BACKOFFICE PRIVACY POLICY

PLEASE REVIEW THIS BACKOFFICE PRIVACY POLICY CAREFULLY


Introduction

This Backoffice Privacy Policy (“this Policy”) describes how Encore Med Sdn. Bhd. (Company No: 1198745-V) (“we”) manage Personal Data which is in our possession or under our control.


"Personal Data", is defined in the Personal Data Protection Act 2010 of Malaysia (“PDPA”), and currently refers to any information in respect of commercial transactions, that relates directly or indirectly to an individual, who is identified or identifiable from that information or from that and other information which is in our possession and includes any sensitive personal data and expression of opinion about the individual.


This Policy describes how we collect, receive, use, store, share, transfer, and process your Personal Data. It also describes your choices regarding use, as well as your rights of access and correction of your Personal Data.



Application

This Backoffice Privacy Policy applies to your use of our backoffice, including the use of our associated mobile applications, as our corporate customer or as an user of our corporate customer. It applies to the data we process on behalf of you (“Trust Data”) in our capacity as a data processor.

This Backoffice Privacy Policy does not apply to any information or data collected by us as a data user for other purposes, such as the information collected on our website at www.encoremed.io or through mobile application or any other designated application of the same function that we rebranded for hospital / clinic enabling patient to make appointment from home which is downloadable via apps store or that has been integrated into individual hospital’s / clinic’s webpage. This Backoffice Privacy Policy also does not apply to any information that we collect and manage using the Backoffice for our own development and personalized of the services (“New Data”). Please find the Privacy Policy that covers these information or data here.



Responsibility

We process Trust Data under the direction of our corporate customer (i.e. hospital / clinic), and has no direct control or ownership of the Personal Data we process. Corporate customer or its users are responsible for complying with any regulations or laws that require providing notice, disclosure, and or obtaining consent prior to transferring the data to Backoffice for processing purposes.



General

Terms not otherwise defined herein shall have the meaning as set forth in Backoffice Agreement or Hospital SaaS Agreement. In the event of a conflict between this Backoffice Privacy Policy and Backoffice Agreement, the terms of Backoffice Agreement shall prevail.

We periodically update this Backoffice Privacy Policy. We will post any Privacy Policy changes on this page and, if the changes are significant, we will provide a more prominent notice by sending you an email or push notification on the website or application. While we will notify you of any material changes to this Backoffice Privacy Policy prior to the changes becoming effective, we encourage you to review this Backoffice Privacy Policy periodically as your continued access of our website or use of our services will signify your acceptance of the contents of this Backoffice Privacy Policy or any subsequent changes made without reservation.

This Backoffice Privacy Policy shall be governed by, and construed in accordance with, the laws of Malaysia. Without prejudice to your rights under any applicable laws, any dispute arising out of or in connection with this Backoffice Privacy Policy, including any question regarding their existence, validity or termination, shall be referred to and finally resolved by the Courts of Malaysia and both you and we hereby unconditionally and irrevocably submit to the exclusive jurisdiction of the Courts of Malaysia.

If you have any questions about this Backoffice Privacy Policy or our treatment of the information you provide us, please contact us using the details support@encoremed.io.



The Privacy Policy sets out:

  1. How We Use the Backoffice
  2. How We Share Information We Collect
  3. Third Party Site
  4. Data Subject / Patient requests
  5. Retention of Personal Data
  6. Transferring Your Information outside of Malaysia
  7. How to Contact Us
  8. Precedence


  1. How we Use the Backoffice
  2. Our Backoffice helps Backoffice users to simplify their daily work flow. The information added to the Backoffice when a Backoffice user adds the information, is stored and managed on the System’s servers.

    Use by Encore Med

    We use our own Backoffice to build products and services so that we can offer you with simpler and smarter healthcare offering. Information that we collect and manage using the Backoffice for our own development and personalized of the services (“New Data”) belongs to us and is used, disclosed and protected according to this Privacy Policy.

    Use by Corporate Customer or its Users

    Backoffice users use the Backoffice to simplify their daily work flow while corporate customer may use Backoffice to track performance of their hospital / clinic. When Backoffice users use the Backoffice, they input data in order to use different features we have in our Backoffice. We do not control the content or type of information or data that Backoffice users may choose to input in. This information (“Trust Data”) belongs to corporate customer and is used, disclosed and protected by corporate customer according to their own privacy policy.

    We processes Trust Data as our corporate customer may direct and in accordance with our agreements with our corporate customers (Hospital SaaS Agreement), and we store it on our System’s servers.

    Our agreement with corporate customers prohibit us from using Trust Data, except as necessary to create a set of New Data in order to provide and improve our services, as permitted by this Backoffice Privacy Policy, and as required by law.

    We use the Trust Data collected through Backoffice input by corporate customer or its user for following purposes:

    • to provide service offering in Backoffice (which includes without limitation to detection, prevention and resolution of security and technical issues);
    • to improve our service offering and develop new services;
    • to respond to customer support requests; and
    • otherwise to fulfill the obligation under the Backoffice Agreement and Hospital SaaS Agreement.

    We have no direct relationship with patients who provide their Personal Data to our corporate customer or its users. Corporate customers controls and are responsible for correcting, deleting or updating information they have collected. We may work with our corporate customer to help them provide notice to patient about their data collection, processing and usage.

  3. How We Share Information We Collect
  4. With Service Provider

    We employ other companies and people that we carefully selected to provide services to visitors of our websites and our corporate customer or its users, and may need to share your information with them (only to the extent necessary) to provide their support function or services to you. They are required to maintain the confidentiality of your information.

    Disclosure by Law

    We reserve the right to use or disclose your Personal Data if required by law or if we reasonably believe that use or disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a law, court order, or legal process.

  5. Third Party Site
  6. We may provide links on our Backoffice linking you to sites or services of third parties. We will always try to make it clear that when you are leaving our Backoffice. We are not responsible for the content or privacy practices employed by websites that are linked from our website. We recommend that you check the policy of each site you visit and contact its Owner or operator if you have any concerns or questions.

  7. Data Subject / Patient requests
  8. If a patient no longer like his information to be held, stored or processed by us, or if the patient intend to access, correct, amend or delete data collected, we will work with you to respond to the patient’s requests.

  9. Retention of Personal Data
  10. The data collected as part of your use of Backoffice is retained according to the relevant agreements between our corporate customer and us (Hospital SaaS Agreement).

    Trust Data is retained for as long as you remain an active corporate customer or its users. Trust Data is deleted upon written request by you or after an established period following the termination of all agreement between the corporate customer and us. In general, Trust Data is deleted after your paid subscription ends and your access to Backoffice become inactive / barred.

  11. Transferring Your Information outside of Malaysia
  12. To facilitate our operation, we may transfer, store and/or process your Personal Data outside Malaysia. In doing so, we will comply with the PDPA and other applicable data protection and privacy laws.

  13. How to Contact Us
  14. If you would like to contact us with regard to any inquiries, complaints, please contact us via the following contact information:

    Address
    3A-7, Menara MBMR No. 1,
    Jalan Syed Putra,
    58000 Kuala Lumpur.

    Telephone No. : +603-2770 2539
    Email Address : support@encoremed.io

  15. Precedence
  16. The English version of this Backoffice Privacy Policy shall take precedence over the Malay version should there be any conflict between the two.