Back Privacy Policy

Privacy Policy

Last updated: 1 June 2026  ·  Early Access Registration  ·  Compliant with PDPA 2010 & Amendment Act 2024 (Malaysia)

This Privacy Policy applies specifically to the LocumMY Early Access Registration at join.locumclinicmy.com. It explains what personal data we collect, why we collect it, and what happens to it.

LocumMY ("we", "us", "our") is the Data Controller for personal data collected through this registration form, as defined under Malaysia's Personal Data Protection Act 2010 (as amended by the Amendment Act 2024). We do not sell your personal data. Ever.

1. What We Collect

When you register for early access, we collect:

  • Full name
  • Email address
  • WhatsApp phone number
  • Role — whether you are a Healthcare Practitioner or a Healthcare Employer (Clinic)
  • Consent record — the date and time you agreed to this Privacy Policy and Terms of Use, retained as proof of consent

We do not collect your IC number, payment details, or any other sensitive personal data through this form.

2. Why We Collect It (Purpose)

Your information is collected for one purpose only:

  • To place you on the LocumMY early access waitlist
  • To notify you via email and/or WhatsApp when LocumMY officially launches and your early access is ready

Your data will not be used for marketing, advertising, or any purpose other than what is stated above.

3. Data Deletion After Launch

Once LocumMY has officially launched and all early access registrants have been notified, all registration data collected through this form — including your name, email, WhatsApp number, and role — will be permanently and irreversibly deleted from our systems. You will receive a notification before this deletion takes place.

Until that point, your data is retained solely for the purpose of sending you your launch notification.

4. Who We Share Your Data With

We share your data only with the service providers required to operate this registration:

  • Firebase / Google Cloud — secure database storage and server-side processing. Data is stored in the Asia Pacific (Singapore) region.
  • Cloudflare — bot protection (Turnstile). Cloudflare receives only your IP address and browser signals to verify you are human. Your name, email, and phone number are not shared with Cloudflare.

All third-party services are bound by data processing agreements. Your personal data is never sold, rented, or transferred to any other party.

All cross-border data transfers comply with the requirements of the PDPA 2010 (as amended 2024). Data is processed in jurisdictions with equivalent data protection standards.

5. Your Rights (PDPA 2010 & 2024 Amendment)

Under Malaysia's Personal Data Protection Act 2010 (as amended 2024), you have the following rights:

  • Access — Request a copy of the personal data we hold about you.
  • Correction — Request that inaccurate or incomplete data be corrected.
  • Withdraw consent — Withdraw your consent at any time. Upon withdrawal, your registration will be removed from our waitlist and your data deleted.
  • Deletion — Request that your registration data be deleted before the launch notification is sent.
  • Data portability — Under the 2024 Amendment, request that your data be transferred to another service provider, where technically feasible.

To exercise any of these rights, contact us at . We will respond within 21 days.

6. Security

We protect your data using:

  • HTTPS / TLS encryption — all data in transit is encrypted
  • Cloudflare Turnstile — bot and automated spam protection on the registration form
  • IP rate limiting — prevents bulk or repeated submission attempts
  • Server-side validation — all data is validated on our servers before being stored
  • Access control — only LocumMY administrators can access the registration data
  • Security headers — this page is protected by Content Security Policy, X-Frame-Options, and other HTTP security headers

No system is 100% secure. In the event of a personal data breach, we will notify the Personal Data Protection Department (JPDP) as required under the PDPA Amendment Act 2024, and will inform you promptly if the breach is likely to result in significant harm to you.

7. Contact

For any privacy-related queries or to exercise your rights, contact our Data Protection Officer:

Email:

Organisation: LocumMY, Kuala Lumpur, Malaysia