METRO HEALTHCARE BERHAD
Registration No. 201001021746 (905516-M) (Incorporated in Malaysia)
PATIENT PRIVACY & PERSONAL DATA PROTECTION NOTICE
Version 1.0
Effective Date: 15 July 2026
Your Privacy Matters
At Metro Healthcare Berhad (“Metro Healthcare Group”, “we”, “our” or “us”), we respect your privacy and are committed to protecting your personal information.
This Patient Privacy Notice explains how we collect, use, disclose, store and protect your personal data whenever you receive care or use services at any Metro Healthcare Group facility.
This Notice applies to all hospitals, specialist clinics, IVF centres, diagnostic centres, laboratories and healthcare facilities owned or operated by Metro Healthcare Berhad or its subsidiaries.
Who We Are
This Privacy Notice applies to all Metro Healthcare Group healthcare facilities, including but not limited to:
- Hospital Wanita Metro
- Pusat Rawatan Kesuburan Persenyawaan In Vitro Metro IVF
- Klinik Pakar Wanita Metro
- Klinik Pakar Wanita Setia Walk
- Vision One Diagnostics Centre
- Any future subsidiary or affiliated healthcare entity within the Metro Healthcare
What Personal Data We Collect
Depending on the healthcare services you receive, we may collect information such as:
Personal Information
- Name
- NRIC, Passport or other identification
- Date of birth
- Gender
- Nationality
- Address
- Telephone number
- Email address
- Emergency contact details
Medical Information
- Medical history
- Consultation notes
- Diagnosis
- Medications
- Allergies
- Laboratory test results
- X-rays and imaging
- Surgical records
- Pregnancy records
- Fertility treatment records
- Medical reports
Financial Information
- Insurance information
- Employer information (where applicable)
- Payment details
- Billing information
Digital Information
- CCTV recordings for security
- Website usage
- Patient Portal activity
- Mobile application usage
- Online appointment records
Why We Collect Your Personal Data
We use your information to:
- Register you as a patient
- Provide safe and effective medical care
- Arrange appointments
- Maintain your medical records
- Perform laboratory and diagnostic services
- Process payments and insurance claims (if applicable)
- Communicate important information about your care
- Comply with Ministry of Health and legal requirements
- Improve the quality and safety of our healthcare services
- Conduct medical audits and quality assurance
- Support approved medical research using anonymised data where appropriate We will only use your personal data for lawful purposes.
Who We May Share Your Information With
To provide healthcare services, your personal data may be shared with:
- Doctors and specialists involved in your care
- Nurses and allied health professionals
- Laboratories and diagnostic centres
- Pharmacies
- Insurance companies and Third-Party Administrators (TPAs)
- Ministry of Health Malaysia and other authorised government agencies
- Other healthcare providers where you are referred or transferred
- Service providers who support our operations (such as secure IT or cloud service providers) We will only disclose information where necessary, authorised by you, or required by law.
How We Protect Your Information
We take appropriate measures to protect your personal data through:
- Secure electronic medical record systems
- Restricted staff access
- Password-protected systems
- Encryption and cybersecurity safeguards
- CCTV security
- Staff confidentiality obligations
- Regular monitoring and auditing
Only authorised personnel may access your information for legitimate healthcare or administrative purposes.
How Long We Keep Your Information
Your personal data and medical records will be retained for as long as required under Malaysian law and healthcare regulations, after which they will be securely destroyed or anonymised where appropriate.
Your Rights
Subject to applicable laws, you have the right to:
- Request access to your personal data
- Request correction of inaccurate information
- Update your contact details
- Withdraw consent for certain non-essential processing where legally permissible
- Opt out of receiving marketing communications
- Make enquiries or lodge complaints regarding your personal data
Please note that certain medical records must be retained to comply with legal, regulatory or patient safety requirements.
Children’s Personal Data
Where patients are below 18 years of age, consent will generally be obtained from a parent or legal guardian unless otherwise permitted by law.
Marketing Communications
We may occasionally send information regarding:
- Health screening programmes
- Wellness campaigns
- Health education events
- Promotions
- New healthcare services
You may opt out of receiving these communications at any time by contacting us.
CCTV Surveillance
For the safety and security of patients, visitors, staff and Hospital property, CCTV operates in selected public areas of our healthcare facilities. CCTV is not installed in consultation rooms, treatment rooms, operating theatres, labour rooms, changing rooms or toilets, except where permitted by applicable law for specific clinical, safety or security purposes.
Where a patient reports a missing personal belonging, alleged theft or other security-related incident, the Hospital may, where the relevant area is monitored by CCTV and recordings relevant to the reported incident are available, conduct an internal review of those recordings. The Hospital does not guarantee that every area of its premises is continuously monitored by CCTV, or that every incident will be captured, recorded or identifiable from CCTV recordings.
To protect the privacy, dignity and confidentiality of other patients, visitors and staff, patients and visitors will generally not be permitted to directly view or obtain copies of CCTV recordings.
Where appropriate, the Hospital may communicate the outcome of its review to the reporting individual, without disclosing personal data or confidential information relating to other individuals.
International Patients
Where necessary, we may use your information to assist with:
- Medical referrals
- Visa support documentation
- Medical reports
- Insurance claims
- Coordination of overseas care
Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our services or legal requirements.
The latest version will always be available at our healthcare facilities and on our website.
Contact Us
If you have any questions regarding your personal data or wish to exercise your rights under the Personal Data Protection Act 2010, please contact:
Data Protection Officer
Metro Healthcare Berhad
Whatsapp: +60 13-607 2119
Email: pdpa@metroivf.com.my
Website: www.metro.com.my
For facility-specific enquiries, please contact the respective hospital or clinic where you received treatment.
A Commitment to Your Privacy
At Metro Healthcare Group, protecting your privacy is an important part of providing safe, trusted and compassionate healthcare.
We appreciate the confidence you place in us and are committed to handling your personal information responsibly, securely and in accordance with Malaysian law.
