This Personal Data Protection Notice ("Notice") is issued by ALCHEMIST PARTNERS SDN. BHD. ("the Company") in accordance with the Personal Data Protection Act 2010 (Act 709) of Malaysia, including all subsidiary legislation and amendments thereto ("PDPA"). This Notice explains how the Company collects, uses, discloses, retains, and protects personal data in the course of its business activities.

​

1. Data Controller

​

ALCHEMIST PARTNERS SDN. BHD.
Business Activities: The Company operates in the healthcare and veterinary sectors, including the distribution and commercialisation of medical devices, veterinary supplements, and veterinary external topical products. Its activities involve regulatory liaison, product registration and compliance, sales and distribution management, customer and vendor engagement, marketing activities, and after‑ sales support, which may involve the processing of personal data in the course of its business operations.

 

2. Scope of Application

 

This Notice applies to all personal data processed by the Company through its physical premises, service centers, retail outlets, websites, online platforms, social media channels, and e-commerce systems.

 

3. Categories of Personal Data

​

The Company may collect general personal data including names, identification numbers, contact details, transaction records, payment information, employment data, images (including CCTV), and digital identifiers. Sensitive Personal Data may include health, therapy, rehabilitation, prescription, senior care, or biometric data, which will only be processed where necessary and with explicit consent or where permitted by law.

 

4. Purpose of Processing

​

Personal data is processed for purposes including service delivery, healthcare or wellness management, product sales and fulfilment, customer or patient administration, employment management, regulatory compliance, quality assurance, marketing activities (where consent has been obtained), and security and safety management.

 

5. Disclosure of Personal Data

​

Personal data may be disclosed on a need to know basis to companies within KWNG Group Holdings Sdn. Bhd., healthcare professionals, laboratories, logistics and IT service providers, payment gateways, professional advisers, and regulatory or governmental authorities where required by law, subject to appropriate confidentiality and data protection obligations.

 

6. Data Security and Retention

​

The Company implements appropriate administrative, technical, and physical safeguards to protect personal data. Personal data is retained only for as long as necessary to fulfil the stated purposes or to comply with legal obligations, after which it will be securely destroyed or anonymised.

 

7. Rights of Data Subjects

 

Subject to the PDPA, data subjects have the right to request access to their personal data, request correction of inaccurate or incomplete data, withdraw consent, and submit complaints regarding the processing of their personal data.

 

8. Personal Data Breach Management

 

The Company maintains procedures to identify and manage personal data breaches. Where a breach occurs that poses a risk to data subjects, appropriate remedial action will be taken and relevant authorities and affected individuals will be notified in accordance with the PDPA.

 

9. Data Protection Contact Point

 

For all PDPA-related enquiries across the Group, please contact:
Email: info@kwnggroup.com

 

10. Governing Law

 

This Notice shall be governed by and construed in accordance with the laws of Malaysia.

​

​

Effective Date: [01/01/2026]
Issued by: ALCHEMIST PARTNERS SDN. BHD.

​

​