This Personal Data Protection Notice (“Notice”) is issued by SkinBeau Perfection Sdn. Bhd. (Company Registration No.: 200401013160) (“SkinBeau”, “we”, “us”, or “our”) in accordance with the Malaysian Personal Data Protection Act 2010 (“the Act”).
This Notice governs how we collect, record, store, use, and protect your personal data—including sensitive personal data—whether obtained through our physical clinic premises, our official website (www.skinbeaumalaysia.com), online booking systems, or digital messaging channels (such as WhatsApp).
We process your personal data into two distinct categories to ensure absolute operational clarity and strict compliance with medical confidentiality standards:
• Identity Details: Full name (as per NRIC or Passport), NRIC or Passport number, gender, date of birth, age, and nationality.
• Contact Details: Mobile phone number, home or office telephone number, email address, and residential or billing address.
• Financial & Administrative Details: Payment records, receipt histories, appointment booking details, and e-invoice data required for compliance with the Inland Revenue Board of Malaysia (LHDN).
Pursuant to Section 4 of the Act, health-related data is legally classified as Sensitive Personal Data and is managed under strict clinical guidelines:
• Clinical Data: Patient medical history, skin conditions, known allergies, current medications, lifestyle habits, and details of past aesthetic or surgical interventions.
• Biometric & Imaging Data: Digital skin analysis records, facial mapping details, and clinical before-and-after photographs used to monitor treatment efficacy.
Your personal and clinical data will be processed by us for the following operational, medical, and commercial purposes:
• Clinical & Medical Care: To register you as a patient, verify your medical background, assess your medical suitability for specific aesthetic procedures, and safely execute clinical treatments.
• Operational Management: To coordinate appointment bookings, issue treatment and scheduling reminders, handle follow-up post-procedure care, and respond to inquiries via our WhatsApp careline.
• Regulatory Compliance: To maintain precise medical case files under Ministry of Health (MOH) guidelines and to fulfill legal corporate and tax requirements, including LHDN e-Invoicing.
• Marketing & Audience Optimization: To deliver personalized offers, festive greetings, newsletters, and interest-based digital advertisements (via tracking pixels and analytics tools from platforms such as Meta/Facebook, Instagram, and TikTok) based on your interactions with our online platforms.
Note: No sensitive clinical, medical records, or before-and-after photos will ever be utilized for marketing or social media promotion without a separate, express written consent form signed by you.
We collect your data directly and indirectly through:
1. Physical registration forms, medical consultation logs, and clinical consent forms completed at our premises.
2. Online appointment bookings and inquiry forms submitted through our official website.
3. Interaction data, chat logs, and text inquiries sent to our official WhatsApp careline (+60103791320) or social media direct messages.
4. Automated browser cookies, tracking pixels, and analytical tags when you navigate our digital platforms.
Except for data processed for voluntary marketing activities, the provision of your identity, contact details, and medical history is obligatory and mandatory for your safety.
If you refuse or fail to supply the requested compulsory data, or withdraw your consent for us to process it:
• We will be unable to register you as a valid patient in our system.
• Our medical practitioners will be unable to conduct safe clinical evaluations.
• We reserve the absolute right to refuse or immediately cease the provision of any aesthetic services or treatments to you.
SkinBeau enforces rigorous administrative, technical, and physical safeguards to defend your personal data against loss, unauthorized modification, or illicit disclosure:
• Segregated Storage: Medical records and clinical photographs are kept on highly encrypted, secure internal systems distinct from generic website visitor tracking databases.
• Access Control: Access to sensitive health details is strictly limited via role-based access tokens to authorized clinical staff directly handling your care.
• Data Minimization: Where appropriate for analytics or internal training, data is anonymized or pseudonymized to fully strip out personal indicators.
We retain different classes of records for varying durations based on Malaysian statutory necessities:
• Patient Medical Records: Maintained for a minimum mandatory statutory duration of seven (7) years from the date of your last clinical entry, in strict compliance with Malaysian healthcare archives standards. For minors (under 18), records are preserved until the patient reaches maturity.
• Online Inquiries & General Contact Data: Stored for up to twenty-four (24) months from your last active interaction before being automatically purged or completely anonymized.
Under the Personal Data Protection Act 2010, you possess clear rights regarding your data:
• Right to Access & Rectify: You can request a transcript of your personal records or request updates to fix old, incomplete, or flawed data.
• Right to Limit/Object: You may request that we halt using your data for promotional or direct marketing avenues.
• Right to Withdraw Consent: You can revoke your processing consent at any time, subject to the clinical and legal ramifications outlined in Section 4.
To exercise any of your rights, please submit a formal request to us:
• Company Name: SkinBeau Perfection Sdn. Bhd.
• Email: skinbeau@gmail.com
• Phone/WhatsApp: +60103791320
• Clinic Address: 10 & 10A, Jalan USJ 4/1, 47600 Subang Jaya, Selangor, Malaysia.
By signing our physical registration forms, using our online appointment booking tools, or communicating with our careline, you acknowledge that you have read, understood, and consented to the processing of your personal and sensitive data in accordance with this Notice.