Privacy Policy

1. Overview

IBIDAN SDN. BHD. (“we”, “us”) respects your privacy. This policy explains what personal data we may collect when you visit our website, make an enquiry, book a service, or interact with us offline or through partners. It also describes how we use, store, share, and protect that information, and what choices you have.

2. Data controller

The data controller responsible for your personal data is the IBIDAN SDN. BHD. company entity that operates the site and delivers or coordinates services for your region (Malaysia or Singapore, as applicable). You may contact us using the details in the Contact section below.

3. What we collect

Depending on how you interact with us, we may collect:

• Identity & contact: name, phone number, email address, delivery or service address.
• Booking & service: appointment preferences, package selections, notes you provide, and correspondence with our team.
• Health-related information: only where reasonably necessary to deliver safe massage or wellness care (e.g. pregnancy stage, contraindications), provided by you voluntarily.
• Payment data: processed securely by payment providers; we typically do not store full card numbers on our servers.
• Technical data: IP address, device/browser type, approximate location, and usage signals collected via cookies or similar technologies.

4. How we use your data

We use personal data to:

• Respond to enquiries and provide customer support.
• Process, confirm, schedule, and deliver services, including assigning qualified therapists.
• Process payments, refunds, or credits in line with our policies.
• Improve our website, services, and safety protocols.
• Send service-related messages (e.g. booking confirmations). Where allowed, we may send marketing communications—you can opt out at any time.
• Comply with legal obligations, resolve disputes, and enforce our Terms & Conditions.

We rely on appropriate legal bases under applicable privacy laws (such as performance of a contract, legitimate interests, legal obligation, or consent where required).

5. Sharing & processors

We do not sell your personal data. We may share information with:

• Therapists and operational staff who need details to perform your booking.
• Payment gateways, IT hosting, email/SMS providers, and analytics tools that assist our business under strict confidentiality and data-processing terms.
• Professional advisers or authorities when required by law or to protect rights, safety, and security.

6. Cookies & similar technologies

We use cookies and similar technologies to operate the site, remember preferences, measure traffic, and reduce fraud. You can control cookies through your browser settings. Blocking essential cookies may affect site functionality.

7. Retention

We retain personal data only as long as needed for the purposes above, including legal, accounting, or reporting requirements. Health-related notes may be kept for periods aligned with clinical and regulatory practice. When data is no longer required, we delete or anonymise it.

8. Your rights

Depending on applicable law (including Malaysian and Singapore personal data protection frameworks), you may have rights to access, correct, delete, restrict, or object to certain processing of your personal data, and to withdraw consent where processing is consent-based.

To exercise your rights, contact us using the details below. You may also lodge a complaint with your local data protection authority.

9. Cross-border transfers

Where data is processed in or accessible from countries outside your country of residence, we implement appropriate safeguards (such as contractual clauses or permitted derogations) consistent with applicable law.

10. Children

Our services are directed at adults. We do not knowingly collect personal data from children without parental authority. If you believe we have collected a child’s data in error, please contact us so we can delete it.

11. Security

We implement technical and organisational measures designed to protect personal data against unauthorised access, loss, or alteration. No method of transmission over the Internet is completely secure; we encourage you to use strong passwords and protect your devices.

12. Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or business changes. The updated version will be posted on this page with a revised “Last updated” date. Where required, we will provide additional notice.