By submitting any form or interacting with Kuhen® Rehab & Wellness (“we”, “our”, or “us”), you consent to the collection, use, disclosure, and processing of your personal data in accordance with this Privacy Policy and the Personal Data Protection Act 2010 (PDPA) of Malaysia.

Kuhen® Rehab & Wellness acts as the data controller in respect of your personal data. We are responsible for ensuring that your personal data is processed in compliance with applicable data protection laws.

For the purposes of this Policy, “personal data” refers to any information that relates directly or indirectly to an individual who can be identified from that information. This includes sensitive personal data such as health-related information where applicable. “Processing” includes collecting, recording, holding, storing, using, disclosing, or erasing personal data.

1. Collection of Personal Data

We may collect and process the following categories of personal data:

• Personal identification information (such as full name)
• Contact information (such as phone number and email address)
• Health-related information provided voluntarily by you for rehabilitation or treatment purposes
• Technical data (such as IP address, browser type, device information, and cookies)
• Any other information you provide through our website forms, communication channels, or during consultation

All personal data is collected directly from you unless otherwise permitted by law.

2. Purpose of Processing

Your personal data is collected and processed for the following purposes:

• To respond to enquiries and communicate with you
• To schedule, manage, and administer appointments
• To assess your condition and provide appropriate rehabilitation or wellness services
• To maintain internal records and improve our services
• To comply with legal and regulatory obligations
• For administrative, operational, and business purposes

We will not process your personal data for any purpose other than those stated above unless required or permitted by law, or with your consent.

3. Disclosure of Personal Data

We do not sell or trade your personal data.

Your personal data may be disclosed to third parties in the following circumstances:

• To service providers and partners (including IT service providers, website hosting providers, communication platforms, and analytics providers) strictly for operational purposes
• To analytics and advertising platforms such as TikTok, Meta (including Facebook and Instagram) and Google, for purposes including tracking, analytics, remarketing, and advertising performance measurement
• Where required by law, regulation, or legal process
• Where necessary to protect our rights, safety, or property

All third parties are required to handle your personal data in accordance with applicable data protection laws and to implement appropriate security measures.

4. Security of Personal Data

We take reasonable practical steps to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures include administrative, technical, and physical safeguards appropriate to the nature of the personal data, including sensitive personal data.

5. Retention of Personal Data

Your personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal, regulatory, or internal policy requirements.

When your personal data is no longer required, we will take reasonable steps to ensure that it is securely deleted or anonymised.

6. Data Integrity and Access

We take reasonable steps to ensure that the personal data we collect is accurate, complete, not misleading, and kept up to date.

You have the right to:

• Request access to your personal data
• Request correction of your personal data if it is inaccurate, incomplete, misleading, or not up to date
• Withdraw your consent to the processing of your personal data (subject to legal or contractual restrictions)

Requests may be subject to applicable fees and verification requirements as permitted under the PDPA.

7. Withdrawal of Consent

You may withdraw your consent to the processing of your personal data at any time by providing written notice to us. Upon withdrawal, we may no longer be able to continue providing certain services to you where such data is necessary.

8. Cookies and Website Usage

Our website may use cookies and similar technologies to enhance user experience and analyse website traffic. By using our website, you consent to such use of cookies.

You may adjust your browser settings to refuse cookies; however, this may affect the functionality of the website.

9. Transfer of Personal Data

Your personal data may be transferred, stored, or processed in locations outside Malaysia where necessary for operational purposes. In such cases, we will take reasonable steps to ensure that the recipient is subject to laws or contractual obligations that provide a level of protection comparable to the PDPA.

10. Contact Information

If you have any questions, requests, or complaints regarding this Privacy Policy or your personal data, you may contact us at:

kuhenrehabandwellness@kuhen.my
019-915 3803

11. Changes to This Policy

We reserve the right to amend this Privacy Policy at any time. Any updates will be published on this page, and continued use of our services constitutes your acceptance of such changes.

12. Consent

By providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.