Issued under the Personal Data Protection Act 2010 of Malaysia • Last updated: January 2026
This Personal Data Protection Notice (“Notice”) is issued by Imperial Dental Specialist Centre (“IDSC”) in accordance with the Personal Data Protection Act 2010 of Malaysia (“PDPA”). It explains how we process your personal data and sets out your rights under the PDPA.
By providing your personal data to us, accessing our website, submitting an enquiry, booking an appointment, registering as a patient, or receiving our services, you acknowledge and consent to the processing of your personal data as described in this Notice.
1. Personal Data We Process
We may process personal data including, but not limited to:
- name;
- identification number, passport number, or other identification details, where required;
- date of birth and gender;
- contact number, email address, and address;
- medical and dental history, allergies, medication history, and relevant health information;
- dental records, clinical notes, photographs, scans, X-rays, and diagnostic records;
- appointment, payment, and billing records;
- insurance or claim-related information, where applicable;
- records of your communication with our team;
- any other information required for the provision of dental care and related services.
2. Purposes of Processing
Your personal data may be processed for: patient registration; appointment scheduling and coordination; consultation, diagnosis, treatment planning, treatment, review, and aftercare; clinical documentation and record keeping; communication regarding appointments, treatment, payment, and administration; payment processing and billing; laboratory, imaging, and referral coordination; internal audit, quality assurance, and service improvement; compliance with legal, healthcare, regulatory, professional, insurance, and audit obligations; patient safety, risk management, and emergency support; responding to enquiries, feedback, or complaints; and any other purpose directly related to dental care and the lawful operations of IDSC.
3. Source of Personal Data
We may collect your personal data from: you directly; your parent, guardian, caregiver, spouse, family member, or authorised representative; referring doctors, clinics, hospitals, or healthcare providers; laboratories, imaging centres, or treatment-related service providers; appointment forms, website enquiries, WhatsApp, email, telephone, or in-person registration; and legally permitted or publicly available sources, where applicable.
4. Disclosure of Personal Data
Where necessary and lawful, your personal data may be disclosed to: our doctors, clinical, administrative, customer service, and management personnel; dental laboratories, imaging centres, suppliers, and healthcare service providers involved in your care; external consultants, specialists, hospitals, or referral centres; IT, website, payment, accounting, storage, and administrative service providers; regulatory and healthcare authorities, government departments, courts, enforcement agencies, professional bodies, auditors, insurers, and legal advisers, where required or permitted by law; and family members, caregivers, guardians, or authorised representatives where consent has been given or where necessary for your care and safety.
5. Consequences of Not Providing Personal Data
Certain personal data is necessary for us to register you, arrange appointments, provide dental care, maintain records, process payment, comply with legal requirements, and ensure patient safety. If you do not provide the required data, we may be unable to process your enquiry, register you, provide treatment, issue documentation, arrange referrals, process payment, or fulfil our clinical and legal obligations.
6. Accuracy and Updates
You are responsible for ensuring that the personal data you provide is accurate, complete, and up to date. Please inform us promptly of any change to your contact details, medical condition, medication, allergies, dental history, or other information relevant to your care.
7. Your Rights: Access, Correction, and Withdrawal
Subject to applicable law and verification, you may request to:
- access your personal data;
- correct inaccurate or incomplete personal data;
- withdraw consent, where applicable;
- limit certain processing of your personal data, where permitted by law.
Requests must be made in writing and may be subject to verification, administrative requirements, legal restrictions, clinical record obligations, and reasonable processing time. Withdrawing consent may affect our ability to provide treatment, respond to enquiries, maintain your records, or comply with our obligations.
8. Retention of Personal Data
We may retain personal data for as long as necessary for clinical, legal, regulatory, audit, insurance, administrative, and record-keeping purposes. Data may be retained after treatment ends where required or permitted by law, professional standards, or legitimate administrative purposes.
9. Security of Personal Data
We take reasonable steps to safeguard personal data against unauthorised access, misuse, loss, alteration, disclosure, or destruction. However, communication through website forms, email, WhatsApp, or other online channels carries risks inherent to electronic transmission. Please exercise caution when submitting sensitive information electronically.
10. Transfer and Storage of Personal Data
Where necessary, personal data may be stored, processed, or transferred through service providers or systems located within or outside Malaysia. We take reasonable steps to ensure such processing is conducted in accordance with applicable data protection requirements.
11. Consent and Acknowledgement
By providing your personal data and continuing to engage our services, you confirm that you have read and understood this Notice and consent to the processing of your personal data as described. Where you provide personal data of another individual (for example, a child, dependant, or person you represent), you confirm that you are authorised to do so.
12. Updates to This Notice
We may amend or update this Notice from time to time. The latest version will be made available on this website and takes effect from its publication date. In the event of any inconsistency between the English and any translated version of this Notice, the English version shall prevail.