Privacy Policy
How we collect, use, and protect your personal and medical information.
Who we are
Gleneagles Hospitals Malaysia (a member of IHH Healthcare Berhad) operates private hospitals in Kuala Lumpur, Penang, Johor, and Kota Kinabalu. We act as the data controller for the personal information you share with us as a patient, visitor, or website user.
Information we collect
- Identity & contact: name, NRIC/passport, date of birth, contact details.
- Medical information: medical history, test results, diagnoses, treatments, prescriptions.
- Financial: payment methods, insurance details, billing history.
- Website use: IP address, browser type, pages visited, cookies.
How we use your information
- To provide medical care and maintain your health records
- To process billing, insurance claims, and payments
- To communicate with you about appointments and follow-up
- To comply with legal, regulatory, and accreditation requirements
- To improve our services through anonymised analytics
Who we share with
We share your information only where necessary — with your treating clinicians, insurers for pre-authorised claims, regulatory bodies as required by law, and third-party service providers bound by confidentiality agreements. We do not sell your data.
Your rights
Under the Personal Data Protection Act 2010, you have the right to access your data, correct inaccuracies, withdraw consent where applicable, and lodge a complaint with the Commissioner. To exercise these rights, contact our Data Protection Officer at dpo@gleneagles.com.my.
Data retention
Medical records are retained for the period required by Malaysian healthcare regulations. Financial records are retained as required by tax law. Marketing contacts are retained until you opt out.
Cookies
This website uses essential cookies to function correctly. We also use analytics and marketing pixels with your consent to understand traffic and improve content.