Privacy Policy

1. About this policy

This Privacy Policy applies when you visit houseofqi.my, complete our wellbeing quiz or an enquiry form, contact us by phone, email, WhatsApp or social media, book a consultation, or receive services from House of Qi.

House of Qi is part of the Care Concierge family. References to “House of Qi”, “we”, “us” or “our” include My Care Concierge Sdn Bhd when it operates or supports House of Qi. For the purposes of Malaysia’s Personal Data Protection Act 2010, personal data and processing have the meanings given in that Act.

By giving us personal data, you acknowledge that it may be processed as described in this policy. Where consent is required, we will ask for it in an appropriate form.

2. What we collect

The information we collect depends on how you interact with us. It may include:

• your name, phone number, email address, address, date of birth and preferred language or contact method;
• appointment, consultation, service and payment records;
• information you choose to share about your symptoms, health history, medication, allergies, pregnancy, lifestyle, mobility, sleep, digestion or wellbeing;
• answers submitted through our wellbeing quiz or enquiry forms;
• messages, feedback and other communications with us;
• technical information such as your device, browser, IP address and how you use our website; and
• any information needed to meet legal, safety or identity-verification requirements.

Health and medical information may be sensitive personal data. Please only provide information that is relevant to your enquiry or care. If you provide information about another person, you must have their permission or another lawful basis to do so.

3. How we use your information

We may process your personal data to:

• respond to questions and follow up on enquiries;
• assess service suitability, arrange consultations and provide practitioner-led care;
• coordinate related care within the Care Concierge family where you ask us to or where it is reasonably needed for your care;
• process payments and maintain clinical, service and business records;
• communicate appointment information, care instructions and service updates;
• protect patients, visitors, practitioners, our systems and our business from safety, security or fraud risks;
• improve our website, services and customer experience through internal analysis;
• send marketing communications where you have agreed to receive them, with the option to unsubscribe; and
• comply with applicable law, regulatory requirements and legitimate legal requests.

Your quiz answers help us understand what you may want support with. The quiz is not a medical diagnosis and is not a substitute for assessment by a qualified practitioner or medical professional.

4. Where your information comes from

We usually receive personal data directly from you through this website, forms, phone calls, email, WhatsApp, social media, in-person consultations and documents you provide. We may also receive relevant information from a family member, carer, referring professional, healthcare provider, payment provider or another Care Concierge service, where you have authorised this or where the law permits it.

Our website may use cookies or similar technologies that are necessary for the site to function or that help us understand site use. You can control non-essential cookies through your browser settings where available.

5. Who we may share it with

We only share personal data where it is reasonably necessary for the purposes described above. Recipients may include:

• House of Qi practitioners, employees and authorised team members;
• companies within the Care Concierge group that provide operational, administrative, technology or care-coordination support;
• healthcare, rehabilitation or other care providers involved in your care, with your permission or where otherwise permitted by law;
• service providers such as secure hosting, record-management, payment, communication and professional advisory providers; and
• regulators, law-enforcement bodies, courts or other parties when disclosure is required or permitted by law.

Some service providers may process data outside Malaysia. Where a transfer is necessary, we take reasonable steps to ensure the information receives appropriate protection and handle the transfer in accordance with applicable law.

6. Security and retention

We take reasonable administrative, physical and technical measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure. Access is limited to people who need the information to carry out their responsibilities.

No storage or transmission method is completely secure. We keep personal data only for as long as reasonably needed for the purposes described in this policy, to provide care, or to meet legal, professional and record-keeping obligations. We then securely delete or anonymise it where appropriate.

7. Your choices and rights

Subject to applicable law, you may ask to access or correct your personal data, withdraw consent where processing relies on consent, or ask us to stop sending marketing communications. We may need to verify your identity before acting on a request. Certain information may need to be retained where the law, patient safety or professional record-keeping obligations require it.

You are responsible for ensuring that information you give us is accurate, complete and not misleading. Please tell us when your details change.

Third-party links

Our website may link to WhatsApp, Google Maps, social media or other third-party services. Their own privacy policies apply when you use those services.

Changes to this policy

We may update this policy from time to time. The latest version will be published on this page with its updated date. If a change is significant, we may also notify you through an appropriate channel.