Privacy Policy

FarivaMed is operated by Dalton Capital Sdn Bhd ("we", "us", or "our"), a company registered in Malaysia. We operate the FarivaMed platform, which connects LCP-certified aesthetic clinics with patients across Malaysia. If you have any questions about this Privacy Policy, contact us at muntheng@daltoncapital.asia.

We collect information you provide directly to us, including: • Account information — email address, name, and password when you create an account. • Profile data — phone number, profile photo, and preferences you choose to share. • Clinic registration data — clinic name, address, phone number, doctor credentials, MMC registration number, and uploaded documents (for clinic accounts). • Patient data — name, contact details, and booking preferences when patients use the platform. • Communications — messages you send to us via email or through the platform. We also collect certain information automatically when you use our platform, including IP address, browser type, device information, pages visited, and app usage data.

We use the information we collect to: • Verify and onboard aesthetic clinics onto the FarivaMed platform. • Connect patients with suitable clinics based on their preferences. • Process bookings and manage appointments. • Send transactional communications (booking confirmations, reminders, account notifications). • Improve and personalise our platform. • Comply with legal obligations under Malaysian law, including the Personal Data Protection Act 2010 (PDPA). • Detect and prevent fraud, abuse, or security issues. • Provide customer support and respond to inquiries.

We process your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Our lawful bases include: • Contractual necessity — processing required to provide the services you have requested. • Legitimate interests — improving our platform and preventing fraud. • Consent — where you have given us explicit consent to process your data. • Legal obligation — where processing is required by Malaysian law.

We do not sell your personal data. We may share your information with: • Clinics on our platform — limited patient data shared to facilitate bookings (with your consent). • Service providers — third-party vendors who assist in operating our platform (hosting, analytics, email delivery), bound by confidentiality agreements. • Legal authorities — when required by law or to protect the rights of FarivaMed or its users. • Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to affected users.

We retain your personal data for as long as necessary to provide our services or as required by Malaysian law. Clinic registration data is retained for the duration of the clinic's engagement with FarivaMed and up to 7 years thereafter for compliance purposes. You may request deletion of your data by contacting us.

Under the PDPA, you have the right to: • Access the personal data we hold about you. • Correct inaccurate or incomplete data. • Withdraw consent for data processing (where consent is the basis). • Request deletion of your data, subject to legal retention requirements. • Object to processing of your data for certain purposes. To exercise any of these rights, contact us at muntheng@daltoncapital.asia.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including: • Encryption of data in transit (TLS/SSL) and at rest. • Regular security assessments and vulnerability testing. • Access controls and authentication mechanisms for our systems. • Employee training on data protection and privacy practices. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

FarivaMed is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at muntheng@daltoncapital.asia.

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through FarivaMed. We use the following third-party services that may collect data: • Supabase — database and authentication services. • Vercel — hosting and analytics. • Google Analytics — aggregated website traffic analysis (if enabled).

We use cookies and similar tracking technologies to improve your experience on our platform. Please see our Cookie Policy for detailed information about the cookies we use and how to manage your preferences.

You may request deletion of your personal data at any time by: • Emailing us at muntheng@daltoncapital.asia with your deletion request. • In-app settings — if available, you can delete your account directly through the app. We will process your deletion request within 30 days, subject to any legal retention requirements. After deletion, we will retain only anonymised or aggregated data that cannot be used to identify you.

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email or through the platform. The date of the latest revision is shown at the top of this page. Continued use of FarivaMed after changes are posted constitutes acceptance of the revised policy.