Privacy Policy
Last Updated: January 18, 2026
graceonik is committed to protecting the privacy and personal information of our residents, their families, and website visitors. This Privacy Policy explains how we collect, use, and safeguard your information.
Information We Collect
Personal Information
We collect personal information that you provide to us directly, including:
- Name, contact information (email address, phone number, mailing address)
- Health information and medical history (for residents only, with appropriate consent)
- Emergency contact information
- Financial information necessary for billing and payment
- Dietary requirements and preferences
- Communication preferences
Website Usage Data
When you visit our website, we may automatically collect:
- Browser type and version
- Operating system
- IP address and general location
- Pages visited and time spent on pages
- Referral source
Cookies and Tracking
We use cookies and similar technologies to improve website functionality and user experience. For detailed information about our cookie usage, please refer to our Cookie Policy.
How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery
- Providing residence services and daily care
- Managing accommodation and meal planning
- Coordinating health-related services and appointments
- Processing payments and maintaining billing records
- Communicating with residents and families about services
Communication
- Responding to inquiries and requests
- Sending service updates and important notifications
- Providing information about activities and programs
- Sharing relevant updates with authorized family members
Operations and Improvement
- Improving our services and facilities
- Analyzing website usage to enhance user experience
- Conducting surveys and gathering feedback
- Training staff to better serve residents
Legal Compliance
- Complying with Malaysian Personal Data Protection Act 2010 (PDPA)
- Meeting healthcare and safety reporting requirements
- Responding to legal requests and preventing fraud
Legal Basis for Processing
We process personal information based on:
- Consent: You have given explicit consent for specific purposes
- Contract: Processing is necessary to fulfill our residence agreement
- Legitimate Interest: Processing is necessary for our business operations while respecting your rights
- Legal Obligation: Processing is required by Malaysian law
Data Sharing and Disclosure
We do not sell personal information. We may share information with:
Authorized Parties
- Healthcare providers involved in resident care (with appropriate consent)
- Emergency contacts designated by residents
- Family members authorized by residents to receive updates
- Service providers who assist with operations (subject to confidentiality agreements)
Legal Requirements
We may disclose information when required by law, court order, or government request, or to protect safety and prevent harm.
Data Protection and Security
We implement security measures to protect personal information:
- Secure storage of physical records in locked facilities
- Encryption of digital data during transmission and storage
- Access controls limiting information to authorized personnel
- Regular security assessments and updates
- Staff training on privacy and data protection
- Secure disposal of information no longer needed
While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but maintain reasonable safeguards.
Data Retention
We retain personal information for:
- Resident records: Duration of residence plus seven years for legal and healthcare purposes
- Financial records: Seven years in accordance with Malaysian tax requirements
- Inquiry information: Two years after last contact
- Website analytics: Aggregated data retained indefinitely, individual data for one year
Information is securely destroyed when no longer needed for legal or business purposes.
Your Rights
Under Malaysian Personal Data Protection Act 2010, you have the right to:
- Access: Request copies of your personal information we hold
- Correction: Request correction of inaccurate or incomplete information
- Withdraw Consent: Withdraw consent for processing (may affect service delivery)
- Data Portability: Request information in a commonly used format
- Limit Processing: Request restriction on how we use your information
- Object: Object to processing based on legitimate interest
- Complaint: Lodge a complaint with the Personal Data Protection Commissioner
To exercise these rights, contact us at [email protected]. We will respond to requests within 21 days as required by PDPA.
Third-Party Services
Our website may contain links to external websites. We are not responsible for privacy practices of third-party sites. We recommend reviewing their privacy policies before providing personal information.
Third-party services we may use include:
- Website analytics providers
- Payment processing services
- Communication platforms
Children's Privacy
Our services are intended for adults aged 18 and above. We do not knowingly collect information from individuals under 18. If we become aware of such collection, we will delete the information promptly.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Significant changes will be communicated through:
- Website notice
- Email to residents and families
- Posted notices in the facility
Continued use of our services after changes indicates acceptance of the updated policy.
Contact Us
For questions about this Privacy Policy or how we handle your information, please contact:
graceonik
Jalan Duta 76, 50480 Kuala Lumpur, Wilayah Persekutuan, Malaysia
Email: [email protected]
Phone: +60 3 6208 5374