Privacy Policy

1. Introduction

In compliance with the Personal Data Protection Act 2010 ("the Act") and its regulations, this notice is issued to all clients and prospective clients of Wise Heritage Sdn Bhd. It informs you of your rights regarding the personal data that has been, or will be, collected and processed by us in connection with wiseheritage.com.my and our business dealings with you.

2. Collection and description of personal data

We collect personal data only when you choose to provide it — primarily through the contact form, WhatsApp, email, or phone enquiries. This may include:

• • Name, clinic name, email address, and phone number
• • The content of your enquiry or message
• • Basic technical data (such as browser type and pages visited) collected automatically for site functionality

We do not knowingly collect data from children.

3. Purposes of collection

• • To respond to product, service, and quotation enquiries
• • To coordinate delivery, installation, training, and after-sales support
• • To maintain records required for warranty and regulatory compliance as an MDA-registered medical device establishment
• • To improve this website and the services we offer

We process your data on the basis of the consent you give when submitting an enquiry, and, where applicable, to take steps prior to entering a contract with your clinic or practice.

4. Sources of personal data

We only obtain personal data directly from you — through the contact form, WhatsApp, phone calls, email, or in-person business dealings. We do not purchase or obtain your personal data from third-party databases or data brokers.

5. Disclosure of personal data

Enquiry data is stored using Google Firebase (Firestore), our cloud data processor. We do not sell or rent your personal data. We may disclose it to:

• • EMS Electro Medical Systems SA (our principal), only where necessary to fulfil warranty, service, or supply obligations for your equipment
• • Our cloud infrastructure provider (Google Firebase), acting as our data processor
• • Regulatory or government authorities, where required by law

6. Security of personal data

We apply reasonable technical and organisational measures — including access-controlled cloud infrastructure and encrypted data transmission — to protect personal data against loss, misuse, and unauthorised access.

7. Use of cookies

This website does not use advertising or third-party tracking cookies. We do not use cookies to build marketing profiles of visitors. Our staff login area uses browser storage strictly necessary to keep an administrator signed in; this does not collect or track data about public visitors to the site.

8. Transfer of personal data

Our cloud data processor, Google Firebase, may process and store data on servers located outside Malaysia as part of its global infrastructure. Where this occurs, we take reasonable steps to ensure a comparable standard of protection is applied to your personal data, consistent with our obligations under the Act.

9. Data retention

We retain enquiry and customer data for as long as needed to provide our services and to meet our regulatory record-keeping obligations as a Medical Device Authority (MDA) registered establishment, after which it is deleted or anonymised.

10. Marketing and promotional purposes

We do not currently send marketing or promotional communications. If this changes in future, any such email will include a clear unsubscribe link, and you may withdraw consent to marketing at any time by contacting us using the details in Section 15.

11. Data subject's obligations

Providing your personal data through our contact channels is voluntary, but necessary for us to respond to your enquiry or provide the products and services requested. If you choose not to provide it, we may be unable to process your enquiry or render our services to you.

12. Your rights under the PDPA

Subject to the PDPA 2010, you have the right to:

• • Request access to the personal data we hold about you
• • Request correction of inaccurate or incomplete data
• • Withdraw consent to further processing at any time
• • Limit the processing or disclosure of your data

To exercise any of these rights, contact us using the details in Section 15 below.

13. Acknowledgement and consent

By ticking the consent checkbox on our contact form, or by otherwise contacting us via WhatsApp, phone, or email, you acknowledge that you have read and understood this notice and consent to the collection, use, and disclosure of your personal data as described here. You may withdraw this consent at any time by writing to us using the details in Section 15, though this may limit our ability to respond to your enquiry or continue providing services to you.

14. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date above reflects the most recent revision.

15. Inquiries and complaints

For questions about this policy or to exercise your data protection rights, contact:

Wise Heritage Sdn Bhd
whdent3909@yahoo.com
+6012-6419856

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia (Jabatan Perlindungan Data Peribadi) at www.pdp.gov.my.