1About This Privacy Policy
This Privacy Policy explains how Wasbir Sdn. Bhd. ("Wasbir", "we", "us") collects, uses, discloses, stores and protects your personal data when you use the services of Tomel Baby Home Phototherapy.
This policy applies to all of our service channels:
- The tomelbaby.com website and the booking form on it.
- WhatsApp conversations, careline calls and emails with our team.
- Delivery, installation, nurse visits and collection of the equipment.
- Official Tomel Baby social media pages.
We process personal data in accordance with the Personal Data Protection Act 2010 (Act 709) and its amendments, together with other laws in force in Malaysia.
By submitting information to us through a form, WhatsApp or by telephone, you confirm that you have read and agree to this Privacy Policy.
2Who We Are
Tomel Baby Home Phototherapy is a home phototherapy equipment rental service operated by:
| Company name | Wasbir Sdn. Bhd. |
|---|---|
| Company registration no. | 202101040240 (1440540-H) |
| Address | No. 3A, 1 & 2, Jalan Putra 4, Taman Kajang Putra, 43000 Kajang, Selangor, Malaysia |
| Careline | 019-962 2345 (phone and WhatsApp) |
| Head office line | 03-9078 3030 |
| tomelbaby.homephototheray@gmail.com |
Wasbir Sdn. Bhd. is a subsidiary of Salam Alliance Sdn. Bhd. (172990-A). For the purposes of Act 709, Wasbir Sdn. Bhd. is the data controller of the personal data described in this policy.
3Personal Data We Collect
3.1 Identity and contact information
- Name of the parent or guardian.
- Telephone and WhatsApp numbers.
- Email address.
- Delivery address or residential area.
- Your preferred pickup location.
3.2 Information about your baby
- The baby name if provided, age in days, weight and gender.
- Information about the baby condition that you share with us.
3.3 Sensitive personal data (health information)
To deliver the service safely, we may collect:
- Doctor notes, letters or instructions relating to home phototherapy.
- Information on the baby jaundice and related treatment history.
- Observations and readings recorded by our nurses during visits, including temperature, heart rate, breathing rate, feeding pattern and output pattern.
Health information is sensitive personal data under Act 709. We process it on the basis of your explicit consent, or where the processing is permitted by law, including situations involving the vital interests of your baby.
3.4 Transaction information
- The package selected and the start and end dates of the rental.
- Payment amounts, deposits, receipts and proof of payment.
- Bank account details you provide for the refund of the deposit.
3.5 Communication records
- WhatsApp messages, emails and call records with our careline.
- Feedback, reviews and testimonials that you provide voluntarily.
3.6 Website technical data
- IP address, device type, operating system and browser.
- Pages visited, time spent and referral source.
- Cookie data together with analytics and advertising tags.
We do not collect or store your full credit card or debit card number, card PIN, online banking credentials or one time passwords. Payments made through a payment link are entered on the secure page of our licensed payment service provider, which processes the transaction and returns only the payment status and reference to us.
4How We Collect Your Data
If you provide the personal data of another individual, such as a spouse or family member who will receive the equipment on your behalf, you confirm that you have obtained their consent.
5Why We Use Your Data
| Purpose | Examples of use |
|---|---|
| Processing bookings | Assessing service suitability, confirming the package and rental period, issuing invoices and receipts. |
| Delivering the service | Delivering, installing, maintaining and collecting the equipment, and arranging nurse visits. |
| Monitoring baby safety | Recording nurse observations throughout the treatment period and advising you to consult a doctor where necessary. |
| Financial administration | Processing payments, deposit refunds and reimbursements, and maintaining accounting and tax records. |
| Customer service | Answering enquiries, handling complaints and improving service quality. |
| Equipment security | Tracking rented units and investigating damage or loss. |
| Marketing | Sending service information and promotions by WhatsApp, email or SMS, with your consent. |
| Legal compliance | Meeting legal and regulatory requirements and responding to lawful requests from the authorities. |
Testimonials, photographs or recordings are used in marketing materials only after your consent has been obtained. That consent may be withdrawn at any time.
6Basis of Processing and Data About Babies
We process your personal data on the following bases:
- Your consent, given when you submit a form, contact us or proceed with a booking.
- Contractual necessity, in order to perform the rental agreement between you and us.
- Legal obligations, including the retention of accounting records and electronic trade transaction records.
- Vital interests, where the information is needed to protect the health or safety of the baby.
A baby cannot give consent. All data concerning the baby is provided and authorised by the lawful parent or guardian. By providing that information, you confirm that you have the authority to do so on behalf of your baby.
7Who We Share Your Data With
We do not sell your personal data. Your data is shared only where necessary, with the following parties:
- Our staff and nurses, on a need to know basis in order to deliver the service.
- Salam Alliance Sdn. Bhd. (172990-A) and companies within its group, for operational support, careline and records management.
- Delivery partners such as Lalamove, limited to name, telephone number and delivery address.
- System and technology providers, including website hosting, customer management systems, WhatsApp Business and analytics and advertising providers.
- Financial institutions, for processing payments and deposit refunds.
- Doctors, clinics or hospitals, where you ask us to do so or where there is an urgent need relating to the safety of the baby.
- Professional advisers and authorities, where required by law, court order or an official investigation.
Our service providers are bound by confidentiality obligations and may process data only on our behalf and in accordance with our instructions.
8Transfers Outside Malaysia
Some of the technology providers we use, including hosting services, WhatsApp, Meta and Google, may store or process data on servers located outside Malaysia.
Such transfers are made subject to the data protection terms in our agreements with those providers and in accordance with the requirements of Act 709.
9Data Retention
We retain personal data for as long as it is needed for the purpose it was collected, or for as long as the law requires:
| Type of record | Retention period |
|---|---|
| Booking records, invoices, receipts and financial records | As required by tax and accounting law, generally 7 years |
| Electronic trade transaction records | At least 2 years, under the Consumer Protection (Electronic Trade Transactions) Regulations 2012 |
| Nurse visit and monitoring records | For a reasonable period for safety, reference and the defence of claims |
| Communication records such as WhatsApp and email | Until no longer needed for customer service purposes |
| Marketing data | Until you withdraw your consent |
Data that is no longer required is deleted or destroyed securely.
10Security and Data Breaches
We take reasonable technical and administrative measures to protect your data, including:
- Limiting access to relevant staff only.
- Password protected devices and accounts.
- Encrypted website connections using HTTPS.
- Confidentiality obligations in agreements with staff and service providers.
- Regular data backups and access control reviews.
In the event of a personal data breach that may cause significant harm, we will notify the Personal Data Protection Commissioner within 72 hours of becoming aware of it, and notify the affected individuals within 7 days, in line with the legal requirements in force.
No method of transmitting information over the internet is completely secure. You are also responsible for protecting the confidentiality of information you share through your own channels.
11Your Rights
Under Act 709, you have the right to:
- Access, meaning to request a copy of the personal data we hold about you.
- Correction, meaning to request that inaccurate or incomplete data be corrected.
- Withdraw consent for particular processing.
- Stop direct marketing.
- Limit processing in certain circumstances.
- Data portability, meaning to request that your data be transferred to another data controller, to the extent that this is technically feasible and secure.
How to make a request
Send your request by email to tomelbaby.homephototheray@gmail.com or by WhatsApp to 019-962 2345, stating your name, the telephone number used for the booking and the details of your request. We may ask you to verify your identity before processing the request.
We will respond within 21 days of receiving the request. A reasonable processing fee may apply to data access requests, at the rate permitted by law.
Withdrawing consent for data that is needed to deliver the service may mean that we are unable to continue the rental, delivery or nurse monitoring.
12Cookies and Tracking
Our website uses cookies and similar technologies to:
- Keep the website working correctly.
- Understand which pages are visited most often, through analytics tools.
- Measure advertising performance and display more relevant advertisements on platforms such as Meta and Google.
You can block or delete cookies through your browser settings. Some website functions may not work fully when cookies are disabled.
13Marketing and Communications
If you agree, we may contact you by WhatsApp, SMS, email or telephone about our services and promotions.
You may stop receiving marketing communications at any time by replying STOP on WhatsApp or by contacting our careline. Operational messages relating to your active booking, such as delivery confirmations and collection reminders, will continue until the service is completed.
14Third Party Links and Services
Our website contains links to third party sites and applications, including WhatsApp, Google Maps and social media platforms. This Privacy Policy does not apply to those sites. Please refer to their own privacy policies before providing any information.
15Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology or legal requirements. The current version is shown on this page together with its effective date.
16Contact Us and Complaints
Any enquiry, request or complaint relating to personal data may be addressed to:
Personal Data Enquiries · Wasbir Sdn. Bhd. (202101040240)
- Email: tomelbaby.homephototheray@gmail.com
- Careline and WhatsApp: 019-962 2345
- Head office line: 03-9078 3030
- Address: No. 3A, 1 & 2, Jalan Putra 4, Taman Kajang Putra, 43000 Kajang, Selangor
If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Department (JPDP), Ministry of Digital Malaysia.