This notice explains how personal data is handled on this website and in the practice of Dr Mohd Fadhil bin Ahmad Nazlan, General Surgeon, who practises at SALAM Shah Alam Specialist Hospital. It follows the Personal Data Protection Act 2010 (Malaysia).
What this website collects
You do not need an account to read this website, and there is no login for patients. The site keeps no database of your personal data of its own.
The enquiry form on our Contact page does not send anything to this website’s server. It opens WhatsApp with the details you typed — your name, phone number and the topic you are writing about — so that your message reaches the practice. Once WhatsApp opens, WhatsApp’s own privacy terms apply to that message.
The only personal data this website receives directly is what you choose to send when you call, message on WhatsApp, or email using the details on our Contact page: usually your name, a number to reach you on, and the medical or administrative matter you are asking about.
Medical records
If you are seen as a patient, your clinical records are kept by the hospital and the practice as required for your care and by Malaysian law and professional guidelines. Those records are not collected through this website, and this notice does not replace the hospital’s own notice.
Why we use your data
- to answer your enquiry and arrange an appointment;
- to provide care and to follow you up afterwards;
- to keep the records we are required to keep;
- to meet legal, insurance and professional obligations.
Who sees it
Only the people who need it: your surgeon, the clinical and administrative team, and — where it is part of your care — the hospital, laboratories, radiology services and insurers. We do not sell or rent personal data, and we do not use it for advertising.
How long we keep it
Enquiries are kept only as long as they are needed to deal with them. Medical records are kept for the period required by Malaysian law and professional guidance, and are then securely destroyed.
Your rights
Under the Personal Data Protection Act 2010 you may ask for access to the personal data we hold about you, ask for it to be corrected, withdraw your consent to its use, or ask us to stop using it for a particular purpose. Write to the practice using the details on our Contact page and we will respond within the period the Act allows. Withdrawing consent may mean we can no longer answer an enquiry or continue with an appointment.
Where a patient is under 18, consent is normally given by a parent or guardian.
Security
We take reasonable steps to keep personal data confidential and to limit who can see it. No method of sending information over the internet is completely secure, so please do not send sensitive medical details by unencrypted email unless we have asked you to.
Cookies
Cookies, and the embedded map on the Contact page, are described in our Cookie Policy.
Changes to this notice
If this notice changes, the new version appears on this page and the date below it is updated.