Therapia respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (“PDPA”) and other applicable laws in Malaysia.

This Privacy Notice explains how we collect, use, disclose, store, and protect your personal data when you visit our website, contact us, make an appointment, or use our services.

1. Personal Data We May Collect

We may collect personal data including:

• Your name
• Email address
• Telephone or WhatsApp number
• Appointment and booking information
• Information you provide through enquiry or contact forms
• Payment or transaction information, where applicable
• Technical information such as IP address, browser type, device information, and website usage data
• Health, physical condition, medical history, symptoms, or other information that you voluntarily provide in connection with our services

Certain information relating to your physical or mental health may be considered sensitive personal data under Malaysian law.

2. How We Collect Your Personal Data

We may collect personal data when you:

• Visit or use our website
• Contact us by email, telephone, WhatsApp, social media, or contact form
• Make or manage an appointment
• Complete a consultation or intake form
• Use our services
• Subscribe to updates or marketing communications
• Interact with cookies or analytics technologies on our website

3. How We Use Your Personal Data

We may process your personal data for purposes including:

• Responding to enquiries
• Managing appointments and bookings
• Providing our services
• Communicating with you before or after an appointment
• Maintaining appropriate service and consultation records
• Processing payments, where applicable
• Improving our website and services
• Conducting website analytics
• Sending promotional or informational communications where you have consented to receive them
• Complying with legal, regulatory, or administrative requirements
• Protecting the safety, security, and legitimate interests of Therapia and its clients

Sensitive personal data will only be processed where permitted under applicable law and, where required, with your explicit consent.

4. Disclosure of Personal Data

We do not sell your personal data.

Where reasonably necessary, we may disclose personal data to:

• Our employees, practitioners, or authorised personnel
• Website hosting, IT, booking, payment, analytics, or communication service providers
• Professional advisers such as accountants, lawyers, or consultants
• Government authorities, regulators, or law enforcement agencies where required by law

Third-party service providers are only permitted to process personal data for the purposes for which they have been engaged.

5. International Data Transfers

Some of our service providers, technology platforms, or cloud-based systems may process or store personal data outside Malaysia.

Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that the transfer is carried out in accordance with applicable Malaysian data protection requirements.

6. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, loss, misuse, alteration, or destruction.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

7. Data Retention

We will retain your personal data only for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining business records, and complying with legal or regulatory obligations.

When personal data is no longer required, we will take reasonable steps to securely delete, destroy, or anonymise it.

8. Your Rights

Subject to applicable Malaysian law, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete personal data
• Withdraw consent to certain processing activities
• Object to or limit certain processing
• Request that we stop using your personal data for direct marketing

Withdrawal of consent may affect our ability to provide certain services where the information is necessary for those services.

9. Cookies

Our website may use cookies and similar technologies to operate the website, understand how visitors use it, improve performance, and support marketing activities.

For more information, please refer to our Cookie Policy.

10. Third-Party Websites

Our website may contain links to third-party websites or platforms. Therapia is not responsible for the privacy practices, security, or content of third-party websites.

We encourage you to review their respective privacy policies before providing personal information.

11. Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our services, business practices, or legal requirements.

The latest version will be published on this website with the updated effective date.

12. Contact Us

For any questions regarding this policy, please contact us via WhatsApp.