Privacy notice

This notice explains how personal data submitted through this website is handled, in line with the Personal Data Protection Act 2010 (PDPA).

What is collected

Nothing is collected by the website itself. There is no form, no database, no analytics, no advertising or tracking script, and no cookie is set. The pages are static files.

Personal data reaches the clinic only when you choose to contact it, by WhatsApp, telephone or email, and then it is only what you put in that message: typically your name, a contact number, and a short summary of your knee problem. You are asked not to send detailed medical records through those channels.

Why it is collected

Solely to respond to your appointment request and to arrange a consultation. It is not used for marketing and it is not sold or shared with third parties for their own purposes.

Who processes it

Clinic staff, and the providers that carry the message. Enquiries sent by email arrive in a mailbox hosted by Google (Gmail). Messages sent by WhatsApp are carried by WhatsApp, owned by Meta. Both store data on their own servers, which may be outside Malaysia, under their own terms. The website itself is hosted by Cloudflare and holds no database.

Email and WhatsApp are ordinary consumer channels, not secure clinical systems. They are convenient and widely used, and they are appropriate for arranging an appointment. Please do not use them to send anything you would not want stored by a third-party provider. If you prefer, telephone the clinic instead and ask how to send imaging.

How long it is kept

Enquiries that do not lead to an appointment are deleted withintwelve months. Imaging sent ahead of a consultation that does not go ahead is deleted on the same basis.

Once you become a patient, your clinical records are retained under the medical records requirements that apply to the treating facility, and are governed by the hospital's own policy rather than by this notice.

Analytics and cookies

This website sets no cookies and runs no JavaScript. There is nothing to consent to and no consent banner, which is why you have not been shown one.

Aggregate visit counts are collected by Cloudflare from server request logs. They are not tied to you, they do not follow you between sites, and they cannot be used to identify you.

Your rights

You may request access to the personal data held about you, ask for it to be corrected, or ask for it to be deleted. Contact the clinic at GSJoints@gmail.com.

Security

The site is served over HTTPS. It holds no database and stores no patient records. Submitted enquiries are delivered to clinic email.