Privacy Notice

(updated this 01 Jun 2025)

For suppliers, vendors, or service providers, please scroll down to read the Privacy Notice for Supplier

For Users

In compliance with the Personal Data Protection Act 2010 and its regulations, this Privacy Notice outlines how your personal data is collected, used, and disclosed, as well as your rights in relation to that data when interacting with RenalWorks Malaysia Sdn Bhd.

The notice applies to the following parties:
a) Subscribers and clients
b) Software users
c) Survey and marketing event participant

1. TYPES OF PERSONAL DATA
We may collect and process the following types of personal data:

  1. Full name
  2. National registration identity card (NRIC) number
  3. Gender
  4. Email address
  5. Phone number
  6. Position title
  7. Username of our software
  8. Records of communications with us (e.g. support emails, chats)
  9. Usage data and access logs of our software
  10. Feedback or surveys you have participated in

2. PERSONAL DATA COLLECTION

As there are various scenarios in which we may collect your information, we will ensure that you are fully informed about the information being collected. We do not collect your personal data unless it is provided to us voluntarily by you or any third party who has been authorised by you to share your personal data to us.  

3. PURPOSES FOR COLLECTION, USE AND DISCLOSURE OF PERSONAL DATA 

We may collect, use or disclose your personal data for the following purposes:

  1. Processing your registration
  2. Administering your subscription or account
  3. Providing access to our software and support services
  4. Communicating system updates, service changes, or administrative notices
  5. Processing billing, payments, and renewals
  6. Responding to customer enquiries, feedback, or complaints
  7. Monitoring system usage and security compliance
  8. Improving our software, features, and user experience
  9. Conducting data analytics, internal reporting, or surveys
  10. Fulfilling legal, regulatory, or contractual obligations
  11. Enforcing terms of use, policies, and agreements
  12. Marketing our products or services

4. SOURCES OF PERSONAL DATA

We may obtain your personal data from the following sources including but not limited to:

  1. Registration, subscription or onboarding form
  2. Subscription agreement
  3. Communication through emails, calls, or support channels
  4. Public directories or websites
  5. Referrals or business partners
  6. Participation in events or demos

5. DISCLOSURE OF PERSONAL DATA

We may disclose your personal data to the following parties, where necessary and appropriate:

  1. Our subsidiaries within the group
  2. Internal teams for operational, support, and analytical purposes
  3. Appointed payment or billing processors
  4. IT and cloud infrastructure service providers
  5. Auditors, legal advisors, and consultants
  6. Marketing and survey agencies (with consent)
  7. Government authorities or regulators as required by law

We are responsible for the personal data under our control, including personal data disclosed by us to vendors (data processors). We take every measure to provide a comparable level of protection for personal data should the information be processed by vendors. RenalWorks Malaysia Sdn Bhd is committed to complying with the Personal Data Protection Act 2010, in particular, its policies as well as corresponding guidelines and orders.

6. PERSONAL DATA RETENTION AND SECURITY MEASURE

We take reasonable steps to ensure that your personal data is kept accurate, complete, and up to date. Your personal data will be retained only for as long as necessary to fulfill the purposes stated in this notice or as required by law, whichever is longer. 

When your personal data is no longer required, it will be securely and permanently deleted, or destroyed in a manner that prevents unauthorised access, disclosure, or misuse.

We implement the following security measures to safeguard your personal data, including but not limited to:

  1. Restricted access based on roles and responsibilities
  2. Secure login mechanisms and access controls
  3. Encryption of data in transit and at rest
  4. Physical and environmental safeguards at data centers
  5. Regular reviews of security policies, procedures, and configurations
  6. Monitoring and logging of system activities for audit and compliance
  7. Data backup and recovery practices to ensure availability and resilience
  8. Due diligence and contractual safeguards when engaging third-party service providers

7. TRANSFER OF PERSONAL DATA

Your data may be transferred to service providers or servers located outside of Malaysia. When such transfers are required, we will take reasonable steps to ensure that your personal data is treated securely and in accordance with this Privacy Notice and applicable data protection laws. This includes ensuring that the receiving parties provide a standard of protection that is at least comparable to that provided under the Personal Data Protection Act 2010.

8. DATA SUBJECT’S OBLIGATIONS

It is necessary for RenalWorks Malaysia Sdn Bhd to collect and retain users’ personal data. Therefore, users are obligated to provide their personal data to us in the most accurate and up to date manner. Failure to do so may prevent RenalWorks Malaysia Sdn Bhd from processing the data for the purposes stated in Clause 3 herein. RenalWorks Malaysia Sdn Bhd shall not be held liable for any consequences arising from the user’s failure to provide accurate personal data. 

9. ACCESS, CORRECTION, AND LIMITATION OF PERSONAL DATA

You may request to access, correct, or limit the processing of your personal data that we hold. If you have any questions or wish to exercise your rights under the Personal Data Protection Act 2010, please contact the Data Protection Officer using the following details:

  1. Email address: dpo@renalworks.com
  2. Office address: B-01-18 & 19 Oasis Square, Jln PJU 1A/7, Ara Damansara, 47301 Petaling Jaya, Selangor.

10. AMENDMENTS AND UPDATES

We may amend this notice from time to time. You may view the updated notice on our company website or request it from our Data Protection Officer at dpo@renalworks.com. Each time we collect, use or disclose personal data, the latest version will apply

 

 

 

NOTIS PRIVASI

(dikemaskini pada 01 Jun 2025)

Selaras dengan Akta Perlindungan Data Peribadi 2010 dan peraturannya, Notis Privasi ini menerangkan bagaimana data peribadi anda digunakan serta hak-hak anda berkaitan dengan data tersebut apabila berurusan dengan RenalWorks Malaysia Sdn Bhd.

Notis ini terpakai kepada pihak-pihak berikut:

a) Pelanggan
b) Pengguna perisian
c) Peserta tinjauan dan aktiviti pemasaran

Dalam notis ini, istilah “kami”, “kita”, dan “syarikat” merujuk kepada RenalWorks Malaysia Sdn Bhd, iaitu entiti yang memperolehi data peribadi daripada anda atau berkenaan anda.

1. JENIS DATA PERIBADI

Kami mungkin mengumpul dan memproses data peribadi seperti berikut:

  1. Nama penuh
  2. Nombor kad pengenalan (NRIC)
  3. Jantina
  4. Alamat emel
  5. Nombor telefon
  6. Jawatan
  7. Nama pengguna perisian kami
  8. Rekod komunikasi dengan kami (cth: emel, mesej)
  9. Data penggunaan dan log akses perisian kami
  10. Maklum balas atau soal selidik yang anda sertai

2. PENGUMPULAN DATA PERIBADI

Memandangkan terdapat pelbagai situasi di mana kami mungkin mengumpul data peribadi anda, kami akan memastikan anda dimaklumkan sepenuhnya tentang data peribadi anda yang dikumpulkan. Kami tidak akan mengumpul data peribadi anda kecuali ianya diberikan secara sukarela oleh anda atau pihak ketiga yang telah diberi kuasa oleh anda untuk berkongsi data peribadi tersebut kepada kami.

3. TUJUAN PENGUMPULAN, PENGGUNAAN DAN PENDEDAHAN DATA PERIBADI

Kami mungkin mengumpul, menggunakan atau mendedahkan data peribadi anda bagi tujuan berikut:

  1. Memproses pendaftaran anda
  2. Mengurus langganan atau akaun anda
  3. Menyediakan akses kepada perisian dan perkhidmatan kami
  4. Memberi makluman sistem, perubahan perkhidmatan atau notis pentadbiran
  5. Memproses pengebilan, bayaran, dan pembaharuan
  6. Menjawab pertanyaan pelanggan, maklum balas atau aduan
  7. Memantau penggunaan sistem dan pematuhan keselamatan
  8. Menambah baik perisian, fungsi dan pengalaman pengguna
  9. Melaksanakan analitik data, pelaporan dalaman atau soal selidik
  10. Memenuhi kewajipan undang-undang, peraturan atau kontrak
  11. Menguatkuasakan terma penggunaan, polisi dan perjanjian
  12. Pemasaran produk atau perkhidmatan kami

4. SUMBER DATA PERIBADI

Kami mungkin memperoleh data peribadi anda daripada sumber yang berikut, termasuk tetapi tidak terhad kepada:

  1. Borang pendaftaran atau penggunaan akaun
  2. Perjanjian langganan
  3. Komunikasi melalui emel, panggilan, atau saluran sokongan
  4. Direktori awam atau laman web
  5. Rujukan atau rakan kongsi perniagaan
  6. Penyertaan dalam aktiviti atau demonstrasi

5. PENDEDAHAN DATA PERIBADI

Kami mungkin mendedahkan data peribadi anda kepada pihak-pihak berikut jika perlu dan bersesuaian:

  1. Subsidiari dalam kumpulan syarikat
  2. Jabatan dalaman syarikat untuk operasi, sokongan dan analitik
  3. Pemproses pembayaran atau bil
  4. Penyedia perkhidmatan infrastruktur IT
  5. Juruaudit, penasihat undang-undang dan perunding
  6. Agensi pemasaran dan kaji selidik (dengan kebenaran)
  7. Pihak berkuasa kerajaan atau pengawal selia seperti yang dikehendaki undang-undang

Kami bertanggungjawab terhadap data peribadi di bawah kawalan kami, termasuk data yang didedahkan kepada vendor (pemproses data). Kami akan mengambil segala langkah perlu untuk memastikan tahap perlindungan data peribadi yang setara apabila diproses oleh vendor. RenalWorks Malaysia Sdn Bhd komited untuk mematuhi Akta Perlindungan Data Peribadi 2010, termasuk dasar-dasar serta garis panduan dan perintah yang berkaitan.

6. PENYIMPANAN DAN LANGKAH KESELAMATAN DATA PERIBADI

Kami mengambil segala langkah untuk memastikan data peribadi anda adalah tepat, lengkap dan terkini. Data peribadi anda akan disimpan hanya selama diperlukan untuk memenuhi tujuan yang dinyatakan dalam notis ini atau dikehendaki oleh undang-undang, mana-mana yang lebih lama.

Apabila data peribadi anda tidak lagi diperlukan, ia akan dipadam atau dimusnahkan secara selamat bagi mengelakkan akses, pendedahan atau penyalahgunaan yang tidak dibenarkan.

Langkah keselamatan yang kami laksanakan termasuk tetapi tidak terhad kepada:

  1. Akses terhad berdasarkan peranan dan tanggungjawab
  2. Mekanisme log masuk dan kawalan akses yang selamat
  3. Penyulitan data semasa penghantaran dan penyimpanan
  4. Perlindungan fizikal dan persekitaran di pusat data
  5. Semakan berkala terhadap polisi, prosedur dan konfigurasi keselamatan
  6. Pemantauan dan log aktiviti sistem bagi tujuan audit dan pematuhan
  7. Amalan sandaran dan pemulihan data untuk memastikan ketersediaan dan daya tahan
  8. Penilaian wajar dan perlindungan kontraktual apabila melibatkan pihak ketiga

7. PEMINDAHAN DATA PERIBADI KE LUAR NEGARA

Jika perlu, data peribadi anda mungkin dipindahkan dan disimpan dalam sistem atau server yang di luar Malaysia. Kami akan memastikan perlindungan yang setara dengan Akta Perlindungan Data Peribadi 2010 dipatuhi oleh penerima data tersebut.

8. TANGGUNGJAWAB SUBJEK DATA

RenalWorks Malaysia Sdn Bhd perlu mengumpul dan menyimpan data peribadi pengguna. Oleh itu, pengguna diwajibkan untuk memberikan data peribadi mereka secara tepat dan terkini. Kegagalan untuk berbuat demikian mungkin menghalang RenalWorks Malaysia Sdn Bhd daripada memproses data tersebut untuk tujuan yang dinyatakan dalam Klausa 3. RenalWorks Malaysia Sdn Bhd tidak akan bertanggungjawab atas sebarang akibat yang timbul daripada kegagalan pengguna memberikan data yang tepat.

9. AKSES, PEMBETULAN DAN HAD PEMPROSESAN DATA PERIBADI

Anda berhak untuk mengakses, membetulkan, atau mengehadkan pemprosesan data peribadi anda. Untuk sebarang pertanyaan atau pelaksanaan hak anda, sila hubungi:
Pegawai Perlindungan Data (DPO)

1. Emel: dpo@renalworks.com
2. Alamat: B-01-18 & 19 Oasis Square, Jln PJU 1A/7, Ara Damansara, 47301 Petaling Jaya, Selangor.

10. PINDAAN DAN KEMASKINI

Kami boleh mengemaskini notis ini dari semasa ke semasa. Anda boleh mendapat notis yang terkini di laman web syarikat kami atau memintanya daripada Pegawai Perlindungan Data kami di dpo@renalworks.com. Setiap kali kami memperolehi, menggunakan atau mendedahkan data peribadi, versi terkini akan diguna.

For Suppliers

In compliance with the Personal Data Protection Act 2010 and its regulations, this Privacy Notice outlines how your personal data is collected, used, and disclosed, as well as your rights in relation to that data when you or your organization engages with RenalWorks Malaysia Sdn Bhd as a supplier, vendor, or service provider.  

In this notice, the terms “we”, “us” and “our”  refer to RenalWorks Malaysia Sdn Bhd, the entity collecting the personal data from or about you.

1. TYPES OF PERSONAL DATA

We may collect and process the following types of personal data:

  1. Full name
  2. National registration identity card (NRIC) number
  3. Gender
  4. Position title
  5. Email address
  6. Phone number
  7. Company name
  8. Company address
  9. Office number
  10. Records of communications with us (e.g. emails, chats)

2. PERSONAL DATA COLLECTION 

As there are various scenarios in which we may collect your information, we will ensure that you are fully informed about the information being collected. We do not collect your personal data unless it is provided to us voluntarily by you or any third party who has been authorised by you to share your personal data to us.  

3. PURPOSES FOR COLLECTION, USE AND DISCLOSURE OF PERSONAL DATA

We may collect, use or disclose your personal data for the following purposes:

  1. Evaluating, and selecting suppliers, vendors, or service providers
  2. Managing supplier/vendor relationships 
  3. Processing payments, invoices, or purchase orders
  4. Communicating about product or service requirements
  5. Conducting background checks or due diligence
  6. Facilitating audits, legal, or regulatory compliance
  7. Responding to disputes, queries, or claims
  8. Enforcing our contracts or agreements

4. SOURCES OF PERSONAL DATA

We may obtain your personal data from the following sources including but not limited to:

  1. Supplier risk assessment form
  2. Communication through emails, calls, meetings or support channels
  3. Company websites, business cards, or public directories
  4. Referrals
  5. Contracts, invoices, and related documents submitted to us

5. DISCLOSURE OF PERSONAL DATA

We may disclose your personal data to the following parties, where necessary and appropriate:

  1. Our subsidiaries within the group
  2. Internal departments of RenalWorks Malaysia Sdn Bhd
  3. Appointed payment or billing processors
  4. Auditors, legal advisors, and consultants
  5. Government authorities or regulators as required by law

We are responsible for the personal data under our control, including personal data disclosed by us to vendors (data processors). We take every measure to provide a comparable level of protection for personal data should the information be processed by vendors. RenalWorks Malaysia Sdn Bhd is committed to complying with the Personal Data Protection Act 2010, in particular, its policies as well as corresponding guidelines and orders.

6. PERSONAL DATA RETENTION AND SECURITY MEASURE

We take reasonable steps to ensure that your personal data is kept accurate, complete, and up to date. Your personal data will be retained only for as long as necessary to fulfill the purposes stated in this notice or as required by law, whichever is longer. 

When your personal data is no longer required, it will be securely and permanently deleted, or destroyed in a manner that prevents unauthorised access, disclosure, or misuse.

We implement the following security measures to safeguard your personal data, including but not limited to:

  1. Restricted access to personal data
  2. Password-protected systems and secure networks
  3. Physical security of premises and files
  4. Periodic review of data protection policies and procedures

7. TRANSFER OF PERSONAL DATA

When necessary, your personal data may be transferred to and stored in systems or servers located outside of Malaysia. In such cases, we will take reasonable steps to ensure that your personal data is treated securely and in accordance with this Privacy Notice and applicable data protection laws. This includes ensuring that the receiving parties provide a standard of protection that is at least comparable to that provided under the Personal Data Protection Act 2010.

8. DATA SUBJECT’S OBLIGATIONS

RenalWorks Malaysia Sdn Bhd is required to collect and retain the personal data of its suppliers, vendors, and service providers. Therefore, you are obligated to provide your personal data accurately and keep it up to date. Failure to do so may prevent RenalWorks Malaysia Sdn Bhd from processing your data for the purposes stated in Clause 3 of this Notice. RenalWorks Malaysia Sdn Bhd shall not be held liable for any consequences arising from your failure to provide accurate or complete personal data. 

9. ACCESS, CORRECTION, AND LIMITATION OF PERSONAL DATA

You may request to access, correct, or limit the processing of your personal data that we hold. If you have any questions or wish to exercise your rights under the Personal Data Protection Act 2010, please contact the Data Protection Officer using the following details:

  1. Email address: dpo@renalworks.com
  2. Office address: B-01-18 & 19 Oasis Square, Jln PJU 1A/7, Ara Damansara, 47301 Petaling Jaya, Selangor.

10. AMENDMENTS AND UPDATES

We may amend this notice from time to time. You may view the updated notice on our company website or request it from our Data Protection Officer at dpo@renalworks.com. Each time we collect, use or disclose personal data, the latest version will apply.

 

 

NOTIS PRIVASI

(dikemaskini pada 01 Jun 2025)

 

Selaras dengan Akta Perlindungan Data Peribadi 2010 dan peraturannya, Notis Privasi ini menerangkan bagaimana data peribadi anda digunakan serta hak-hak anda berkaitan dengan data tersebut apabila anda atau organisasi anda berurusan dengan RenalWorks Malaysia Sdn Bhd sebagai pembekal, vendor atau penyedia perkhidmatan.

Dalam notis ini, istilah “kami”, “kita”, dan “syarikat” merujuk kepada RenalWorks Malaysia Sdn Bhd, iaitu entiti yang memperolehi data peribadi daripada anda atau berkenaan anda.

1. JENIS DATA PERIBADI

Kami mungkin mengumpul dan memproses jenis data peribadi berikut:

  1. Nama penuh
  2. Nombor kad pengenalan (NRIC)
  3. Jantina
  4. Jawatan
  5. Alamat emel
  6. Nombor telefon
  7. Nama syarikat
  8. Alamat syarikat
  9. Nombor pejabat
  10. Rekod komunikasi dengan kami (contohnya: emel, mesej, perbualan)

2. PEROLEHAN DATA PERIBADI

Memandangkan terdapat pelbagai situasi di mana kami mungkin mengumpul data peribadi anda, kami akan memastikan anda dimaklumkan sepenuhnya tentang data peribadi anda yang dikumpulkan. Kami tidak akan mengumpul data peribadi anda kecuali ianya diberikan secara sukarela oleh anda atau pihak ketiga yang telah diberi kuasa oleh anda untuk berkongsi data peribadi tersebut kepada kami.

3. TUJUAN PENGUMPULAN, PENGGUNAAN DAN PENDEDAHAN DATA PERIBADI

Kami mungkin mengumpul, menggunakan atau mendedahkan data peribadi anda bagi tujuan berikut:

  1. Menilai dan memilih pembekal, vendor atau penyedia perkhidmatan
  2. Mengurus hubungan dengan pembekal/vendor
  3. Memproses bayaran, invois atau pesanan pembelian
  4. Berkomunikasi tentang keperluan produk atau perkhidmatan
  5. Melaksanakan semakan latar belakang atau penilaian wajar (due diligence)
  6. Memudahkan audit, pematuhan undang-undang atau peraturan
  7. Menjawab pertanyaan atau tuntutan
  8. Menguatkuasakan kontrak atau perjanjian kami

4. SUMBER DATA PERIBADI

Data peribadi anda mungkin diperoleh daripada sumber berikut:

a) Borang penilaian risiko pembekal

b) Komunikasi melalui emel, panggilan, mesyuarat atau saluran sokongan

c) Laman web syarikat, kad perniagaan atau direktori awam

d) Rujukan

e) Kontrak, invois dan dokumen berkaitan yang dikemukakan kepada kami

5. PENDEDAHAN DATA PERIBADI

Kami mungkin mendedahkan data peribadi anda kepada pihak-pihak berikut, jika perlu:

  1. Subsidiari dalam kumpulan syarikat
  2. Jabatan dalaman syarikat
  3. Pemproses pembayaran atau bil
  4. Juruaudit, penasihat undang-undang, dan perunding
  5. Pihak berkuasa kerajaan atau pengawal selia sebagaimana dikehendaki oleh undang-undang

Kami bertanggungjawab terhadap data peribadi di bawah kawalan kami, termasuk data yang didedahkan kepada vendor (pemproses data). Kami akan mengambil segala langkah perlu untuk memastikan tahap perlindungan data peribadi yang setara apabila diproses oleh vendor. RenalWorks Malaysia Sdn Bhd komited untuk mematuhi Akta Perlindungan Data Peribadi 2010, termasuk dasar-dasar serta garis panduan dan perintah yang berkaitan.

6. PENYIMPANAN DATA PERIBADI LANGKAH KESELAMATAN
Kami akan:

  1. Memastikan data peribadi anda adalah tepat, lengkap dan terkini
  2. Menyimpan data peribadi anda hanya selama tempoh yang diperlukan atau seperti yang dikehendaki oleh undang-undang
  3. Menghapuskan data peribadi apabila tidak lagi diperlukan untuk tujuan yang dinyatakan.

Langkah keselamatan yang dilaksanakan:

  1. Akses terhad kepada data peribadi
  2. Sistem dilindungi kata laluan dan rangkaian selamat
  3. Keselamatan fizikal fail dan premis
  4. Polisi perlindungan data peribadi disemak secara berkala

7. PEMINDAHAN DATA PERIBADI KE LUAR NEGARA

Jika perlu, data peribadi anda mungkin dipindahkan dan disimpan dalam sistem atau server yang terletak di luar Malaysia. Kami akan memastikan perlindungan yang setara dengan Akta Perlindungan Data Peribadi 2010 dipatuhi oleh penerima data tersebut.

8. TANGGUNGJAWAB SUBJEK DATA

RenalWorks Malaysia Sdn Bhd perlu mengumpul dan menyimpan data peribadi pembekal, vendor dan penyedia perkhidmatan. Oleh itu, anda bertanggungjawab untuk memberikan data peribadi anda dengan tepat dan terkini. Kegagalan untuk berbuat demikian mungkin menghalang RenalWorks Malaysia Sdn Bhd daripada memproses data anda bagi tujuan yang dinyatakan dalam Klausa 3 notis ini. RenalWorks Malaysia Sdn Bhd tidak akan bertanggungjawab atas sebarang akibat kegagalan anda memberikan data yang tepat atau lengkap.

9. AKSES, PEMBETULAN DAN HAD PEMPROSESAN DATA PERIBADI
Anda berhak untuk mengakses, membetulkan, atau mengehadkan pemprosesan data peribadi anda. Untuk sebarang pertanyaan atau pelaksanaan hak anda, sila hubungi:
Pegawai Perlindungan Data (DPO)
a) Emel: dpo@renalworks.com
b) Alamat: B-01-18 & 19 Oasis Square, Jln PJU 1A/7, Ara Damansara, 47301 Petaling Jaya, Selangor.

10. KEMASKINI

Kami boleh mengemaskini notis ini dari semasa ke semasa. Anda boleh mendapat notis yang terkini di laman web syarikat kami atau memintanya daripada Pegawai Perlindungan Data kami di dpo@renalworks.com. Setiap kali kami memperolehi, menggunakan atau mendedahkan data peribadi, versi terkini akan diguna.