PRIVACY NOTICE

Bloom Healthcare Group Sdn. Bhd. [Registration No: 202101014286 (1414586-X)] ("Bloom Healthcare", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Notice explains how we collect, use, disclose, store and protect your personal data when you access or use the BloomCare platform and related services.

This Privacy Notice is provided in accordance with the Personal Data Protection Act 2010 [Act 709] ("PDPA"), as amended from time to time, and applicable Malaysian data protection requirements.

1. Personal Data We Collect

Depending on how you use BloomCare, we may collect:

• Personal, identification information and contact details;
• Employment and employee benefits information;
• Healthcare and medical information, where relevant to the services provided;
• Claims, transaction and payment information; and
• Technical information such as IP address, device, browser and usage information.

We may collect personal data directly from you or, where applicable, from your employer, healthcare providers, authorised representatives or other relevant parties.

2. How We Use Your Personal Data

We may use your personal data to:

• Provide, administer and manage BloomCare services;
• Manage healthcare benefits, medical services and claims;
• Communicate with you, your employer, healthcare providers and relevant service providers;
• Process transactions and provide customer support;
• Maintain and improve our platform and services;
• Detect, prevent and address fraud, misuse or security issues; and
• Comply with applicable laws, regulations and legal requirements.

Where consent is required under applicable law, we will obtain the necessary consent before processing your personal data.

3. Disclosure of Personal Data

Where necessary for the purposes described above, your personal data may be disclosed to:

• Your employer or authorised corporate administrator;
• Healthcare providers and medical service providers;
• Service providers, technology partners and other parties supporting our services; and
• Government, regulatory or other authorities where required or permitted by law.

We take reasonable steps to ensure that parties who receive personal data from us provide appropriate protection for that data.

4. Healthcare and Medical Information

Where BloomCare services involve healthcare benefits, medical services or claims, we may process healthcare or medical information necessary to provide and administer those services. We recognise the sensitive nature of such information and take appropriate measures to protect it in accordance with applicable requirements.

5. Your Rights

Subject to applicable law, you may have the right to:

• Request access to your personal data;
• Request correction of inaccurate or incomplete personal data; and
• Withdraw consent where processing is based on consent.

Requests may be subject to verification of your identity and any applicable legal requirements or limitations.

6. Direct Marketing

Where applicable, we may send you information about our products, services or promotions. Where consent is required, we will obtain your consent before sending marketing communications. You may withdraw your consent for direct marketing at any time.

7. Cookies and Similar Technologies

BloomCare may use cookies and similar technologies for purposes such as authentication, security, analytics and improving the functionality and user experience of our platform. You may manage cookie preferences through your browser or device settings, although disabling certain cookies may affect the functionality of the platform.

8. Data Security and Retention

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, loss, misuse, alteration or destruction. Your personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law.

9. Third-Party Websites

BloomCare may contain links to websites or services operated by third parties. This Privacy Notice does not apply to those third-party websites or services, and we are not responsible for their privacy practices. We encourage you to review the privacy notices of any third-party websites or services that you access.

10. Updates to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes to our services, data processing practices or applicable legal requirements. Any updated version will be published on this website with the revised "Last Updated" date.

11. Contact Us

If you have any questions about this Privacy Notice or wish to exercise your rights in relation to your personal data, please contact us: