Patient Privacy Notice

Last Updated: 08 July 2026

Your privacy is profoundly important to us. This Privacy Notice explains how Korporatly Group Plt collects, uses, stores, and protects your personal and sensitive health data when you use our tele-wellness platform, report explanation services, and communications.

By clicking "I Agree" or by uploading your medical reports to our platform, you explicitly consent to the processing of your personal data in accordance with this Privacy Notice.

1. WHAT DATA WE COLLECT

To provide you with professional tele-wellness insights and report explanations, we collect:

Personal Identification Data: Your full name, identity card (IC) or passport number, contact number, and email address.

Sensitive Personal Data: Medical laboratory results, blood test reports, health screening records, medical imaging reports, and health history details that you voluntarily upload or transmit to us.

Transactional & Billing Data: Bank transfer confirmations, transaction amounts, dates of payment, and record of appointment bookings used strictly for account processing and enforcement of booking and cancellation rules.

2. HOW WE USE YOUR DATA

We process your personal and sensitive data strictly for the following purposes:

To review, analyse, and provide professional medical explanations of your uploaded health reports.

To communicate with you via secure messaging channels, email, or WhatsApp regarding your reports.

To verify your identity and maintain secure, accurate internal health records.

To comply with the legal, regulatory, and tax obligations (such as LHDN e-Invoicing) governing medical practitioners in Malaysia.

To administer and enforce our rescheduling, cancellation, and forfeiture policies (including checking the 24-hour notice window and the 15-minute virtual session grace period) to ensure fair slot utilization.

3. DATA STORAGE AND LOCALIZATION

Secure Cloud Infrastructure: Your personal and sensitive health data is electronically stored and managed using cloud-based Clinic Management Software frameworks hosted by our technology partners (Plato Medical Pte Ltd) on highly secure servers physically located in Singapore. By accepting this Privacy Notice, you grant explicit consent for this cross-border transfer and storage of your medical and personal profiles under protected data protection agreements.

4. DATA RETENTION

Your data and medical reports will be securely retained in our system for a statutory period of seven (7) years from the date of your last interaction with our service. Once this period expires, your data will be permanently and securely deleted from our cloud servers.

5. YOUR LEGAL RIGHTS

Under the PDPA 2010, you hold the following rights regarding your data:

Right of Access & Correction: You may request a copy of your personal data or request corrections to inaccurate details.

Right to Withdraw Consent: You may withdraw your consent to our data processing at any time. However, doing so will immediately terminate our ability to provide you with report explanation services.

Right to Erasure: You may request the deletion of your account and files, subject to our statutory legal and medical record-keeping obligations.

To exercise any of these rights, please contact our appointed Data Protection Officer (DPO).

6. DATA BREACH NOTIFICATION

In the highly unlikely event of a data security incident or unauthorized access compromising your information, we will comply with all mandatory statutory timelines, including notifying the Personal Data Protection Commissioner (JPDP) within the statutory 72-hour reporting protocol and alerting you immediately with appropriate safety recommendations.