Privacy Policy

Who we are and what this notice covers

Bio Young Wellness Sdn Bhd, registration number 202101020499 (1420799-P) at No. 8-1, Blok 1, Jalil Link, Jalan Jalil Jaya 1, 57000 Kuala Lumpur, is the data controller for personal data we collect for our website, membership, orders, subscriptions, customer support and wellness centre activities. Our privacy contact or appointed Data Protection Officer may be reached at bioyoung.finance@gmail.com, or the above address. This notice explains our handling of your data under the Malaysian Personal Data Protection Act 2010 as amended.

Data and sources

We may collect your name, contact and delivery details, login credentials, membership and referral identifiers, order and reward history, subscription records, payment status and provider references, enquiries, appointment details and consent preferences. Birthday information is optional. Tax or identity details are requested only where needed for a lawful purpose such as invoicing or verification. Payment providers process card credentials under their own arrangements; we use the payment information necessary to administer your transaction.

If you choose a service involving a health assessment, we may collect relevant health information such as conditions, symptoms or assessment results after explaining the purpose and obtaining explicit consent unless a specific lawful exception applies. Do not submit unnecessary medical records. Any biometric collection would require a separate notice and appropriate legal basis; membership does not require it.

Data comes from you, your website use, our staff and centres, your transactions and payment providers, and authorised referrers or collaboration partners where you have authorised the introduction or another lawful basis applies. Device, browser, IP address and cookie information may be collected for security, functionality and permitted analytics. We do not require referrers to upload contacts without permission.

Purposes and choices

We use necessary data to process orders and payments, arrange delivery, administer membership levels and rewards, manage subscriptions and deposits, book requested services, respond to enquiries, prevent fraud, maintain records and comply with legal obligations. We process data with consent or where a specific statutory basis or exception permits it, including necessary steps for a contract where applicable.

Mandatory fields are marked. Without necessary contact, delivery or payment information, we may be unable to fulfil your order or subscription. Without optional birthday or marketing information, you can still buy and join. Declining optional partner marketing does not affect ordinary membership benefits. Declining health data processing may prevent a particular assessment that genuinely requires that information; we will explain available alternatives.

We use contact details for Bio Young promotional communications only according to your selected preferences. Transactional messages such as receipts, safety notices and payment reminders are sent as needed to administer your service. You may opt out of marketing through the message unsubscribe option, your account preferences or our privacy contact. We do not treat a service enquiry as consent to every marketing channel.

Recipients and operational disclosure

We disclose only data reasonably needed for the stated purpose to authorised staff, fulfilment and courier providers, payment and instalment providers, hosting and website support providers, CRM and communication providers, professional advisers and authorities where disclosure is lawfully required. Relevant authorised Business Partners or service personnel may receive the minimum details needed for a requested sale, installation or support task. A referral link alone does not grant access to your health records or complete purchase history.

We provide referrers only the minimal attribution and reward information needed to explain their rewards. We do not disclose your diagnoses, assessment notes or full contact details to a referrer merely because you used their code. We share relevant personal data with service providers only as needed to operate our services. Their access and use are subject to appropriate contractual obligations and security safeguards.

Future collaboration with other organisations

Bio Young may collaborate with employers, wellness providers, healthcare organisations and other business partners to offer wellness programs, referrals, events and customer benefits.

Where personal data is needed for a collaboration, we will explain the purpose and relevant recipients, share only the necessary information, and obtain consent where required by law.

Overseas processing and cookies

Our service providers may store or process personal data outside Malaysia. Any such transfer will be carried out in accordance with applicable Malaysian data protection requirements.

Our website uses cookies to support login, checkout and security. Where used, analytics and advertising cookies help us understand website usage and improve marketing. You can manage cookies through your browser settings, although disabling necessary cookies may affect website functions.

Data security, retention and automated tools

We take reasonable steps to protect personal data against unauthorised access, loss or misuse. Where required by law, we notify the relevant authority and affected individuals of data breaches.

We keep personal data only as long as necessary for business and legal purposes, then securely delete or anonymise it. Some records may need to be retained after your account is closed.

We may use automated tools to calculate membership benefits and assist with enquiries or bookings. Contact us to request assistance or correction of an error. These tools do not provide medical diagnoses or treatment advice.

Your rights and contacting us

Subject to applicable law, you may request access, correction, deletion or transfer of your personal data, withdraw consent, stop direct marketing, or object to processing likely to cause damage or distress. We may retain records required for legal purposes.

Contact us at bioyoung.operation@gmail.com or No. 8-1, Blok 1, Jalil Link, Jalan Jalil Jaya 1, 57000 Kuala Lumpur. We may verify your identity and will respond within applicable legal time limits. Withdrawing consent may affect services that require the relevant data.

You may also lodge a complaint with the Personal Data Protection Commissioner at www.pdp.gov.my.

We may update this notice and will provide further notice or obtain consent where required by law.

Please read this policy together with our other policies listed on this page.