Angsana Health

Privacy Notice

Effective Date: 24 September 2025

We use the following definitions for our Privacy Notice:

  1. “Angsana” refers to Angsana Health Sdn Bhd, a company registered in Malaysia with the SSM registration number 202101040616 (1440916-K). Angsana shall also include MiyaCare Sdn Bhd with the SSM registration number 201901030577 (1339907-W) (“Miya”), which is a registered Third Party Administrator/Managed Care Organization (“TPA”/“MCO”) in Malaysia and a wholly-owned subsidiary of Angsana Health Sdn Bhd.
  2. “We/Our/Ours/Us” refers to Angsana and its related employees and contractors.
  3. “Services” refer to the products and/or services you have purchased from Angsana.
  4. “You/Your/Yours” refers to you or the end-user of the Services.
  5. “Healthcare Professional” or “HCP” refers to a healthcare professional licensed and regulated by the Malaysian Government and relevant professional bodies. They include, but are not limited to, doctors, specialists, psychologists, nutritionists, counsellors, pharmacists or nurses.
  6. “Healthcare Institution” or “HCI” refers to healthcare facilities licensed and regulated by the Malaysian Government and relevant professional bodies. They include, but are not limited to, hospitals, clinics, dialysis centres, nursing homes or hospice care facilities.
  7. “Platform” refers to the mobile application, portal, website or any other platform which Angsana and Miya operates or makes available to you, HCPs or HCIs for the purposes of the Services.
  8. “DPO” refers to the Data Protection Officer of Angsana.
  9. “Personal data” has the definition ascribed to it under the Malaysia Personal Data Protection Act 2010 and “personal information” shall have the same meaning as “personal data”.

Angsana is fully committed to the privacy and confidentiality of your data. We only collect data that is necessary to deliver our Services. This Privacy Notice explains how we collect and handle your personal information in accordance with the Personal Data Protection Act 2010, together with our third party partners. We reserve the right to make reasonable changes to our Privacy Notice from time to time without prior notice. The most current version will always be posted on our Platform.

Please refer to this page from time to time to read this notice carefully to understand our practices regarding your personal information. Your continuous use of our Platform and/or Services means that you understand and agree to the Privacy Notice and consent to our processing of the personal data as provided in the Privacy Notice.

We Collect The Following Information

Angsana collects personal information from you, or a consented intermediary (such as a parent, guardian, legal representative) when you use our Platform and Services. The information we collect may include, but is not limited to:

  1. Identifying information: Name, date of birth, age, national registration identity card / passport number, gender, email address, contact number, address and payment details.
  2. Health and medical information: Medical history, diagnosis, treatment details, health measurements, medical reports, test results and any other health-related information necessary to provide our Services.
  3. Financial information: Medical claims, medical bills and payment information.
  4. Usage Data: Information on how you interact with our website and platforms.
  5. Medical benefits: medical insurance/benefit coverage details, special terms and underwriting information.
  6. Employment information: employee health benefit and position. If we provide services to your family members as dependents under your insurance policy or employee benefits plan, we may also collect the above personal information of your dependents.
  7. Communications and interactions: Records of your telehealth consultations, including audio and video recordings, chat transcripts and emails.

In addition to the personal information mentioned above, we may also collect information automatically through cookies (cookies are small text files that are placed on your device by a website server) and similar technologies when you use our website and Services. The information collected through cookies may include your IP address, browser type, device information and browsing behaviour on our website. We use cookies for the following purposes:

  1. Functional cookies: This is essential for the operation of our website. They enable core features such as secure user authentication, appointment management and language preferences.
  2. Analytics and performance cookies: This helps us gather information about how you interact with our Platform, including which pages you visit, the duration of your visit and any error messages encountered. This information helps us analyse website performance, optimise content and improve user experience.
  3. Personalisation cookies: This helps you remember your preferences and provide personalised content, such as displaying relevant information based on your previous interactions with our Platform.

You can control cookies through your browser settings. However, please note that disabling cookies may impact certain functionalities of our website and limit your user experience.

How we collect your information

Angsana may collect your personal information through various means and only after your explicit opt-in consent. This may include information that we:

  • Collect directly from you through our correspondence;
  • Collect directly from you on our web-based or smartphone application;
  • Collect directly from you on our Website;
  • Collect directly from you on our social media platforms;
  • Collect from third party applications that you install on your mobile device;
  • Record when you call our customer service;
  • Receive from your insurer and/or employer when they appoint us to provide Services to you;
  • Receive from HCPs in order to provide Services to you; and
  • Receive from other third parties in order to provide Services to you.

How we use your information

Angsana uses personal information for the following purposes:

  1. Providing Services: to facilitate the provision of healthcare Services, including without limitation consultations, assessments and treatments.
  2. Legal and regulatory compliance: for the disclosure required or authorised by law (where needed), including compliance with legal obligations, court orders, or regulatory requirements.
  3. Personalisation and improvement: to personalise your experience and improve the quality, effectiveness and safety of our Services. To recommend Services that are appropriate and aligned to your healthcare needs.
  4. Communication and support: to communicate with you, respond to your inquiries, provide customer support and send important updates or notifications.
  5. Payments: to process any payments relevant to you and for insurance purposes.
  6. Research: to conduct statistical analysis and analysis of patient case studies anonymously.

Where you have indicated your consent to participate in communication and research of Angsana, you can opt out at any time by contacting us using the contact information provided below.

Information sharing and disclosure

We understand the importance of confidentiality and privacy. Angsana will ensure that access to your information is restricted to employees who are contractually required to process your information in accordance with their respective job requirements. We do not disclose your personal information to third parties without your consent, except as required by law.

Data security and retention

We take reasonable steps to protect your personal information from unauthorised access, disclosure, or alteration. We have implemented appropriate technical and organisational measures to ensure the security and confidentiality of your personal information. If you are aware that your information has been provided without your consent, please contact us and such information will be disposed of from our records.

In general, we retain your personal information only as long as necessary for the purposes outlined or as required by Malaysian law and regulatory guidelines.

Your rights and choices

Your provision of your personal data to us is voluntary and is after you have provided consent to us. However, the provision of your personal data is necessary for us to deliver our Services. Should you choose not to provide the required personal data, we may not be able to provide access and deliver our Services to you.

You have the right to access, correct, or update your personal information held by us (subject to certain exemptions). You may also request the limiting of the processing of your personal data, withdrawal of the consents which you have provided to us in respect of your personal data, deletion of your personal information, subject to applicable legal obligations. To exercise your rights or for any privacy-related inquiries, please notify us directly at the contact information provided below.

Conflict

In the event of any conflict between this English-language Privacy Notice and corresponding versions of other languages, the terms in this English-language notice shall prevail.

Contact us

If you have any complaints, questions, concerns, or requests regarding this Privacy Notice or our privacy practices, please contact our DPO at Data Protection Officer, contact@angsanahealth.com.