives and processes your personal data.
FLABEE Registered User and Platform User are hereinafter collectively referred as “FLABEE User”.
The Platform is provided and controlled by FLABEE Ultrasound Sdn. Bhd., with its registered address at No. 21-2 (G-Floor), Jalan Taming Permai 1, Kawasan Perniagaan Taming Permai, Off Jalan Balakong, 43300 Seri Kembangan, 43300 Balakong, Selangor.
If you do not agree with our personal data privacy policies, you should not use our Services or Platform. However, if you already use our Services and Platforms, you may revoke your consent from us further processing your data as provided in “Your Rights and Choices” section below.
3. What Information Do We Collect
1. Government ID Data. We may collect your government-issued identification information, such as your National Registration Identity Card (NRIC), passport, or other government-issued identification, where necessary to verify FLABEE user’s identity, maintain accurate records and prevent duplicate or incorrect medical records, comply with applicable legal and regulatory obligations, protect against fraud and unauthorized access to patient information, facilitate the provision of our products and services, managing reservations, comply with healthcare, research, and regulatory requirements and protect the security of our systems and users. We collect and use such information only for legitimate business purposes. These purposes align well with healthcare privacy practices while remaining consistent with the principles of Malaysia's PDPA.
2. Contact Information. We may collect data such as name, nicknames, email address, physical address, phone number, or other relevant contact information.
3. Demographic information. We may collect data such as your age, gender, state of residence, and race.
4. Account Information. Your FLABEE Account and related account details, including email address, devices registered, account status, and age.
Device Information. We may collect data from your computer or mobile devices when you as a user visit one of our Services and Platforms such as device type, basic location, information about the browser type and version, the operating system and version, the internet service provider or mobile carrier, the IP Address (or proxy server) as well as geographic areas derived from your IP address, time and date of access. Duration of access, referring URL (if any), and identifiers that help us to recognize your device and validate that you are a licensed user.
6. Usage Data. We may collect data about your activity gather and analyze information on how and whether specific features of our Services and Platforms are used., such as app launches within our services, including browsing history, search history, product interaction, crash data, performance and other diagnostic data; and other usage data.
7. Transaction Information. We may collect data about purchases of FLABEE products and services or transactions facilitated by FLABEE, including purchases on FLABEE platforms.
8. Payment Information. We may collect data about your billing address and method of payment, such as bank details, credit, debit, or other payment card information.
Health Information. We may collect data relating to the health status of an individual, including health-related information you provide (e.g., pregnancy-related health entries, wellness notes) and any other data classified as sensitive under applicable law. We process sensitive personal data with your explicit consent (where required) and apply heightened access controls, confidentiality obligations, and security safeguards. You may withdraw your consent as described in “Your Rights & Choices” section below, but doing so may limit our ability to provide certain features (e.g., AI insights based on health entries).
Fitness Information. We may collect data relating to your fitness and exercise information where you choose to share them. Other types of data, such as entries in your mood diary or baby kick log, are optional and may be skipped without affecting your core access. However, omitting this optional information may limit your ability to receive personalized insights or benefit from related app features.
Legal Purposes. We may collect your data to fulfil our legal and regulatory obligations as a business entity operating its business in Malaysia and governed under the applicable Malaysian laws and regulations.
12. Other Information You Provide to Us. We may collect data such as the content of your communications with FLABEE, including data resulting from your interaction with us, interactions with our customer support e.g. emails, chat messages, webinars visited, files downloaded, user research activities, product interest information and contacts through social media channels. We may also collect registration information related to your attendance at one of our events, including scheduling information, food preferences or allergies, and accessibility requests. When attending our event, FLABEE and its agents may photograph and record the event and activities related to the event in visual or audio media. For property under FLABEE responsibility, we may process video surveillance (CCTV) information.
We will also provide, where appropriate, clear in-app notices at the point of collection to indicate whether a data field is obligatory or voluntary, and the consequences if it is not provided. Please note that certain personal data is necessary to access or use our core Services, for example, contact details are required to create an account or schedule a consultation. If you choose not to provide mandatory information (such as contact details required for account creation or appointment scheduling), we may be unable to create your account, confirm your booking, or in many cases we will not be able to provide you with our products or services or respond to requests you may have.
4. Purpose & Use for Collection of Your Data
FLABEE may collect, retain and use your Personal Data for among others the following purposes ("the Purposes") :
1. To provide you with the requested services under any FLABEE's businesses;
To facilitate our operations, and for processing your transactions, and instructions.
To assess and to improve your suitability with our products and services offered.
4. To resolve concerns and complaints.
5. To create directories, databases or information technology system for FLABEE's internal and retail business operation;
6. To process your application under any FLABEE's programmes;
7. To provide you with ongoing information about events and programmes, FLABEE's products, services, special offers, new products, updates and promotions;
8. To conduct research, develop and improve our events, programmes, products and services including but not limited to historical and statistical record keeping purposes;
For analysis, events and marketing purposes, so that we can develop and offer better products/services;
10. For recruitment purposes;
11. To discharge FLABEE's contractual obligations.
To fulfil legal and regulatory requirements obligations.
13. For any other purpose that is incidental or ancillary or in furtherance to FLABEE's internal and daily retail business operation.
5. Who Will Have Access to Your Personal Data
Depending on the purpose and the necessity, FLABEE may disclose your Personal Data to the following categories of recipients:
1. FLABEE's parent company, subsidiaries, related and associated companies;
2. FLABEE 's licensees, co-organisers of events, business alliances, agents and service providers (including those located overseas);
3. The employees from FLABEE’s parent company, subsidiaries, related and associated companies.
4. To internal personnel of FLABEE on a “need-to-know” basis.
5. To such person pursuant to the requirements of any law, if such action is necessary to comply with the requirement of any law enforcement agency, court order or legal process or to protect and defend rights or property of FLABEE.
6. To agencies, auditors, or other advisors under professional obligations of confidentiality in connection with corporate functions.
7. In delivering our Services, we work with selected third-party providers that support key functions, including:
a. Cloud infrastructure providers to securely store and manage your data.
b. Analytics and AI service providers to help interpret wellness data you submit (e.g., mood diary and baby kick logs) and return relevant insights.
c. Communications and notification platforms to send service alerts and reminders.
d. Automated processing service providers (including AI/OCR providers) to generate Flabee AI Insights and to perform internal upload verification checks.
8. Auditors, professional advisories;
9. Any other person and/or organisations which FLABEES may think fit.
10. When you sign up to one of our events where a third party is appointed by FLABEE to host, sponsor or present (including webinars and trainings), we may share relevant Personal Data with that third party to administer the event. Such third parties may act as independent data controllers for their own processing; their privacy practices will apply to their use of your Personal Data.
Where these providers process Personal Data on our behalf, we require contractual safeguards and confidentiality obligations, and we take reasonable steps to ensure appropriate technical and organizational security measures are in place. Where we appoint data processors, we require them to implement appropriate technical and organisational security measures and to process Personal Data only on our documented instructions. We also require processors to promptly notify us of suspected or actual personal data breaches and to cooperate with investigations, remediation, and (where applicable) regulatory and user notifications.
Some of the third-party providers may process Personal Data outside Malaysia (e.g., in regional data centres). Where we transfer Personal Data across borders, we will take reasonable steps to ensure appropriate safeguards are in place and that the transfer is made in accordance with the PDPA 2010 (as amended) and any requirements or guidance issued by the Personal Data Protection Commissioner, including relying on lawful transfer mechanisms or exceptions where applicable.
6. How Secure is Your Data
We shall strive to ensure that security measures are exemplary and that all confidential information received shall only be used in the course of providing FLABEE Services and Platforms to you.
a. We assure that only proven development tools and techniques are used, whether they relate to security or data encryption technologies relating to data at rest and in transit.
b. Regular security audits, risk analyses, and guidelines are regularly tested and updated to ensure that information received from FLABEE User through the Internet is secured.
c. We assure that access to information by FLABEE employees or its agents are limited through system access control mechanisms and positive authentication systems. We also maintain mechanisms such as audit logs trails and electronic journals.
d. All FLABEE employees are bound by a code of ethics and we assure that the privacy of your information is protected by a confidentiality agreement at all times.
e. If your information is to be shared with agents, affiliates and/or any other third party as stated in this Privacy Policy, your information is also protected by a confidentiality agreement at all times.
f. If we have reason to believe that a personal data breach has occurred, we will take prompt steps to contain and remediate it. If the breach causes or is likely to cause significant harm to affected individuals, we will immediately notify the Malaysian Personal Data Protection Commissioner within 72 hours as required in the PDPA 2010. We will also notify you, the affected individuals without unnecessary delay, including (as appropriate): a description of what happened, the type of data involved, likely consequences, steps we have taken, recommended steps you can take, and how to contact our DPO for more information.
7. How Long Do We Keep Your Data
Subject to PDPA 2010, we retain your Personal Data only as long as necessary for the purposes described in this Privacy Notice, and for legal, regulatory, tax, accounting, or claims purposes where applicable. You may request deletion or anonymisation of certain Personal Data, and we will assess and comply where required or appropriate, subject to lawful exceptions.
If you withdraw your consent or request the deletion of your Personal Data, we will process your request in accordance with applicable law. Where there is no legal or other lawful basis requiring us to continue processing or retaining your Personal Data, we will cease processing your Personal Data and take reasonable steps to securely destroy or permanently delete it within a reasonable period. Where we are required or permitted by law to retain certain Personal Data, we will retain only the information necessary to comply with such legal obligations and will securely delete it once the applicable retention period has expired.
In relation to our AI-generated summaries such as Flabee AI Insights in Flabee Care App may be stored within your account to allow you to view your history and track trends. We retain such information only as long as necessary for the purposes described in this Privacy Policy, or as required by applicable laws. For internal upload verification, any temporary processing logs are retained only for the period defined by our service providers’ policy and then deleted.
8. Your Rights & Choices
FLABEE strives to provide our users with freedom of choice relating to their rights on their own personal data. Thus, as the provider of your data to us, you have the sole and exclusive rights, at any time or stage to take any of the following actions:
a. Withdraw Consent: As a FLABEE’s User, you have the rights to withdraw your consent for us to process the personal data provided by you. You may revoke your consent to prevent us from further processing your data as provided in the manner indicated in this Section below. However, the withdrawal of your consent may affect the range of FLABEE Services and Platforms that we can extend to you.
b. Right of Access to Data: As a FLABEE’s user, you have the rights to request access to the personal data that you have provided to us in the manner indicated in this Section below. However, there may be a minimal cost involved, depending on the nature of the data requested.
c. Right to Update Your Data: We strive to ensure that FLABEE’s user information is accurate and kept up to date. However, in order to ensure that your records are kept up to date, we encourage you to assist us by informing us in the event that your records require to be updated or if you believe that the personal data we have about you is inaccurate, incomplete, misleading or outdated in the manner indicated in this Section below.
d. Right to Limit on Distribution of Information: As a FLABEE user, you have the option of limiting or preventing distribution of your personal data by notifying FLABEE in the manner indicated in this Section below.
e. Right to Opt-out from Direct Marketing. As a FLABEE user, you may also opt-out from receiving direct marketing promotions communications at any time through the unsubscribe option (where available) or by notifying FLABEE in the manner indicated in this Section below.
f. Right to Not Use Optional Features. As a FLABEE user, you also have the freedom to not use any of FLABEE’s optional features such as Flabee AI Insights or period tracker. However, it may limit may reduce feature availability or personalization.
g. Right to Request for Deletion or Destruction of Your Data. You may request that FLABEE delete or erase your Personal Data where (i) the Personal Data is no longer necessary for the purposes for which it was collected or processed, (ii) you have withdrawn your consent in cases where processing is based on consent and when there is no other lawful basis for the continued processing, or (iii) the Personal Data has been unlawfully processed. FLABEE will process such requests in accordance with applicable laws and regulatory requirements within a reasonable timeframe. Please note that we may retain certain Personal Data where required or permitted by law, for the establishment, exercise or defence of legal claims, or where retention is otherwise necessary for legitimate business or regulatory purposes.
As a FLABEE user and the provider of your data to us, you may withdraw, access, update, limit distribution, opt-out from direct marketing and request for deletion and destruction of your personal data, subject to the applicable laws under PDPA 2010 by submitting a formal request to [email protected] (Subject: “Attn: DPO or Data Protection Officer”) with details of your request. We may request additional information to verify your identity and to locate the relevant data. We will respond within the timeframe required by applicable law. Where applicable, we aim to respond within twenty-one (21) days from receiving a complete request and may extend where permitted by law. We may also charge a fee where allowed by law and will inform you in advance if a fee applies.
9. Use of Cookies & Other Technologies
Cookies are small text files created by a web server and stored in a user's browser to hold information about their interactions with our website. They are sent back to the server with each request, enabling websites to remember users, maintain sessions, security and fraud prevention purposes. FLABEE’s services and platforms including websites, online services, applications, and advertisements may use cookies and other technologies to operate our website, remember preferences, understand usage, and measure marketing performance (in cases where you give your consent). Some cookies may be set by third-party providers we use for analytics/marketing. If you disable certain cookies, some features may not function properly.
Categorically, there are few types of cookies we may collect from you:
Strictly Necessary Cookies. These cookies are required to enable the basic features of this site, such as providing secure log-in, allow us to display our websites in the proper format and language, to authenticate and verify your transactions or adjusting your consent preferences. These cookies do not store any personal data.
Elementor Cookie: It allows the website owner to implement or change the website's content in real-time.
Visitor Privacy Metadata Cookie: It allows the website owner to store the user’s cookies consent state.
Cookieseyes-consent Cookies: It allows the website owner to remember users' consent preferences so that their preferences are respected on subsequent visits to this site. It does not collect or store any personal information about the site visitors.
WpEmojiSettingsSupports Cookies: It helps determine if the user’s browser can display emojis properly.
These cookies are the strictly necessary cookies which you cannot pick and choose these cookies in order for you to be able to use FLABEE Services and Platforms. Your continued use of FLABEE’s Services and Platforms signifies your consent to the usage of these strictly necessary cookies.
Analytics Cookies. These analytical cookies are used to understand how visitors interact with FLABEE’s website, help provide information on metrics such as the number of visitors, bounce rate, traffic source, including by helping us detect any errors.
Ga* Cookies: This cookie allows our Platforms to store and count page views.
_Ga Cookies: This cookie allows our Platforms to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.
Multiple Sbjs Cookies: This cookie allows our Platforms to identify the source of a visit and stores user action information in cookies. This analytical and behavioural cookie is used to enhance the visitor experience on the website.
YSC Cookies: This cookie allows our Platforms to track the views of embedded videos on our Platform pages.
_Gid Cookies: This cookie allows our Platforms to store information on how visitors use a website while also creating an analytics report of the website's performance. Some of the collected data includes the number of visitors, their source, and the pages they visit anonymously.
Gatgtag_UA_* Cookies: This cookie allows our Platforms to store a unique user ID.
Advertisement Cookies. These cookies are used to enable network traffic to and from FLABEE’s systems, and to provide visitors with customised advertisements based on the pages you visited previously and to analyse the effectiveness of the ad campaigns.
Gclau Cookies: This cookie allows our Platforms to experiment advertisement efficiency of websites using their services.
Test_cookies Cookies: This cookie allows our Platforms to determine if the user's browser supports cookies.
o IDE Cookies: This cookie allows our Platforms to store information about how the user uses the website to present them with relevant ads according to the user profile.
o NID Cookies: This cookie allows our Platforms for advertising purposes; to limit the number of times the user sees an ad, to unwanted mute ads, and to measure the effectiveness of ads.
Other Cookies. These cookies which are categorised or uncategorised are used to understand how user interact with our websites and online services, including by helping us to assess the effectiveness of advertisements and web searches. FLABEE also uses these cookies to remember choices you make while browsing, so we can provide you with a customized experience.
Where we enable third-party analytics or marketing cookies, those third parties may collect or receive information about your device and use of our website in accordance with their own privacy practices. You can always manage your cookies preferences at any time via your browser settings and, where available, our cookie banner preferences settings via pop up on our Platforms.
In addition to cookies, FLABEE uses other technologies that help us achieve similar objectives. In some email or Whatsapp messages FLABEE sends to you, we may provide a “click-through URL”. When you click one of these URLs, they pass through a separate server before arriving at the destination page on our website. We track this click-through to help us determine interest in particular topics and measure whether we are communicating with you effectively. If you prefer not to be tracked in this way, you should not click graphic or text links in email messages.
10. Privacy Policy Updates
We may amend or update this Privacy Policy from time to time. When we update this Privacy Policy, we will notify you by updating the “Last Updated” date at the top of the new Privacy Policy, posting the new Privacy Policy, or providing any other notice required by applicable law. We recommend that you review this Privacy Policy regularly to stay informed of our privacy policies and practices.
11. Contact Us
FLABEE honours its commitment to protect its customers' privacy. Any queries, concerns, comments, requests or complaints regarding this Privacy Policy should be addressed to:
Email: [email protected] (Subject: “Attn: DPO or Data Protection Officer”)
Mailing Address: No. 21-2 (G-Floor), Jalan Taming Permai 1, Kawasan Perniagaan Taming Permai, Off Jalan Balakong, 43300 Seri Kembangan, 43300 Balakong, Selangor.