Effective Date: January 1, 2026
Last Updated: March 2026
LamaniPulse by Lamanify ("we", "our", or "us") is dedicated to protecting the privacy, confidentiality, and integrity of clinical records and personal data. This Privacy Policy details our operational standards and compliance with the Personal Data Protection Act (PDPA 2010) Malaysia and the Private Healthcare Facilities and Services Act 1998.
1. Information We Process
1.1 Clinic Staff & Practitioner Accounts
- Full name, Malaysian Medical Council (MMC) registration number, professional credentials, work email, and phone number.
- Role-based permissions, access audit trails, and encrypted login session credentials.
1.2 Patient Records (Under Clinic Stewardship)
- Personal identification: Full Name, MyKad / Passport Number, date of birth, gender, and contact telephone number.
- Clinical records: Consultation notes, SOAP notes, diagnosis codes (ICD-10), vital signs, prescriptions, drug allergy alerts, lab investigation results, and verifiable Medical Certificates (MC).
- Financial records: Invoices, SST calculations, panel guarantee letters, and LHDN MyInvois validation UUIDs.
2. Principles of Data Protection & Usage
We process personal and healthcare data solely on behalf of the registered clinic practice for authorized healthcare delivery purposes:
- Healthcare Delivery: Facilitating accurate electronic medical records, drug allergy verification, dosage calculation, and patient continuity of care.
- Queue & Appointment Automation: Facilitating real-time In-Car WhatsApp notifications and Smart TV queue display calling.
- Statutory Tax Compliance: Generating validated e-invoices directly via the Inland Revenue Board of Malaysia (LHDN) MyInvois portal.
- Audit Trail & Safety: Maintaining immutable records of prescription dispensing and doctor consultation history.
We never sell, monetize, or rent patient or clinic data to any third-party advertisers, pharmaceutical companies, or brokers.
3. Data Security & Storage
- Encryption: 256-bit AES encryption applied to all clinical data at rest; TLS 1.3 encryption for all network transmissions.
- Access Control: Granular role-based access control (Doctor, Dispenser/Nurse, Front Desk, Billing).
- Data Sovereignty & Backups: Cloud infrastructure hosted in certified high-security regional tier-3 data centers with daily automated snapshots and 30-day recovery windows.
4. Statutory Retention Periods
In strict accordance with Malaysian healthcare regulations and guidelines from the Malaysian Medical Council:
| Category | Retention Duration |
|---|---|
| Patient Medical Records | Minimum 7 years from date of last visit |
| Financial & Tax E-Invoices | 7 years (as mandated by LHDN & Kastam Malaysia) |
| System Security Audit Logs | 180 days rolling |
5. Contacting Our Data Protection Officer (DPO)
For data access inquiries, PDPA compliance verifications, or data portability requests:
📧 Email: privacy@lamanify.com
📍 Address: Lamanify Healthcare Technologies, Kuala Lumpur, Malaysia
💬 WhatsApp: +6018-615 3768