General Privacy Information

When you sign up or interact with WellHubAge, you may provide personal details to set up an account, access services, or receive support. These details enable appointments, tailored recommendations, and secure communication.

• Identity details: full name, date of birth, and preferred contact name for correspondence.
• Contact details: residential address (e.g., 168, Jalan Raja Permaisuri Bainun, 30250 Ipoh, Perak, Malaysia), email address, and telephone number for scheduling and updates.
• Basic health and wellness information you provide to personalise services: medical conditions, medications, mobility notes, dietary preferences and activity levels.
• Account and authentication data such as chosen username, password hashes, and device identifiers necessary to secure access.
• Payment and billing details where applicable for paid wellbeing plans and transparent invoicing.
• Communications you send to us, including feedback, support requests, and preferences for service delivery.

Some information is collected automatically to improve the website and services, and to ensure secure and reliable delivery.

• Usage data: pages visited, session duration, and service features used to optimise content and user flows.
• Device and browser information used for compatibility and troubleshooting.
• Location data inferred from IP addresses to provide region-appropriate content and local support options.
• Performance data and error logs to detect and resolve technical issues in the platform.
• Basic analytics cookies that help measure which resources and features deliver most value to retirees.
• Security-related signals such as unusual login activity to protect accounts from unauthorised access.

We use personal data only for specific, limited purposes that benefit users and enable the service to operate reliably and safely.

• To register and manage user accounts, verify identity, and provide access to personalized wellness features.
• To coordinate appointments, reminders, and communications that help retirees follow care plans and community programs.
• To personalise content and recommendations based on health profiles and preferences while avoiding intrusive profiling.
• To process payments, invoices, and receipts related to subscription or paid wellness packages.
• To maintain platform security, detect fraud, and protect user accounts and data integrity.
• To analyse service usage and improve features, content, and accessibility for retiree users.
• To respond to support requests and manage communications including updates about service changes.
• To meet legal and regulatory obligations as required under applicable Malaysian law.

Cookies and similar technologies are used on our website to support core functionality, remember preferences, and deliver basic analytics. You can manage cookie preferences through your browser or our cookie controls.

Types of cookies we use include essential cookies for site operation, preference cookies to remember settings, performance cookies for analytics, and security cookies for protecting accounts.

Essential: required for login and secure sessions. Functional: save language and accessibility settings. Analytical: measure feature usage to improve experiences. Security: detect suspicious activity.

You can manage or disable cookies through your browser settings. Disabling some cookies may reduce functionality or affect personalized features. We provide a consent control on first visit to record your preferences.

Read our full cookie policy for detailed controls and examples.

We only share data when necessary to deliver services, to comply with legal obligations, or with your informed consent. Third-party recipients are carefully selected and bound by data protection requirements.

• Service partners that support appointment scheduling, care coordination, and delivery of paid services.
• Payment processors for handling transactions and invoicing.
• Cloud hosting and analytics providers that help maintain and improve WellHubAge platform performance and reliability.
• Legal or regulatory authorities when required by law or to respond to lawful requests.
• Healthcare providers and emergency services when disclosure is necessary for your immediate care and you have authorised the sharing.
• Acquirers or advisors in the event of a corporate reorganisation or sale, subject to confidentiality protections and user notice.

We retain personal data only as long as necessary for the purposes described, to meet legal obligations, or to resolve disputes. Retention periods are determined based on the type of data and operational needs.

Account information is retained while your account is active and for a reasonable period after account closure to meet recordkeeping and legal requirements.

Communications and support messages are kept for the duration necessary to address inquiries and to maintain a record of service interactions.

System and security logs are retained for limited periods to contribute incidents and maintain platform stability.

When data is no longer required, we securely delete or anonymise it. You can request deletion subject to applicable legal and operational exceptions.

We apply administrative, technical, and physical measures to protect personal data, including encryption in transit, access controls, and regular security reviews. Our focus is on practical protections to reduce risk for retiree users.

• Encrypted transmission of sensitive data and secure storage of credentials.
• Role-based access control and routine access reviews for staff and vendors.
• Regular backups, incident response planning, and vulnerability scanning to detect and address risks.

Although WellHubAge operates in Malaysia, we recognise international data protection standards. This section explains core rights and protections consistent with GDPR principles for users who may be covered.

GDPR-like rights may apply to individuals in certain circumstances. We adopt practices that respect these rights and provide mechanisms to exercise them promptly.

• Transparency: clear information about processing activities and access to records when applicable.
• Data subject rights: accessible processes for access, correction, deletion, and export of personal data.
• You have the right to restrict processing of your personal data in specific circumstances, for example when you contest the accuracy of data or object to processing for direct marketing purposes. WellHubAge will review and respond to such requests in accordance with applicable law and documented verification procedures.
• You may object to processing based on our legitimate interests, and you can withdraw consent to marketing communications at any time. WellHubAge will assess objections and, where required by law, stop the processing or inform you of any compelling legitimate grounds for continuing.

If you wish to make a complaint about our handling of your personal data, please contact our Data Protection Officer at the address below. We aim to resolve complaints promptly and fairly. You may also lodge a complaint with Malaysia's Personal Data Protection Department if you believe your rights under Malaysian data protection laws have been violated.

We may send promotional emails, newsletters, and targeted offers about wellness programs, community activities, and retiree services that align with your interests. Marketing messages are sent only to those who have opted in, unless local law permits otherwise. Communications will include clear options to manage preferences or opt out.

To stop receiving marketing messages, use the unsubscribe link in any email or contact us. Unsubscribe requests are processed promptly; you may still receive transactional or service messages necessary to manage your account or bookings.

WellHubAge is intended for adults and retirees. We do not knowingly collect personal data from individuals under 18. If we learn that we have received information from a minor, we will take steps to delete it. If you believe we have collected data from a child, contact us to request removal.

Our website may contain links to third-party websites, tools, and service providers. WellHubAge is not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policies of any third parties before providing personal data.

We may update our privacy policy to reflect changes in law, service offerings, or data practices. Material changes will be communicated via our website or direct notice to affected users. Continued use of WellHubAge services after updates constitutes acceptance of the revised policy.