BIG CARING GROUP
Privacy Policy

Last Updated and Effective Date: 27 May 2025
BIG CARING GROUP and its subsidiaries -are committed to safeguarding your personal data in accordance with the Personal Data Protection Act (“PDPA”) 2010 and the PDPA Amendment Act 2024 (effective 1 January 2025). This Privacy Policy explains how we collect, use, store, and protect your personal data and outlines the rights and choices you have regarding your data.

1. Collection of Personal Data

We collect your personal data directly when you interact with our services through registration, loyalty programs, our app, website, consultations, or other official platforms. This data may include, but is not limited to:

  • Identification: Full name, Identification number (IC/passport)
  • Contact Information: Address, telephone number, email
  • Demographic Data: Date of birth, gender, nationality, marital status, race
  • Transactional & Loyalty Data: Purchase history, loyalty program participation
  • Health-Related Information: (collected only with explicit consent)
  • Biometric Data: (e.g., fingerprints, facial recognition, as defined as sensitive under PDPA Amendment 2024)
  • Personal Data of Minors: Only collected with verified parental or guardian consent

Note: Personal data pertaining to deceased individuals is excluded under the PDPA Amendment Act 2024.

2. Purpose of Collection

Your personal data is used for:

  • Verification and Registration: To verify your identity and facilitate account creation.
  • Service Provision: To deliver our pharmacy and digital health services, including the fulfillment of prescriptions and consultations.
  • Marketing and Communication: To provide you with promotions, rewards, and updates, subject to your consent.
  • Compliance: To meet our legal, regulatory, and professional obligations.
  • Internal Improvement: To conduct analysis for service and product enhancements.

3. Nature of Consent

We only process your personal data with your clear and explicit consent. You can withdraw your consent at any time by contacting crm@bigcaring.com.my. Please note that withdrawing consent may affect your ability to receive certain services.

4. Disclosure of Personal Data

With your consent, BIG CARING GROUP may disclose your personal data to:

  • Regulatory Authorities: As required by law.
  • Subsidiaries and Affiliates: For purposes consistent with this Policy.
  • Service Providers and Data Processors: Who are contractually bound to comply with PDPA Amendment 2024 standards.
  • Marketing & Delivery Partners: When you have provided your consent.

5. Retention of Personal Data

Your data is retained only as long as necessary for the purposes outlined herein or as required by law. We implement secure, encrypted, and tamper-proof storage methods to protect your information from unauthorized access or disclosure.

6. Security Measures

We adopt robust technical and organizational measures to ensure the security of your personal data. This includes administrative safeguards, data encryption, and access controls in line with PDPA Amendment 2024 and other applicable regulations.

7. Your Rights

You have the right to:

  • Access: Receive information regarding the personal data we hold about you.
  • Correction: Request corrections to any inaccuracies.
  • Erasure: Ask for deletion of your personal data, subject to applicable legal conditions.
  • Data Portability: Request your data in a structured, commonly used, and machine-readable format.
  • Limit or Withdraw Consent: Change your consent preferences.
  • File Complaints: Contact the Personal Data Protection Commissioner if you believe your rights have been violated.

8. Personal Data of Minors

Data relating to individuals under 18 is collected only with verified consent from a parent or legal guardian.

9. Use of Cookies and Tracking Technologies

Please see the “Cookies Settings” section.

10. Data Breach Notification

In the event of a breach that could cause significant harm, we will notify the Personal Data Protection Commissioner within 72 hours of becoming aware of the incident and will promptly inform affected individuals.

11. Obligation to Provide Accurate Data

It is your responsibility to provide and update accurate personal data. Should your information change, please notify us through the appropriate channels.

12. Consent to Processing

By accessing our services, you consent to the collection, use, and processing of your personal data as described in this Privacy Policy. Should any updates be made, we will notify you unless instructed otherwise.

13. Contact Information

For inquiries or to exercise your rights, please contact our Data Protection Officer (DPO) using the following details:

  • Telephone: 03-7453 1988(Monday to Friday, 9:00 am – 5:30 pm, excluding public holidays)
  • Email: dpo@bigcaring.com.my

To opt out of communications or data usage for marketing, please email crm@bigcaring.com.my.