1. Scope and Application

This Policy applies to all public-facing website pages, online forms, enquiry channels, appointment request forms, digital campaign pages, embedded tools, and website-related IT services operated for or on behalf of IHT Rehab Sdn. Bhd.

• It applies to website visitors, clients, prospective clients, employees, contractors, vendors, service providers and authorised administrators.
• Where this Policy conflicts with a signed contract, clinical consent form, or legal requirement, the stricter or legally required provision shall apply.

2. Website Use and Acceptable Conduct

Users may access the website for legitimate informational, service enquiry, appointment, communication and related purposes only.

• Users shall not misuse the website, attempt unauthorised access, upload malicious code, disrupt website availability, scrape content unlawfully, impersonate another person, or use the website for fraudulent or harmful purposes.
• IHT Rehab may restrict, suspend, log, investigate or block access where misuse, security risk, suspected fraud or legal non-compliance is detected.

3. Description of Online Personal Data

IHT Rehab may collect and process information provided directly by users or automatically collected when users interact with the website.

• Examples include name, contact number, email address, enquiry details, appointment request details, company or employer information, health-related enquiry information voluntarily submitted, IP address, browser type, device identifiers, pages visited, date and time of access, cookie identifiers and communication records.
• Users should avoid submitting unnecessary sensitive personal data through general enquiry forms unless specifically requested for service or clinical purposes.

4. Purposes of Collection and Processing

Online personal data is collected and processed for legitimate website, service, communication, safety, legal and administrative purposes.

• Responding to enquiries, appointment requests, service requests, feedback and complaints.
• Managing website performance, security monitoring, audit logs, troubleshooting and fraud prevention.
• Improving website content, user experience, service planning, communications and analytics.
• Complying with legal, regulatory, audit, clinical governance, risk management and record-keeping requirements.
• Sending updates or marketing communications only where permitted by law or where consent has been obtained, if applicable.

5. Sources of Online Personal Data

IHT Rehab may collect online personal data from several website-related sources.

• Information submitted by users through website forms, emails, calls, messages, surveys or digital campaign pages.
• Information generated automatically through cookies, web server logs, analytics tools, security tools, device information and browser interactions.
• Information received from authorised representatives, referral parties, service providers, payment or appointment platforms, and other legitimate sources where permitted.

6. Cookies Policy

Cookies are small text files or similar technologies placed on a user device to support website functions, remember preferences, improve security and understand website usage.

• Strictly necessary cookies support core website functions such as page navigation, security, form submission and load balancing.
• Preference cookies remember user choices such as language, accessibility settings or similar website preferences.
• Analytics cookies help IHT Rehab understand website usage, page performance and visitor interaction in aggregated or statistical form where possible.
• Marketing or third-party cookies, if used, may support campaign measurement, embedded content or relevant communications and should be activated only where properly disclosed and consented to as required.
• Users may manage cookies through the website cookie banner, cookie preference centre, or browser settings. Disabling some cookies may affect website functionality.

7. Cookie Consent and Preference Management

Where cookies or similar technologies process personal data, IHT Rehab will provide clear information and appropriate choices before or when such technologies are used, unless the cookie is strictly necessary for website operation or security.

• The website should provide options to accept, reject or manage non-essential cookies where applicable.
• Consent records may be retained to demonstrate user preferences and compliance.
• Users may change their cookie preferences at any time, subject to technical availability on the website.

8. Disclosure to Third Parties and Service Providers

IHT Rehab may disclose online personal data to authorised parties where necessary for the purposes stated in this Policy.

• Website hosting providers, IT support vendors, cybersecurity providers, analytics providers, appointment or communication platform providers and other authorised service providers.
• Professional advisers, auditors, regulators, law enforcement bodies, government authorities, healthcare-related authorities, insurers or any party required or permitted by law.
• Service providers must apply appropriate confidentiality, security and data protection controls based on their role and the nature of the data processed.

9. Website Security and IT Controls

IHT Rehab is committed to maintaining reasonable administrative, technical and organisational safeguards to protect website systems and online personal data.

• Controls may include secure hosting, access control, administrator account management, password controls, multi-factor authentication where available, malware protection, vulnerability management, backups, monitoring, logging and incident response.
• Access to website administration systems must be limited to authorised personnel and service providers with a legitimate business need.
• No website transmission is completely risk-free. Users should use secure devices, avoid sharing passwords and contact IHT Rehab if they suspect misuse of their information.

10. Data Retention

Online personal data will be retained only for as long as necessary for the purposes for which it was collected, to meet operational needs, to resolve disputes, and to comply with legal, regulatory, audit or record-keeping requirements.

• Cookie and analytics data should be retained according to configured tool settings and documented retention requirements.
• When no longer required, data should be securely deleted, anonymised, archived or disposed of according to applicable retention procedures.

11. Third-Party Links and Embedded Content

The website may contain links to third-party websites, maps, videos, social media pages, payment gateways, forms, analytics tools or embedded content.

• IHT Rehab is not responsible for the privacy, security or content practices of third-party websites that are not operated by IHT Rehab.
• Users should review the relevant third-party privacy notices, cookie notices and terms before interacting with those services.

12. User Rights and Requests

Subject to applicable law, users may request access to, correction of, or limitation of processing of their personal data collected through the website.

• Requests should be submitted to the Data Protection Officer through PDPA@ihtrehab.com.
• IHT Rehab may require identity verification and sufficient details to process the request.
• Certain requests may be limited by legal, clinical, regulatory, security, contractual or operational requirements.

13. Changes to This Policy

IHT Rehab may update this Policy from time to time due to changes in website functions, IT systems, service providers, business operations, legal requirements, security requirements or regulatory guidance.

• The updated version should be published on the website or policy page.
• Users are encouraged to review this Policy periodically to stay informed about how IHT Rehab manages website and cookie-related data.

14. Enquiries and Complaints

If you have any request, query, concern or complaint relating to this Policy, online personal data or cookies, please contact:

Data Protection Officer Email: PDPA@ihtrehab.com
IT Email: it@ihtrehab.com
Genaral enquiries: info@ihtrehab.com