Privacy Policy

Healing Voice International Management Sdn Bhd ("we", "us") respects your personal data. This policy explains, in line with Malaysia's Personal Data Protection Act 2010 (PDPA), how we collect, use and protect it.

1. What we collect

• Account details: name, mobile number, email address and password (stored encrypted — we cannot see your original password).
• Transaction details: order records, payment amounts and payment method. Card details are handled by our payment provider, Fiuu — we never see or store your full card number. If you choose auto-renewal, we store only the card token issued by Fiuu (encrypted), the card brand and the last four digits.
• Service records: membership plans, in-store booking history and thermal imaging session records, including the name and phone number of the person scanned, who may be someone you nominate.
• Usage details: login times, language preference and technical data needed to run the website.

2. Why we use it

• To create and manage your member account.
• To verify payments, activate memberships and process refunds.
• To arrange and confirm in-store bookings.
• To stream audio content and prevent its unauthorised use.
• To contact you about your membership, orders and bookings.
• To meet our legal and accounting record-keeping obligations.

3. Health-related information

In-store services may involve health-related information, such as thermal imaging session results. This is sensitive personal data. We process it only with your explicit consent, only to provide that service, and restrict who can access it.

4. Disclosure

We do not sell or rent your personal data. We disclose it only:

• to service providers we need in order to run our services, including our payment provider Fiuu (which needs your name, email and mobile number to process payments), website hosting and data storage, who must keep it confidential;
• where required by law, a court or a government authority; or
• where you have consented.

5. Storage and cross-border transfer

Your data is stored on servers managed by a cloud service provider, which may be located outside Malaysia. We take reasonable steps to ensure your data receives protection comparable to this policy.

6. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), encrypted password storage, keeping receipts and audio files in non-public locations, and role-based access for our staff.

7. How long we keep it

• Account details are kept while your account is open. After you ask us to close it, we delete or anonymise them within a reasonable time.
• Financial records such as orders, payments and receipts must be kept for 7 years by law.

8. Cookies and local storage

We use essential cookies to keep you logged in (HVSESSID) and remember your language (hv_lang). Audio you have listened to may be cached on your device to save data, and is cleared when you log out. We do not use third-party advertising or tracking cookies.

9. Your rights

Under the PDPA, you have the right to:

• access the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• withdraw consent or ask us to limit processing (which may affect our ability to serve you); and
• ask us to close your account.

To exercise these rights, email us. To protect your data we may verify your identity first, and access requests may be subject to a fee permitted by law.

10. Changes

We may update this policy from time to time and will publish the updated version on this page.

11. Contact

For personal data matters, contact:
Healing Voice International Management Sdn Bhd
Lot 78-G, KLTS, Block C, No.99, Jalan Gombak, 53000 Setapak, Kuala Lumpur.
Email: healingvoicem@gmail.com
Phone: 03-4032 1488

This policy is available in English and Chinese. If there is any inconsistency, the English version prevails.