Contact +604 238 3388

|

Emergency Hotline +604 226 8527

Hospital

About Us
Contact Us
Careers
News & Media


Accreditation
Awards
Blogs
Events
Gallery
Clinical Quality & Safety


Patient’s & Family Rights
Patient Advocacy
Clinical Indicators
Patient Reported Measures

 

Privacy & Personal Data Protection

Island Hospital Sdn Bhd (‘Island Hospital’) is committed to protecting the privacy and confidentiality of Personal Data entrusted to us. This Personal Data Protection Notice (‘Notice’) outlines how Island Hospital collects, uses, discloses and manages Personal Data in compliance with Data Protection Legislations.

 

‘Data Protection Legislation’ means all applicable laws or regulations in any jurisdiction, as may be amended from time to time, which relate to the collection, disclosure, use or processing of Personal Data, including but not limited to the Personal Data Protection Act 2010 (PDPA);

 

“Data Subject” means an individual who is the subject of the Personal Data or to whom any Personal Data relates;

 

“Personal Data” means data or information in any form (including, without limitation, any information in the form of text, images, video, audio, multimedia or electronic form) that may identify, or lead to the identification of (including when used together with other information to which an organisation has or is likely to have access), an individual natural person, whether living or deceased, and includes any Sensitive Personal Data and expression of opinion of such person;

 

“process” or “processing”, in relation to Personal Data means collecting, recording, holding or storing the Personal Data or carrying out any operation or set of operations on the Personal Data, including —

(a) the organization, adaptation or alteration of Personal Data;

(b) the retrieval, consultation or use of Personal Data;

(c) the disclosure of Personal Data by transmission, transfer, dissemination or otherwise making available; or

(d) the alignment, combination, correction, erasure or destruction of Personal Data.

 

“Sensitive Personal Data” means any data or information as to the physical or mental health condition of an individual natural person, his/her political opinions, his/her religious beliefs or other beliefs of a similar nature, and the commission or alleged commission by him/her of any offence.

A) Source of the Personal Data

 

When we acquire your Personal Data, it is typically essential to meet legal or contractual obligations or is necessary for the performance or initiation of services rendered by Island Hospital. In such instances, you are obligated to furnish your Personal Data. Should you fail to provide the obligatory information, we would be unable to process your request and/or provide you with relevant services as specified in Section C. You also retain the right to request for us to limit the processing of your personal data or the personal data relating to other persons who may be identified from that personal data. Please note that in limiting the processing as requested, the same consequences as set out above could apply. If this is the case, we may inform you of the consequences in further detail depending on the specific personal data.

 

We gather Personal Data from you through the following methods:

 

  1. Patient or Potential Patient/Customer, Parent, or Guardian of Patients or Potential Patients/Customers:
    Island Hospital gathers your personal information either directly from you or indirectly from your legal representatives (such as family members or next of kin), agents (including medical tourism agents), and/or employer. This occurs when you, your legal representatives, or appointed representatives submit completed enquiry, application, and/or registration forms via diverse channels, including online submissions and physical hardcopies at public venues or within our premises. Additionally, your personal information may be acquired through the use of cookies when you interact with our website.

B) Description of the Personal Data

 

The personal data processed by us may encompass, where applicable: name, date of birth, identity card or passport details, home and office address, telephone/handphone number, email address, occupation, age, gender, marital status, weight, height, photos, race, nationality, religion, Patient Report No. (PRN), personal health information, and any other personal data necessary for the purposes outlined in item C) below.

 

C) Purposes of the Personal Data

 

Your personal data may undergo processing for the following relevant purposes:

    1. Business Proposes:
      • Marketing, sales, and promotions
      • Account management of Data Subjects
      • Customer service and support
      • Finance and accounting
      • Purchasing/availing of IH services
      • Internal management
      • Communications and controls
      • External communications
      • Interactions with authorized service providers
      • Government and legal affairs
    2. Processing necessary for compliance with a legal obligation to which IH is subject.
    3. Reporting personal data to relevant authorities and/or third parties under governing laws relevant to the healthcare industry.
    4. Sharing personal data with Island Hospital and its related companies as defined in the Companies Act 1965.
    5. Conducting research, analysis, and quality improvement initiatives.
    6. Education and training.
    7. Any other purpose that is incidental or in furtherance to the above purposes.

 

If you have given consent to receive marketing or promotional updates from Island Hospital, you maintain the right to opt-out at any time. You can exercise this option by selecting the ‘unsubscribe’ feature available on the Island Hospital website.

D) Disclosure of the Personal Data

 

Your personal data may be disclosed to the following parties, where relevant:

 

  1. Healthcare professionals (as defined in PDPA)
  2. Island Hospital and its related companies (as defined under the Companies Act 1965)
  3. Government agencies, local authorities, non-government agencies
  4. To parties required by law, court, regulator, or legal process to disclose
  5. To parties permitted under the laws of Malaysia
  6. Analytics and tracking providers;
  7. Any other person deemed necessary by Island Hospital

 

It might be necessary for us to transfer your personal information outside of Malaysia if any of the third parties mentioned in section D (Disclosure of Personal Information) above, including our service providers or business partners providing services to us, are situated or have processing facilities in countries outside of Malaysia.

 

By utilizing our services, you provide consent to the transfer of your personal information outside Malaysia to such third parties and for the purposes outlined in section C (Purposes of the Personal Data).

 

We will undertake the necessary measures to ensure that any such third parties are contractually obligated to safeguard your personal information and can only process it under our explicit instructions.

E) Websites

 

  1. Cookies
    A cookie may be employed in the processing of your information. This text file is placed into the memory of your computer and/or device by our computers. When your computer and/or device communicates with our server, a copy of this text file is sent, aiding in the identification of you. Moreover, during your visit to our website, we may collect the following information:
    • The fully qualified domain name from which you accessed our site or, alternatively, your IP address.
    • The date and time you accessed each page on our website.
    • The URL of any webpage from which you accessed our site (the referrer).
    • The web browser you are using and the pages you accessed.It is crucial to recognize that some web pages may necessitate the provision of a limited amount of personal information (such as system login credentials, email address, and contact information) to avail certain services on our websites. This personal information will solely be utilized for its intended purposes, specifically to respond to your message or provide the requested services.
  2. Links to other sites
    Links to other sites are provided for your convenience and information. These sites may have their own privacy statements in place, and we recommend that you review them if you choose to visit any linked websites. Please be aware that we are not responsible for the content on the linked sites or any use of the site.

F) Access and Update the Personal Data

 

We are dedicated to ensuring that the personal data we have about you is accurate, complete, not misleading, and up-to-date. In the event of any changes to your personal data or if you believe the information we possess is inaccurate, incomplete, misleading, or not up-to-date, kindly reach out to us. We will promptly take necessary steps to update your personal data.

 

You retain the right to access your personal data. Should you wish to request access, please get in touch with us. We recommend submitting your request for access to your personal data held by Island Hospital in writing. Additionally, we may implement measures to verify your identity before fulfilling your request for access to your personal data.

 

In alignment with the PDPA:

  1. Depending on the information requested, a fee may be applicable as stipulated in the First Schedule (Regulation 2) of the Personal Data Protection [Fees] Regulations 2013 for processing your request for access.
  2. We reserve the right to refuse to comply with your request to access or make a correction in accordance with the PDPA.

G) How to Contact Us

 

If you have any questions or concerns about your personal data, please reach out to us using any of the following methods:

 

Name : PDPA Officer
Adress : Island Hospital,

No. 308, Jln Macalister, 10450 George Town, Penang
Phone No : 04-2383388
Email : info@islandhospital.com

H) Data Security

 

We have established practical physical, technical, and procedural safeguards to protect your personal information against inadvertent loss and unauthorized or accidental access, usage, alteration, and disclosure. All data submitted to us is stored on secure servers. Our implemented measures encompass:

 

  1. Registering employees handling personal data into a system before granting access.
  2. Terminating employee access rights upon resignation, contract termination, or adjustments in accordance with changes in Island Hospital.
  3. Controlling and limiting employee access to personal data systems.
  4. Providing authorized employees with user ID and password for accessing personal data.
  5. Terminating user ID and password immediately upon an employee no longer handling the data.
  6. Establishing physical security procedures, including controlling data storage site access, storing personal data in a secure location, and implementing surveillance (e.g., closed-circuit cameras, 24-hour security monitoring).
  7. Updating the Backup/Recovery System and anti-virus and/or firewall to prevent personal data intrusion.
  8. Safeguarding computer systems from malware threats.
  9. Ensuring that personal data transfer through cloud computing services complies with personal data protection principles in Malaysia and other applicable laws.
  10. Maintaining a proper record of access to personal data periodically and making such records available for submission when directed by the Personal Data Protection Commissioner.
  11. Ensuring that all employees involved in processing personal data protect the confidentiality of the data subject’s information.
  12. Binding third parties appointed by Island Hospital with a contract for operating and carrying out personal data processing activities.

 

We also confirm that third-party service providers responsible for storing or processing your personal information have implemented comparable, acceptable security standards.

 

Regrettably, the transmission of information over the internet is not entirely secure. Despite our utmost efforts to safeguard your personal information, we cannot assure the complete security of the personal data transmitted through our website.

I) Retention of Personal Data

 

We will handle your personal data as long as there is a legal basis for doing so. Your personal information will be retained only for the duration necessary to fulfill the purposes outlined above. Following this period, we will take steps to delete your personal information or, if no longer needed, appropriately dispose of it.

 

We provide this Personal Data Notice in both English and Bahasa Malaysia. In the event of any inconsistencies between these two versions, the English version shall prevail.

 

Your continued use of and access to our website shall constitute your continued consent for the utilization of your personal data in accordance with the specified purposes outlined herein, particularly for business purposes. If you do not agree to this notice, please do not use our website.

 

This notice on Personal Data Protection was last revised on April 3, 2024.