Privacy policy

Who I am

This website and the 1-to-1 consult are run by Dr Husain, a registered medical doctor based in Serdang, Selangor, Malaysia. I am responsible for the personal information collected here. "I" and "me" in this policy mean Dr Husain.

What I collect

• Contact details: your name, email address and phone number.
• Health information you choose to share: your answers in the booking form (for example sleep, eating, energy, symptoms, family history, recent results and your main concern), and what you tell me or show me during the consult.
• Booking and payment records: the consult you booked, the time, the amount, and the payment reference and status. I don't receive your card number or online banking login.
• Free guide and emails: your name and email if you ask for the guide, and whether you agreed to my weekly email.
• Messages: anything you send me by email or WhatsApp.
• Technical data: my website host keeps short-lived server logs (such as IP address, browser type and pages requested) to keep the site running and secure.

How I use it

• To prepare for and deliver your consult.
• To take payment, confirm your booking and send messages about it.
• To keep a record of your consult, as a doctor should.
• To send the free guide, and the weekly email only if you ticked the box for it.
• To answer your questions and handle refunds.
• To meet my legal, tax and professional obligations.

I don't sell your information, and I don't use it for advertising.

Your consent

Under the PDPA, information about your physical or mental health is sensitive personal data. I only use it with your explicit consent, which you give by ticking the health-information box in the booking form.

The weekly email is optional and separate. You can withdraw any consent at any time by contacting me, or stop the weekly email with the unsubscribe link in every email. If you withdraw consent for your health information, I won't be able to hold the consult.

Who I share it with

Only with services I use to run the consult, and only what each one needs:

• ToyyibPay: payment processing (FPX and card).
• Calendly: appointment scheduling and reminders.
• Zoom: video consults.
• Supabase: secure database for booking-form answers and booking records.
• Resend: sending emails.
• Vercel: website hosting.

Some of these services store data on servers outside Malaysia, for example in Singapore or the United States. I choose providers that protect data with encryption and access controls.

I may also disclose information if the law requires it, or if I believe it is needed to protect someone's life or safety.

Cookies and your browser

This website doesn't use advertising or analytics cookies. While you fill in the booking form, your answers are kept in your own browser tab so you don't lose them if the page reloads; they are cleared when you close the tab or finish booking. Calendly and Zoom may set their own cookies when you use them.

How long I keep it

• Booking-form answers and consult notes: 7 years from your last consult, in line with medical record-keeping practice.
• Payment and financial records: 7 years, as Malaysian tax law requires.
• Free guide sign-ups and weekly email list: until you unsubscribe or ask me to delete them.
• Server logs: kept by my website host for a short period, then deleted.

After these periods I delete the information or make it anonymous.

Security

Information is encrypted in transit between your device and my services. Booking-form answers are stored in a database that only I can access, and payments are handled by ToyyibPay, so card and bank details never reach me. No system is perfectly secure, but I take reasonable steps to protect your information and would tell you about any breach that affects you.

Your rights

Under the PDPA you can:

• Access the personal information I hold about you. I'll respond within 21 days.
• Correct information that is wrong or out of date.
• Withdraw consent to how I use your information.
• Stop direct marketing at any time, using the unsubscribe link or by contacting me.
• Ask me to delete your information, where I'm not required by law to keep it.

If you're unhappy with how I've handled your information, please contact me first. You can also complain to the Personal Data Protection Department (Jabatan Perlindungan Data Peribadi) at www.pdp.gov.my.

Changes to this policy

I may update this policy. The date at the top shows the current version. If a change affects how I use information you've already given me, I'll tell you by email.

Contact

For any privacy question or request, contact me: reply to any email from me, or to your booking confirmation email.