1. Introduction

In compliance with the Personal Data Protection Act 2010 ("the Act") and its regulations, this notice, with effect from 21st December 2022, is issued to all our valued clients and/or prospective clients as well as our employees. This Notice will inform you of your rights with regards to your personal data that has been and/or will be collected, used, processed and disclosed by us.

2. Acknowledgement and Consent

By communicating, engaging with CytoMed Malaysia or using the Company's products and services, or by accepting this Notice as distributed to you as our employee, you acknowledge that you have read and understood this Notice and consent to the collection, use, processing, disclosure and transfer of your personal data by CytoMed Malaysia as described in this Notice.

3. Collection of personal data

We have collected and will collect your personal data to be processed by us and/or on your behalf during your current or future dealings with CytoMed Therapeutics (Malaysia) Sdn Bhd ("CytoMed Malaysia"), its subsidiaries, associated companies ("we" or "Company"). Your personal data enables us to achieve the Purposes stated in Clause 5 herein that are related to our business.

4. Description of personal data

The types of personal data we collect and process are as follows:

• a) Name;
• b) Identity card number;
• c) Gender;
• d) Email address;
• e) Mobile phone number;
• f) Passport number;
• g) IP address;
• h) Image (photo/video recording);
• i) Sensitive personal data; and
• j) Any Personal Identifiable Information (PII) defined by law or international privacy standards.

5. Purposes for collection and processing of personal data

Personal data will not be disclosed for any purpose other than when it was disclosed at the time of collection. Your personal data may be processed for the following purposes, if applicable:-

• a) To create and manage medical records and medical reports
• b) To conduct research, analysis and improvements
• c) To market and advertise products and services
• d) To enable human resource management activities related to employees
• e) Sharing of personal data for banking facilities, signing official documents and accounting
• f) For purchasing goods, outsourcing services, new developments and others
• g) For education and training
• h) For any other purposes incidental or ancillary to the above purposes

6. Sources of personal data

CytoMed Malaysia may obtain your personal data from various sources including but not limited to application forms, websites, business cards and others.

7. Disclosure of personal data

We may disclose your personal data to other subsidiaries or associated companies within our group. Such subsidiaries or associated companies shall treat your personal data as confidential, in accordance with this Notice and by following all applicable data protection laws and will process such personal data only for the Purposes and within the terms stated herein. We are responsible for personal data under our control, including personal data we disclose to vendors (often referred to as "data processors"). We take every step to provide a comparable level of protection for personal data when such information is processed by vendors. CytoMed Malaysia is committed to complying with the Act, specifically, its policies and corresponding guidelines and orders.

8. Security and personal data

CytoMed Malaysia uses strict security procedures and features to prevent unauthorized access where possible. Personal data provided to CytoMed Malaysia through our website or through any applications, online credit card transactions is protected during transit through encryption tools such as Transport Layer Security (TLS). When personal data is stored by CytoMed Malaysia, we use computer systems with limited access housed in facilities containing physical security measures. Data stored in the cloud is encrypted, including when we use third-party storage services. The security level of personal data stored in non-electronic environments is also handled with strict procedures and methods.

9. Use of Cookies

Cookies used by our website are only associated with users without attaching their name and computers and do not disclose users' personal data. Some cookies are used by third parties to inform CytoMed Malaysia data about the effectiveness of its engagement and promotions. Cookies used by our website do not in any way collect personal data that can be used to identify specific user identities. Additionally, cookies are temporary in nature, used solely to improve the efficiency of final delivery. Users can configure web browsers to be notified about cookie acceptance and to prevent such installation on their computers.

10. Transfer of personal data

We do not transfer your personal data out of Malaysia to third parties (other than as specified in Clause 7 above) or for purposes (other than as specified in Clause 5 above) unless you have given us your consent. We earnestly provide a comparable level of protection for personal data if your personal data is transferred to and processed or used in places outside Malaysia.

11. Data subject's obligations

CytoMed Malaysia needs to collect and store your personal data. Therefore, you are also obligated to provide your personal data to us accurately. If you do not provide us with personal data, CytoMed Malaysia cannot process personal data on your behalf, for the Purposes stated in Clause 5 herein, or provide our services to you effectively, and all existing or to be established relationships between us shall be terminated and it will no longer be effective immediately.

12. The right of data subject

You have the right to limit the processing of personal data by way of withdrawing the consent previously given, in each case, including for direct marketing purposes subject to any applicable legal restrictions, contractual conditions and within a reasonable time period.

13. Request for access to and correction of personal data

You have the right to request access to and correction of your personal data. If we are unable to comply with your request within 21 days from the date of receipt of your request, we will provide you with a written notice stating the reasons why we are unable to comply with your request.

14. Changes to this Notice

We reserve the right to amend this Notice from time to time without prior notice. We advise you to visit our website (www.cytomed.sg) for this Notice periodically.

15. Withdrawal of Consent

You may, at any time, withdraw your consent for the collection, use, processing, disclosure and/or transfer of your personal data by providing us with written notice. Upon receiving your request, we will cease the collection, use, processing, disclosure or transfer of your personal data as soon as possible.

16. Inquiries and complaints

If you require further information about personal data in our possession or how your information is collected, used, processed, disclosed or transferred that cannot be answered by this Notice, please contact or write to us at: