LEGAL

Privacy Policy

Amberfield  |  Last Updated: 10 March 2025  |  Effective: 10 March 2025

Amberfield is committed to protecting the personal information of residents, clients and their families. This policy explains what data we collect, how we use it, and the rights you have in relation to your personal information. It applies to all services provided by Amberfield at 18 Jalan USJ 9/5T, 47620 Subang Jaya, Selangor, Malaysia.

1. Data We Collect

When you contact us, complete our enquiry form, or engage our services, we may collect the following personal information:

• Full name, email address and phone number
• Postal address (if provided)
• Health and care information relevant to service provision
• Information about family representatives and emergency contacts
• Technical data collected via cookies (see our Cookie Policy)

2. How We Use Your Data

We use your information for the following purposes:

• Responding to enquiries and providing information about our services
• Delivering and managing care services to residents and clients
• Preparing and maintaining care plans and health records
• Communicating with family members and authorised contacts
• Coordinating with healthcare providers such as primary care physicians
• Meeting legal and regulatory obligations under Malaysian law

We do not use personal data for unsolicited marketing and we do not sell personal information to third parties.

3. Legal Basis for Processing

We process personal information in accordance with the Personal Data Protection Act 2010 (Malaysia). Our legal bases include: consent (for enquiries submitted via our website), contractual necessity (for service delivery), and legitimate interest (for ongoing communication with families of residents).

4. Data Retention

Enquiry records are retained for up to 12 months. Resident care records are retained for a minimum of seven years following the end of a care relationship, or as required by applicable law. Health records are handled in accordance with Malaysian healthcare record retention guidelines.

5. Data Protection Measures

• Physical records are stored in locked, access-controlled locations
• Digital records are stored on password-protected systems with restricted access
• Staff access to personal data is limited to what is necessary for their role
• In the event of a data breach, affected individuals will be notified promptly

6. Sharing with Third Parties

We do not share personal information with third parties except where necessary to deliver our services (e.g., coordinating with a resident's GP) or where required by law. Any third parties we engage with are required to handle data responsibly and in accordance with Malaysian data protection requirements.

7. Cookies

Our website uses cookies to improve your experience. For details on the types of cookies we use and how to manage them, please see our Cookie Policy.

8. Your Rights

Under the Personal Data Protection Act 2010, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to processing at any time (where consent is the legal basis)
• Object to the use of your data for certain purposes
• Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, please contact us using the details below.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of other websites and recommend reviewing their policies before providing any personal information.

10. Children's Privacy

Our services are intended for adults aged 18 and over, or their adult family representatives. We do not knowingly collect data from individuals under the age of 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date at the top. Continued use of our website or services following any update constitutes acceptance of the revised policy.

12. Contact Us

For any questions about this Privacy Policy or to exercise your data rights, please contact our data officer: