Privacy Policy

Last updated 5 October 2026

1. Who we are

This website is operated by [registered legal name — to be confirmed], company registration number [SSM registration number — to be confirmed], registered at [registered address — to be confirmed], trading as Cellove Wellness. In this policy, “we” and “us” mean that company.

We are the data user for the purposes of the Personal Data Protection Act 2010 (Act 709) of Malaysia, which governs how we handle your personal data.

2. What this policy covers

It covers personal data we collect through this website and through enquiries that start here. It does not cover the clinical records we keep about patients we treat, which are governed separately by Malaysian medical records and confidentiality obligations, nor does it cover other companies’ websites we link to.

3. What we collect

Information you give us

When you use the enquiry form, we collect:

• your name;
• your email address;
• your phone or WhatsApp number, if you choose to give one;
• whatever you write in the message field.

Your name and email are required because we cannot reply without them. Everything else is optional. We do not ask for your identity card number, date of birth, home address, occupation, income or payment details through this website, and you should not send them.

Information collected automatically

Our hosting provider, [hosting provider — to be confirmed], keeps standard server logs that may include your IP address, browser type and the pages you requested. These are used to keep the site running and secure, not to build a profile of you.

This website sets no cookies and runs no analytics, advertising pixels or third-party trackers. See our Cookie Policy.

4. Health information

Information about your physical or mental health is sensitive personal data under the Act, and may only be processed with your explicit consent. If you choose to describe a health concern in the message field, you are giving us that consent for the sole purpose of answering your enquiry.

We would rather you did not. The enquiry form is ordinary email infrastructure, not a clinical system. Say which area you want to discuss and leave the detail for the consultation.

5. Why we use your data, and on what basis

• To answer your enquiry and arrange a consultation if you want one. Basis: your consent, given when you submit the form.
• To keep a record of what was asked and answered, so that anything we tell you is traceable. Basis: our legitimate interest in running a medical service responsibly.
• To keep the website secure. Basis: our legitimate interest in preventing abuse.

We do not use your data for marketing unless you separately ask us to, and we do not sell, rent or trade it to anyone.

6. Who else sees it

We share personal data only with:

• our hosting provider, [hosting provider — to be confirmed];
• the service that delivers and stores enquiry submissions, [form processor and where data is stored — to be confirmed];
• professional advisers, or a regulator or court, where we are legally required to.

Where any of these store data outside Malaysia, we remain responsible for it and require them to protect it to the standard the Act expects.

7. WhatsApp

The WhatsApp buttons on this site open a conversation in WhatsApp, which is operated by Meta, not by us. Once you are in WhatsApp you are subject to Meta’s own privacy terms, and Meta can see that you contacted us. We control only what happens to the messages after we receive them. If you would rather Meta were not involved, email us at [general enquiries email — to be confirmed] instead.

8. How long we keep it

Enquiries that do not lead to a consultation are deleted after [retention period for enquiries — to be confirmed]. If you become a patient, your clinical records are kept for the period Malaysian medical record-keeping requirements set, which is longer and sits outside this policy.

9. Your rights

Under the Act you may ask us to:

• Access the personal data we hold about you;
• Correct it if it is wrong or out of date;
• Withdraw your consent to us processing it, at any time;
• Limit how we process it, including telling us to stop contacting you;
• Delete it, where we are not required to keep it.

Write to [data protection contact name — to be confirmed] at [data protection email — to be confirmed]. We will respond within the period the Act allows. There is no charge for a reasonable request. If you are not satisfied with our answer, you may complain to the Personal Data Protection Commissioner of Malaysia.

10. Security

The site is served over HTTPS and access to enquiries is limited to staff who need it. No transmission over the internet is completely secure, which is the practical reason clinical detail belongs in consultation rather than in a web form.

11. Children

This website is not directed at children under 18. If a minor needs care, a parent or guardian should make the enquiry.

12. Changes

If we change this policy we will update the date at the top. If we ever add analytics, advertising or online booking, we will update this policy and ask for your consent before any tracking begins.

13. Contact

[data protection contact name — to be confirmed], [data protection email — to be confirmed], [business phone — to be confirmed], [registered address — to be confirmed].