Privacy Policy

Last updated: May 28, 2026.

This policy outlines how users consent to the collection and processing of their data when engaging with Global Precision Diagnostics (GPD), whether through communication, transactions, or website use.

Consent and Data Processing Policy

This policy outlines how users consent to the collection and processing of their data when engaging with Global Precision Diagnostics (GPD), whether through communication, transactions, or website use.

  1. engaging Global Precision Diagnostics (GPD) to provide the services;
  2. communicating or interacting with us in any way;
  3. entering into any transactions or dealings with Global Precision Diagnostics (GPD);
  4. accessing or browsing the website of GPD (precisiondiagnostics.co); or
  5. visiting our office and / or the office of GPD’s clients or attending any sale launches, promotional or other events held by GPD and / or any of GPD’s clients; you consent to the processing of your data by or on behalf of GPD in the provision of the Services.

*The term “processing” shall have the meaning as prescribed in the Act.

Personal Data Collection and Use Policy

a. Personal Data shall have the meaning as prescribed in the Act and it shall include information about you, such as your;

  1. name; NRIC / passport no; age; and date of birth; nationality; race; and gender;
  2. contact details including address(es); telephone / fax / handphone numbers; and email address(es);
  3. job / profession particulars including name and address of company, title / position, and income range;
  4. financial and legal status (including bank account or credit card information and bankruptcy); and
  5. any other information about you; your spouse; or family members that has been or may subsequently be collected, stored, used, and processed by Global Precision Diagnostics (GPD)

(collectively referred to as “Personal Data”).

b. In respect of Personal Data of similar kinds of third parties such as your spouse and family members, your guarantee/warrant that you have obtained their consent allowing us (GPD) to process their personal data and you will extend a copy of this Notice to them.

c. You are responsible for ensuring that the Personal Data you provide or provided, is accurate, complete, not misleading, and kept up to date.

Purposes

a. Global Precision Diagnostics (GPD) may use and process your Personal Data for the purposes relating to the Services. Any kind of matters/relations/connections, and for the business activities of GPD, which shall include the following;

  1. to communicate with you;
  2. to respond to any queries and / or comments from you;
  3. to prepare documents or instruments as may be required for the Services and such other ancillary work in connection with such purposes including letters, notices, forms, applications, agreements, affidavits, or any other documents in whatever form or nature;
  4. to carry out your or your employer’s instruction;
  5. to conduct such surveys to help improve our services; (vi) for our administrative use including historical, creditworthiness and conflict checking purposes;
  6. to provide information to regulatory and governmental authorities to comply with statutory and governmental requirements and with GPD’s obligations under the law; or
  7. for any other purpose that is required by any law, regulations, guidelines, and / or relevant regulatory body (collectively “Purposes”).

b. Global Precision Diagnostics (GPD) may also use and process your Personal Data for other purposes such as:

  1. to send you materials such as season greeting cards, newsletters, articles, write-ups, other updates, and information on events, conferences, talks, and seminars;
  2. to provide ranging potential referees to editors/researchers in legal ranking publications and journals and potential clients who request referees of past work in our credential statements, tenders, and submissions; or
  3. to provide to any bureau or agency established by Bank Negara Malaysia (including the Central Credit Reference Information System [CCRIS]), SME Credit Bureau, or any other credit reporting or reference agency. If you do not agree or consent to GPD processing your Personal Data for the purposes set out in this Section.

c. Please notify Global Precision Diagnostics (GPD) by contacting GPD via the contact details below.

d. Subject to any exceptions under applicable laws, you may at any time request for access to and for correction of your Personal Data kept by us and contact us with any inquiry or complaint in respect of your Personal Data as follows:

Global Precision Diagnostics Sdn Bhd | 202201028139 (1473836-U)
11, Lorong Tandang 51/204b, Seksyen 51, 46050 Petaling Jaya, Selangor,
Wisma Ali Bawal 2
Telephone No: +6011-1088 6581
Email: pdpa@precisiondiagnostics.co
Attention to: The Data Protection Officer

e. GPD is in accordance to the Act;

  1. we may charge a prescribed fee for processing your request for access or correction;
  2. we may refuse to comply with your request for access or correction to your Personal Data, and if we refuse to comply with such request, we will inform you of our refusal, and the reason for our refusal.

Disclosure to Third Parties

a. While we maintain a strict confidentiality policy on your Personal Data.
b. We may engage other service or facilities providers to perform functions on Global Precision Diagnostics’s behalf and consequently, we are allowed to disclose your data to third parties, within or outside Malaysia, such as the following parties (which are not exhaustive);

    1. information technology (IT) and data entry service providers;
    2. storage facility providers;
    3. our professional advisors, external auditors, accountants, consultants, banks and financial institutions and insurance providers;
    4. regulatory and / or statutory authorities/bodies/agencies and / or credit reporting agencies and / or other bodies/agencies for GPD to comply with statutory and governmental requirements;
    5. persons stated in “Purposes”; and
    6. such other party as Global Precision Diagnostics (GPD) deems necessary for the Purposes.

Right to Limit Processing of Personal Data

Subject further to such rights and restrictions as prescribed under the Act, you may at any time, limit the processing of your Personal Data including the extent of the Personal Data and / or the purpose for which it is being processed by giving notice in writing to us, delivered by hand or sent by registered post to Global Precision Diagnostics (GPD) at our address stated in section “Purposes”.

Consequences of Failing to Supply Personal Data

a. All Personal Data supplied by you to us shall be wholly voluntary on your part and you may withdraw your consent to Global Precision Diagnostics (GPD) processing your Personal Data.
b. However, if you do not provide or do not consent to GPD processing your Personal Data, GPD may not be able to;

    1. provide you with the Services you require;
    2. communicate with you;
    3. prepare the relevant agreements and / or any other documents for you;
    4. effectively carry out instruction in providing the Services to you; and / or
    5. perform or achieve the Purposes as set out in the section “Purposes”.

Transfer of Personal Data

a. As Global Precision Diagnostic’s (GPD) information technology storage facilities and servers may be located in other jurisdictions, your data may be transferred to, stored, used, and processed in a jurisdiction other than Malaysia.

b. In any event, you understand and hereby consent to the transfer of your Personal Data to any place outside of Malaysia as provided for under the Act.

c. In accordance with third parties; GPD may request your assistance to procure the consent of third parties whose personal data is provided by you to us and you hereby agree to use your best endeavour to do so.

Account Deletion and Data Retention for PreciseEHR Mobile Application

Users of the PreciseEHR mobile application (“Application”) may submit a request to delete their account directly through the Application.

(a) Upon receipt and successful processing of a valid account deletion request:

  1. the relevant account will be deactivated and removed from active use within the Application;
  2. the user will no longer be able to access or use the deleted account through the Application; and
  3. the account will no longer be treated as an active account for operational purposes.

(b) For the avoidance of doubt, deletion of an account does not necessarily require the immediate deletion of all information associated with the account where retention of such information is required or permitted under applicable laws, regulations, healthcare record retention obligations, accreditation requirements, audit requirements, patient safety obligations, cybersecurity requirements, fraud prevention requirements, dispute resolution requirements, or other applicable legal and compliance obligations.

(c) Accordingly, certain information associated with the account, including Personal Data, health-related information, laboratory records, diagnostic records, transaction records, audit logs, and security records, may continue to be retained in secure archived form for the purposes stated above.

(d) Archived records retained following account deletion:

  1. will not remain accessible to the user through the Application;
  2. will not be used for normal operational or account access purposes;
  3. will be protected by reasonable administrative, technical, and security safeguards; and
  4. will only be accessed or processed by authorised personnel on a need-to-know basis for lawful and permitted purposes, including legal, regulatory, clinical, laboratory, audit, compliance, cybersecurity, patient safety, fraud prevention, or dispute resolution purposes.

(e) Subject to applicable legal and regulatory requirements, archived information may be retained for a period of seven (7) years from the date of the account deletion request, or for a longer period only where required by applicable law, lawful regulatory requirement, court order, governmental authority, or recognised healthcare record retention obligation.

(f) Upon expiry of the applicable retention period, and subject to any overriding legal or regulatory preservation requirement, Global Precision Diagnostics Sdn. Bhd. (“GPD”) will take reasonable and appropriate measures to securely delete, anonymise, de-identify, destroy, or otherwise irreversibly dispose of archived information in accordance with applicable laws, regulations, and internal data protection and information security policies.

(g) All account deletion requests may be subject to reasonable identity verification, authentication, security validation, and fraud prevention procedures prior to processing.

(h) For enquiries relating to account deletion, data retention, or the handling of Personal Data within the Application, users may contact:

Global Precision Diagnostics Sdn Bhd | 202201028139 (1473836-U)
11, Lorong Tandang 51/204b, Seksyen 51, 46050 Petaling Jaya, Selangor,
Wisma Ali Bawal 2
Telephone No: +6011-1088 6581
Email: pdpa@precisiondiagnostics.co
Attention to: The Data Protection Officer

Data Protection, Retention, Sharing and Security

a. Global Precision Diagnostics (GPD) complies strictly with all individual’s data protection and security.

  • An encrypted secured report will be sent to the user
  • Compliance with Personal Data Protection Act 2010 (The PDPA 2010)

b. At GPD, we are dedicated to ensuring the privacy, confidentiality, and security of our customers’ and clients’ personal data and reports. Our commitment to data protection is demonstrated by our strict adherence to the provisions of the Personal Data Protection Act 2010 (The PDPA 2010). To achieve this, all information is transmitted using a secure connection and stored in an encrypted and password-protected database. Access to your DNA results requires a password, and you retain full control over how your results are utilized or shared with third parties.

c. Non-sharing of patient information with third parties;

  • By prioritising the protection of your data, we aim to provide you with peace of mind. Our unwavering commitment to privacy, confidentiality, and security ensures that your information is handled with utmost care and diligence. You can confidently rely on us to maintain the highest level of data protection throughout our operations. One of our fundamental principles is that we will never engage in the disclosure or sale of your information to any unauthorized/unidentified mystery partners. GPD understands the importance of maintaining the trust you place in us, and we are committed to upholding the strictest standards of confidentiality. Each sample we receive is assigned a unique ID, carefully designed to exclude any patient identifiers or personal details. This approach guarantees that the samples remain completely anonymous throughout the testing process. If identification of prevalence is needed to assist our national policy-making, the statistical analysis will only be conducted on data that is already de-identified.