Last updated: 4 August 2026

1. About This Notice

Dr Liza Clinic (“Dr Liza Clinic”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy and Personal Data Protection Notice explains how we collect, use, store, disclose and protect personal data obtained through drlizaclinic.com, website forms, appointment enquiries, WhatsApp communications and other online channels linked to our website.

This notice is prepared in accordance with the Personal Data Protection Act 2010 (Act 709), including applicable amendments, regulations and guidelines in Malaysia.

Separate consent forms or privacy notices may apply when you attend a consultation or receive treatment at our clinic.

2. Personal Data We May Collect

Depending on how you interact with us, we may collect:

Your full name;
Telephone or WhatsApp number;
Email address;
Appointment preferences;
Treatment or service interests;
Messages, questions and information included in an enquiry;
Communication and appointment history;
Feedback, reviews or survey responses;
Payment or transaction information, where applicable;
Photographs or documents voluntarily provided by you;
Technical information such as your IP address, browser, device type, pages visited, referring website and website interactions; and
Any other information reasonably required to respond to your enquiry or provide the requested service.

Where you voluntarily provide information concerning your health, medical history, medication, allergies, skin condition, treatment history or photographs relating to a health concern, such information may constitute sensitive personal data.

Please avoid sending detailed medical records through a general website form unless requested by an authorised member of our team.

3. How We Collect Personal Data

We may collect personal data:

Directly from you through website forms, WhatsApp, telephone calls, email or in-person communication;
From a parent, legal guardian or authorised representative;
Automatically when you use our website;
When you interact with our social media pages or third-party appointment services; and
From other lawful sources where you have authorised the disclosure or where permitted by law.

4. Purposes of Processing

We may process your personal data to:

Respond to enquiries and requests;
Arrange, confirm, reschedule or follow up on appointments;
Provide information about treatments and clinic services;
Conduct preliminary assessments before a consultation;
Administer consultations, treatments and customer records;
Communicate treatment-related instructions or follow-up information;
Process payments and maintain transaction records;
Improve our website, services and customer experience;
Understand website usage and campaign performance;
Maintain website security and prevent misuse;
Manage feedback, complaints and service quality;
Send promotional information where you have provided consent;
Comply with legal, regulatory, professional and reporting obligations; and
Establish, exercise or defend legal rights.

We will not use sensitive personal data for an unrelated purpose without obtaining the required consent or having another lawful basis permitted under Malaysian law.

5. Consent and Provision of Information

Providing personal data is generally voluntary. However, information marked as required is necessary for us to process your enquiry, arrange an appointment or provide the requested service.

If you do not provide the required information, we may be unable to respond to your enquiry or complete your appointment request.

By submitting personal data to us, you acknowledge the processing described in this notice. Where required, we will obtain additional or explicit consent, particularly for sensitive personal data and direct marketing.

You may withdraw your marketing consent at any time by contacting us or replying STOP to the relevant promotional message.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies for:

Essential website functions;
Security and fraud prevention;
Remembering website preferences;
Measuring website performance and visitor activity; and
Evaluating advertising or campaign effectiveness, where enabled.

Our website may also contain links or features provided by third parties such as WhatsApp, social media platforms, maps and online review services. These providers may collect information or place cookies according to their own privacy policies.

You may control or delete cookies through your browser settings. Disabling essential cookies may affect certain website functions.

7. Disclosure of Personal Data

Where necessary for the purposes stated in this notice, personal data may be disclosed to:

Our doctors, employees and authorised clinic personnel;
Website hosting, maintenance and technology providers;
Appointment, communication and customer-support providers;
Payment and accounting service providers, where applicable;
Professional advisers, auditors and insurers;
Analytics, advertising or campaign service providers, where applicable and permitted;
Government authorities, regulators, law-enforcement bodies or courts where required by law; and
Other parties authorised by you.

We do not disclose personal data to unrelated third parties for their own direct-marketing purposes without your consent.

8. Processing Outside Malaysia

Some technology or communication providers may process or store information outside Malaysia.

Where an international transfer occurs, we will take reasonable steps to ensure that the recipient provides an appropriate level of protection and that the transfer complies with applicable Malaysian law.

9. Retention of Personal Data

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, meet legal or professional requirements, resolve disputes and maintain appropriate business records.

Clinical or treatment-related records may be retained for a longer period where required by applicable healthcare, professional or legal obligations.

When personal data is no longer required, we will take reasonable steps to delete, destroy or anonymise it securely.

10. Security

We use reasonable administrative, technical and physical safeguards to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.

However, no website, electronic transmission or storage method can be guaranteed to be completely secure.

11. Your Rights

Subject to the Personal Data Protection Act 2010 and other applicable laws, you may:

Request access to personal data held about you;
Request correction of inaccurate, incomplete or outdated information;
Withdraw consent, subject to applicable legal or contractual restrictions;
Request that we stop sending direct-marketing communications;
Request deletion of information that is no longer required, subject to legal and professional retention obligations;
Request data portability where applicable, technically feasible and compatible; and
Submit an enquiry or complaint regarding our handling of personal data.

We may request information to verify your identity before processing a request.

12. Personal Data of Minors

If you are under 18 years old, please provide personal data or submit an appointment enquiry only with the knowledge and consent of your parent or legal guardian.

We may request confirmation or consent from a parent or legal guardian where appropriate.

13. Third-Party Websites

Our website may contain links to websites or services operated by third parties. We are not responsible for the privacy practices, security or content of those external services.

You should review the privacy notice of the relevant third party before providing personal data.

14. Changes to This Notice

We may update this notice to reflect changes to our services, technology, business practices or legal requirements.

The latest version will be published on this page together with its updated date.

15. Contact Us

For questions, requests or complaints relating to your personal data, please contact:

Dr Liza Clinic
Ground Floor, Unit 1-05
The Park Residence, Persiaran Jalil Utama
Bandar Bukit Jalil
57000 Kuala Lumpur, Malaysia

WhatsApp/Telephone: +60 13-320 5062
Website: https://drlizaclinic.com/