Personal Data Protection Notice.

Wonderwalk Sdn. Bhd. (Company No. 202001037299 (1393620-D)) is the data controller for personal data described in this notice. Our clinic is at 6-1-3A, I-Santorini, Jalan Seri Tanjung Pinang 1, 10470 George Town, Pulau Pinang, Malaysia.

• Identity and contact details, including your name, telephone number, email address, date of birth and emergency contact.
• Appointment, service, quotation, order, payment and communication records.
• Health and mobility information relevant to your care, such as medical history, symptoms, reports, imaging, measurements, gait and pressure data, posture observations, foot impressions or blueprints, and photographs or videos where relevant and appropriately authorised.
• Information from a parent, guardian, referring professional or other person authorised to act for you.
• Basic technical information produced when you visit our website or contact us through a third-party service.

We collect data directly from you during enquiries, bookings, assessments, fittings and follow-ups; from a parent, guardian or authorised representative; from a referring or treating professional where permitted; and through records created while providing our services.

• To respond to enquiries and manage appointments.
• To assess movement, provide recommendations, make or fit bespoke products, and support follow-up care.
• To process payments, maintain business and clinical records, and communicate service information.
• To protect safety, quality and security; respond to complaints; and meet legal, regulatory, insurance and professional obligations.
• To send marketing only where permitted. You may opt out of marketing at any time.

If required information is not provided, we may be unable to safely assess you, provide a requested service or complete an order.

Health information is sensitive personal data. We process it only where permitted by Malaysian law, including with your explicit consent where required, to provide requested services, protect vital interests, establish or exercise legal rights, or meet applicable legal and professional obligations.

We do not sell personal data. We may share only what is reasonably necessary with:

• Authorised Wonderwalk team members and practitioners involved in your service.
• Suppliers that help manufacture or provide an agreed product or service.
• Service providers supporting communications, scheduling, payments, hosting, records, IT and secure storage.
• Your authorised representatives and healthcare professionals involved in your care.
• Professional advisers, insurers, regulators, law enforcement or other parties where required or permitted by law.

Some communication, technology or storage providers may process data outside Malaysia. Where this occurs, we take reasonable steps to use appropriate safeguards and to ensure the transfer is permitted under applicable Malaysian data protection law.

We use reasonable administrative, technical and physical safeguards appropriate to the nature of the data. We retain personal data only for as long as needed for the purposes described, to support continuity of service, and to meet legal, accounting, insurance and professional record-keeping requirements. Data is then securely deleted or anonymised where appropriate.

Subject to Malaysian law, you may ask to access or correct your personal data, withdraw consent where processing relies on consent, limit certain processing, or opt out of direct marketing. Some requests may be subject to lawful exceptions or reasonable verification.

To make a request or raise a privacy concern, contact us using the details below. Please include enough information for us to identify you and understand the request.

Where services are provided to a child or a person who cannot provide valid consent, we collect and use personal data with the involvement and authority of a parent, guardian or lawful representative as required.

This website does not currently use marketing or analytics cookies. Links to WhatsApp, Instagram and Facebook take you to services governed by their own privacy notices. If our website practices change materially, this notice will be updated.

Email info@wonderwalk.my, WhatsApp or call +60 16-973 3678, or write to Wonderwalk Sdn. Bhd. at the clinic address above.

We may update this notice to reflect changes in our services, practices or legal obligations. The latest version will appear on this page.