Privacy Policy

Restoring confidence, renewing beauty, embracing total wellness

Effective Date: 1st January 2026

Hebe Clinic is committed to protecting the privacy and personal data of our customers and members. This Privacy Policy explains how we collect, use, disclose, and protect personal information in accordance with the Personal Data Protection Act 2010 (PDPA), Malaysia.

1. Collection of Personal Data

Hebe Clinic may collect personal data including, but not limited to:

  • Name, identification details, date of birth, and gender
  • Contact details such as phone number, email address, and address
  • Medical history, consultation records, treatment details, and photographs (with consent)
  • Payment and transaction information Membership, loyalty programme, and referral information
  • Communication records via WhatsApp, phone calls, email, or social media

2. Purpose of Data Collection

Personal data collected will be used for the following purposes:

  • To provide medical aesthetic, skin, and wellness services
  • To manage appointments, consultations, and treatment records
  • To process payments and maintain billing records
  • To administer loyalty programmes, memberships, promotions, and rewards
  • To communicate appointment reminders, updates, and relevant information
  • To comply with legal, regulatory, and medical requirements
  • For internal administrative, audit, and service improvement purposes

3. Disclosure of Personal Data

Hebe Clinic does not sell, trade, or rent personal data to third parties. Personal data may be disclosed only to:

  • Authorised doctors, beauty consultant, therapists, and clinic staff
  • Third-party service providers (e.g. payment processors, IT systems) under confidentiality obligations
  • Regulatory or government authorities when required by law

4. Data Protection and Security

Hebe Clinic takes reasonable measures to safeguard personal data against unauthorised access, misuse, loss, alteration, or disclosure. Access to personal data is restricted to authorised personnel only.

5. Data Retention

Personal data will be retained only for as long as necessary to fulfil the purposes stated in this policy or as required under applicable laws and medical regulations.

6. Customer Rights

Customers and members have the right to:

  • Access their personal data
  • Request correction of inaccurate or incomplete information
  • Withdraw consent for marketing communications
  • Enquire about how their personal data is used
Requests are subject to applicable legal and medical record retention requirements.

7. Consent

By providing personal data to Hebe Clinic, customers and members consent to the collection, use, and processing of their data in accordance with this Privacy Policy.

8. Policy Updates

Hebe Clinic reserves the right to amend this Privacy Policy at any time. Any changes will be communicated through our website or made available upon request.

9. Contact Information

For any questions, concerns, or requests regarding personal data or this Privacy Policy, please contact:

Hebe Clinic
Phone / WhatsApp: +6013-911 8712
Email: contactus@hebe-clinic.com