This policy explains how Cleanozh Beauty Studio Sdn. Bhd. ("Cleanozh", "we", "us") handles personal data collected through cleanozh.com and in our studio, in line with the Malaysian Personal Data Protection Act 2010 (PDPA). Reading time is about four minutes; we have kept the legal fog to a minimum.
1. What we collect
When you send a booking request we receive the details you type: your name, email address, phone number, the service you are interested in and any notes you add. In the studio we may additionally record treatment preferences, patch-test results, allergy information and before/after photographs (only with your written consent).
Our website also records routine technical data — browser type, approximate region, pages visited — through cookies described in our Cookie Policy.
2. Why we collect it
- To respond to enquiries and confirm, reschedule or cancel appointments.
- To deliver treatments safely: allergy notes and patch-test history exist to protect you.
- To meet legal obligations, including tax and business records required under Malaysian law.
- To improve our website using aggregated, non-identifying statistics.
We do not sell, rent or trade personal data. Ever. We also do not send marketing messages unless you have explicitly opted in, and every such message includes a working unsubscribe route.
3. Legal basis
We process your data on the basis of your consent (which you may withdraw at any time), the performance of a service contract with you, and our legitimate interest in running a safe, well-managed studio.
4. Who can see your data
Access is limited to Cleanozh staff who need it for their role. We use a small number of service providers — secure hosting, an appointment calendar and an accounting platform — each bound by confidentiality agreements. Some providers store data outside Malaysia; where they do, we ensure protections consistent with the PDPA.
We disclose data to authorities only when a law enforceable in Malaysia requires it.
5. How long we keep it
Booking correspondence is kept for 24 months after your last appointment. Treatment records, including patch tests, are kept for five years for safety and insurance reasons. Financial records are retained for seven years as required by law. When a retention period ends, data is deleted or irreversibly anonymised.
6. Your rights
Under the PDPA you may request access to the personal data we hold about you, ask us to correct it, withdraw consent to processing, or limit how we use it. Write to [email protected] and we will respond within 21 days. There is no fee for a first request.
7. Security
Data is transmitted over encrypted connections, stored on access-controlled systems and never kept on personal devices of staff. Paper consultation cards are locked in the studio and digitised within a week.
8. Children
Our services and website are intended for clients aged 18 and over. Clients aged 13–17 may be treated only with a parent or guardian present, and it is the guardian's data we record.
9. Changes to this policy
If we change this policy in any meaningful way, the revision date above will change and a notice will appear on our homepage for 30 days. Continued use of the site after that period constitutes acceptance.
10. Contact
Data protection questions can be sent to Cleanozh Beauty Studio Sdn. Bhd., Lot 3-07, Level 3, Bangsar Village II, 2 Jalan Telawi 1, Bangsar, 59100 Kuala Lumpur, Malaysia, or emailed to [email protected].