Indah Eye Specialist Centre is subject to the personal data protection principles under the Personal Data Protection Act 2010 (hereafter referred to as PDPA) with effect from 15 November 2013, which regulates the processing of personal data in commercial transactions. In compliance with PDPA, your Personal Information in our database will be safeguarded and will not be shared without your consent.

A) Source of the Personal Data
Your personal data is collected from various sources, including information you have provided us, information from third parties and information in the public domain. This may include your name, NRIC number, contact details, financial and banking account details, medical history and information, information in audio/video format (including voice, closed-circuit television (“CCTV”) or security recordings), images (including photographs) and any other personal data required for the purposes set out in item B) below.

B) Purposes of collecting and processing (including disclosing) your Personal Data

1. For medical and healthcare services 
2. To facilitate the patients personal needs (i.e. extension of stay for health tourists) 
3. To establish and manage medical records and medical reports 
4. To facilitate payment process relating to the patients 
5. To institute debt recovery proceedings against defaulters 
6. To report the personal data to the relevant authorities and/or third parties under     the governing laws relevant to the healthcare industry 
7. To share the personal data with Indah Specialist Eye Centre Sdn Bhd and its related companies as defined in the Companies Act 1965 
8. To conduct research, analysis and improvement 
9. To market and advertise products and services 
10. To administer and respond to request, queries, complaints and legal issues 
11. To facilitate human resource management activities relating to employees 
12. For submission and registration of relevant forms, licenses to the relevant authorities and/or third parties under the governing laws relevant to the healthcare industries 
13. To share personal data for the purpose of banking facilities, signing of legal and accounting documents 
14. For purpose of purchase of items, outsource of services, new development and others
15. For education and training purposes

All information requested for in the relevant forms is obligatory to be provided by you unless stated otherwise. Should you fail to provide the obligatory information, we would be unable to process your request and/or provide you with relevant services.