Collection of Personal Data

We collect personal data to fulfill our services and statutory obligations. The types of personal data we may collect include, but are not limited to:
Personal Identification Information: Full name, identity card/passport number, gender, date of birth, and marital status.
Contact Information: Residential address, email address, and mobile phone number.
Infant Information: Names, birth certificates, medical history, allergies, and developmental records.
Technical Information: IP addresses, browser types, and usage data collected through our website.
Security Data: Images (still/recording) via CCTV operating at our premises.

Purposes of Data Collection

Your personal data will be processed for the following purposes:
To process enrollment and registration for our infant care services.
To provide customized daily care, educational activities, and nutritional meals for your infant.
To facilitate communication regarding your infant’s progress and daily routines.
To manage administrative processes, including billing and payment collection.
To ensure the safety and security of all infants, staff, and visitors on our premises.
To comply with legal and regulatory obligations, including those mandated by JKM (Jabatan Kebajikan Masyarakat) and KKM (Kementerian Kesihatan Malaysia).

Sources of Personal Data

We obtain your personal data directly from you or indirectly through:
Inquiries submitted via our website, WhatsApp, or phone calls.
Registration forms, consent forms, and medical questionnaires.
Interactions on our social media platforms.
Your use of the real-time parents’ tracking App.

Security of Personal Data

We have implemented technical and organizational security measures to protect your personal data against loss, misuse, modification, unauthorized access, or accidental disclosure. These measures include physical security at our premises, access controls for our databases, and secure handling procedures.

Disclosure of Personal Data

We will not share your personal data with any third party without your explicit consent, except under circumstances permitted by the PDPA. We may disclose your data to:
External service providers assisting us with administrative operations (e.g., App developers, IT support, payment gateways).
Professional advisors such as auditors or legal counsel.
Government authorities or regulatory bodies when required by law.

Your Rights as a Data Subject

Under the PDPA, you are entitled to the following rights:
Right of Access: You may request access to the personal data we hold about you.
Right to Correction: You may request that we update or correct any inaccurate or incomplete data.
Right to Withdraw Consent: You may withdraw your consent for us to process your data, though this may impact our ability to provide services to you.
Right to Prevent Processing: You may request that we limit or cease processing your data for specific purposes, such as direct marketing.

Retention of Personal Data

We will only retain your personal data for as long as it is necessary to fulfill the purposes for which it was collected or to comply with legal requirements. Once the retention period expires, the data will be securely destroyed or permanently anonymized.

Inquiries and Complaints

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns regarding the processing of your personal data, please contact us at:

Email: brighthorizonchildcc@gmail.com WhatsApp: +6014-2628608
Address: 26, Jalan Horizon Perdana 1, Horizon Hills, Iskandar Puteri, 79100, Johor.