This privacy notice explains how we collect, use and protect your personal data when you use this website. It is written in line with the Personal Data Protection Act 2010 (PDPA) and its amendments, including the Notice and Choice Principle, which requires us to tell you what data we process, why we process it and what choices you have.
In short: you can browse this site without an account, we collect as little data as we can, and we do not sell your personal data.
Who we are
This website is operated by Sedia by InterX ("we", "us"). We are the data controller for personal data collected through this public website. For any privacy question, contact us.
This notice covers the public website only, meaning the directory, map and guides. The Sedia dialysis centre management software used by dialysis centres is covered by separate agreements and privacy notices.
The data we collect
When you browse this site
You do not need to register or sign in to use the directory and guides. We use a few small cookies:
locale, which remembers your language choice (Bahasa Melayu or English) for one year;appearance, which remembers whether you prefer the light or dark theme (also kept in your browser's storage); and- session and security cookies, which the site needs to work safely, for example to protect forms against attacks.
We do not use advertising cookies or third-party tracking cookies.
Our servers also keep technical logs, such as your IP address, browser and device type, the pages requested, and the date and time. We use these logs for security and to track down technical problems.
When you use "near me"
If you allow your browser to share your location, your coordinates are used to sort dialysis centres by distance. The coordinates are sent as part of the page request. We do not store them with your identity and we do not build location profiles. Standard server logs may record the requested page address, including those coordinates, for a limited time. If you would rather not share your location, simply search by town or postcode.
When you view the map
The map's background is drawn from tiles supplied by OpenFreeMap, an independent map service. Your browser fetches these tiles directly from OpenFreeMap's servers, which therefore receive your IP address and basic browser details under their own policies, and can tell roughly which area of the map you are viewing. If you use "Near me" on the map, your location is used only in your browser to centre the map and list the nearest centres; it is not sent to us.
When you contact us
If you email us, we keep your name, email address, any other details you choose to give (such as a phone number) and the content of your message. Please do not send detailed medical information, as we do not need it to answer your question.
Dialysis centre information
Directory details such as a centre's name, address, phone number and email are business contact information, taken from the public sources described on our About page. We do not collect the names of centre staff from those sources. If a listing ever shows an individual's name in their professional capacity, for example a nephrologist, that person can ask for the name to be corrected or removed through our contact page.
How we use data
We use personal data to:
- show the site in your chosen language and theme;
- sort search results by distance when you ask us to;
- reply to enquiries and handle listing correction requests;
- keep the site secure, detect misuse and fix technical problems; and
- meet our legal obligations.
We do not sell your personal data, and we do not use it for direct marketing.
Disclosure to others
We share personal data only when we need to:
- with service providers that help us run this site, such as hosting and email, who process data on our behalf and are bound to protect it; and
- with authorities when required by law or a court order, or to protect the rights and safety of users.
Some of our providers may process data outside Malaysia. Where that happens, we take reasonable steps to keep your data protected in line with the PDPA. If a page loads content from a third party, such as map tiles, that provider may receive your IP address under its own policies.
How long we keep data
We keep personal data only for as long as we need it for the purposes above:
- the
localecookie expires after one year, and you can delete it at any time in your browser settings; - server logs are kept for a limited period for security and troubleshooting, then deleted; and
- emails are kept for as long as we need to reply to you and for reasonable record-keeping, then deleted.
Data security
We use encrypted connections (HTTPS), access controls and other reasonable technical measures to protect personal data against loss, misuse and unauthorised access. No system is completely secure. If a personal data breach happens, we will act promptly and make notifications as required by law.
Your rights
Under the PDPA, you have the right to:
- access the personal data we hold about you;
- correct data that is inaccurate, incomplete or out of date;
- withdraw consent, or ask us to stop processing data in a way that is likely to cause you damage or distress; and
- ask for your data to be transmitted directly to another data controller, where this is technically feasible.
To exercise these rights, contact us. We may need to verify your identity before acting, and we will respond within the time the PDPA requires. You can also make a complaint to the Personal Data Protection Commissioner.
Children
This site is meant for adults, including patients, families and carers. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has sent us personal data, contact us and we will delete it.
Changes to this notice
We may update this notice from time to time, for example when we add new features. The date of the latest update is shown on this page.
Language
This notice is available in Bahasa Melayu and English. If there is any conflict between the two versions, the Bahasa Melayu version prevails.