Personal Data Protection Notice
Last updated: 22 October 2026
Klinik Pergigian Dr Ray & Partners Sdn. Bhd. ("Dr Ray & Partners Dental", "we", "us" or "our") is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 ("PDPA") of Malaysia. This notice explains what personal data we collect, why we collect it, who we may share it with, and the rights you have over it. This notice is available in English and Bahasa Malaysia. If there is any inconsistency between the two versions, the English version prevails.
1. Personal data we collect
Depending on how you interact with us, we may collect:
- Contact details, such as your name, phone number and email address, when you message us on WhatsApp, call, email, or book an appointment.
- Identification details, such as your NRIC or passport number and date of birth, when you register as a patient.
- Health information, including your dental and medical history, medications, allergies, and treatment notes. This is sensitive personal data under the PDPA, and we collect it only to provide your care.
- Clinical images and records, including X-rays, 3D CBCT scans, digital intraoral scans, and photographs of your teeth and smile.
- Payment information needed to process treatment fees or instalment plans.
- Any other information you choose to share with us, for example when asking a question before booking.
- Information about how you use this website, collected through cookies and similar technologies (see section 4).
If you are under 18, we collect your personal data with the consent of your parent or legal guardian.
2. How we use your personal data
We use your personal data to:
- Respond to enquiries, and schedule, confirm and remind you of appointments.
- Diagnose, plan and provide dental treatment, and follow up on your care.
- Prepare treatment plans and order custom appliances, such as clear aligners, crowns, bridges, dentures and implant components.
- Process payments and instalment plans.
- Keep clinical records and comply with our legal and regulatory obligations as a dental practice in Malaysia.
We will only use photographs or images of your treatment, such as before-and-after photos, on our website or social media with your separate, explicit consent, and you may withdraw that consent at any time.
3. Disclosure of personal data
We do not sell your personal data. We share it only where necessary for your care or where the law requires, for example with:
- Dental laboratories and appliance manufacturers that make items for your treatment, such as our clear aligner, implant and crown suppliers.
- Specialists or hospitals we refer you to, with your knowledge.
- Payment and instalment plan providers, and your insurer or employer panel where you ask us to bill them.
- Analytics and advertising providers, such as Google and Meta, for website usage information only (see section 4), never your health records.
- Government and regulatory authorities, where required by law.
Some appliances, such as clear aligners, are designed and manufactured by suppliers that may process your dental scans and records outside Malaysia. Where this happens, we share only what is needed for your treatment and take reasonable steps to ensure your data is protected to a standard comparable to the PDPA.
When you contact us on WhatsApp, your messages are also processed by WhatsApp (Meta) under its own privacy policy.
4. Cookies, analytics and advertising
This website uses Google Tag Manager to run analytics and advertising tools. These may include Google Analytics and, depending on the campaigns we run, advertising platforms such as Google Ads and Meta (Facebook and Instagram). These tools use cookies and similar technologies to collect information about how you use the website, such as the pages you visit, the buttons you click (for example, to contact us on WhatsApp), the device and browser you use, your approximate location, and how you found us.
We use this information to understand how the website is used, improve it, and measure and show our advertising, including showing our adverts to people who have visited the website before. It does not include your health records or anything you tell us in a consultation. The providers of these tools process this information under their own privacy policies, and it may be processed outside Malaysia.
You can block or delete cookies in your browser settings, opt out of Google Analytics with Google's browser add-on, and manage personalised adverts in your Google and Meta account settings. The website will still work if you do.
5. Data security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or loss, with particular care for sensitive information such as your health records and clinical images.
6. Retention of personal data
We keep personal data, including clinical records and images, only for as long as necessary to provide your care and to meet our legal and professional record-keeping obligations as a dental practice in Malaysia. After that, it is securely destroyed or permanently anonymised.
7. Your rights
Under the PDPA, you have the right to:
- Request access to the personal data we hold about you. A fee permitted by the PDPA may apply.
- Request that we correct any inaccurate, incomplete or out-of-date personal data.
- Ask us to stop using your personal data for marketing, such as promotional messages, at any time.
- Withdraw your consent to our processing of your personal data, subject to legal and clinical record-keeping requirements. If you withdraw consent, we may not be able to continue providing some services.
8. Is providing your data compulsory?
You do not have to give us your personal data. However, we need your contact details, identification and health information to provide safe, appropriate dental treatment. Without them, we may not be able to treat you.
9. Changes to this notice
We may update this notice from time to time. The "last updated" date at the top of this page reflects the most recent version.
10. Contact us
If you have any questions about this notice, or wish to access or correct your personal data or exercise any of your rights under the PDPA, please contact us: