Privacy Policy
Last updated: 15 October 2026
This policy explains how Healthy Paradise Sdn Bhd ("we", "us") collects, uses and protects your personal data when you register with us, book sessions or chat with our WhatsApp booking assistant. We follow the Personal Data Protection Act 2010 (PDPA) of Malaysia.
1. What we collect
- Identity and contact details: name, NRIC or passport number, date of birth, phone numbers, email, address, occupation, marital status, and your spouse’s details if you register together.
- Health information you give us: health conditions or remarks, and blood test dates, so we can judge whether a therapy is suitable for you.
- Bookings, packages and payments: sessions booked and attended, packages bought, amounts paid, payment method and reference. We do not store card numbers.
- WhatsApp: your WhatsApp number and profile name, the messages you exchange with our booking assistant, and your language choice.
2. Why we use it
- To register you and manage your bookings, packages and sessions.
- To confirm, change or remind you about bookings on WhatsApp.
- To record payments and keep accounts.
- To keep you safe during therapies, using the health information you give us.
- To meet our legal and tax obligations.
We do not sell your data, and we do not share it with others for their marketing.
3. Health information
Health information is sensitive personal data under the PDPA. We only process it with the explicit consent you give when you register, and only for your care at our centre.
4. WhatsApp and Meta
Our booking assistant uses the WhatsApp Business Platform run by Meta. Messages you send us pass through Meta’s systems, which may be outside Malaysia, and Meta handles them under the WhatsApp Privacy Policy. By messaging our WhatsApp number you agree to this transfer.
5. Who can see your data
Only our staff, each with their own login, and only what their role needs. For example, reception staff see bookings but not payments. Your data is stored on servers run by our web hosting provider. We disclose data to authorities only when the law requires it.
6. Keeping your data safe
Staff accounts are password protected and limited by role, the website uses an encrypted (HTTPS) connection, and records show which staff member entered them.
7. How long we keep it
We keep your data while you are our customer and for up to 7 years after your last package or payment, because Malaysian tax law requires us to keep financial records. After that we delete it. You can ask us to delete your personal details sooner, and we then keep only payment amounts and dates without your name; see Your data and deletion.
8. Your rights
- Ask for a copy of the personal data we hold about you.
- Ask us to correct data that is wrong or out of date.
- Withdraw your consent, or ask us to stop sending you messages.
- Complain to the Personal Data Protection Commissioner (JPDP) if you are not satisfied with our answer.
Contact us using the details below. We reply within 21 days. A small fee may apply to a request for a copy of your data, as the PDPA allows.
9. Cookies
This website uses no advertising or tracking cookies. Staff who sign in get a single login cookie that keeps them signed in.
10. Changes and language
We may update this policy and will change the date at the top when we do. This policy is available in English and Bahasa Melayu; if they differ, the English version applies.
11. Contact
- Healthy Paradise Sdn Bhd
- Address: D-17-G Jalan Multimedia 7/AJ, Citypark I-City, 40000 Shah Alam
- Phone / WhatsApp: +60 11-5110 2870
- Email: admin@hpwellness.center