Your Data, Your Health, Your Privacy.
At Sihat Nutri, your conversations with our nutritionists are sacred. This policy outlines exactly how we protect your personal information with the same care we give to your dietary plans.
We Treat Your Information Like a Medical Chart
In the hands of the wrong people, data is a liability. In our hands, it's a tool to help you live better. We operate on a principle of "minimal viable data"—we only collect what is strictly necessary to craft a nutrition plan that works for your biology and your lifestyle.
When you book a consultation, we ask for details that allow our nutritionists to contextualize your health markers. We do not sell your email, we do not track you across the web, and we certainly do not monetize your health goals. Your privacy isn't a feature; it's our foundation.
Encryption Standard
All data in transit is secured via TLS 1.3. Data at rest is encrypted using AES-256 standards, similar to what major financial institutions use. We leverage secure Malaysian cloud infrastructure to ensure sovereignty.
In short: We collect your contact info and health preferences to facilitate bookings. We never share this with advertisers. You own your data and can request it (or its deletion) anytime via email. That's the whole deal.
What We Collect & Why
Transparency in practice. No jargon, just facts.
Account Details
- Data: Name, Email, Phone Number
- Purpose: Booking verification & communication
- Legal: Contractual necessity
Health Profile
- Data: Dietary restrictions, Allergies, Goals
- Purpose: Tailoring nutrition advice
- Legal: Vital interests / Explicit consent
Payment Info
- Data: Transaction ID, Last 4 digits
- Purpose: Processing consultation fees
- Legal: Legal obligation (tax records)
Technical Logs
- Data: IP Address, Browser Type
- Purpose: Security & Fraud Prevention
- Legal: Legitimate interest
Retention & Your Rights
We don't believe in hoarding data. Medical records in Malaysia are required to be kept for a minimum of 7 years from the last interaction. After this period, your personal data is anonymized or securely deleted.
Under the Malaysian Personal Data Protection Act (PDPA) 2010, you have the right to:
- Access the data we hold about you.
- Correct inaccuracies in your profile.
- Restrict processing of sensitive data.
- Request Deletion (subject to legal retention requirements).
2026-01-21 09:42:11 | ENCRYPT | AES-256-GCM | Payload secured
2026-01-21 09:42:12 | ACCESS | User_[Redacted] | Session initiated
2026-01-21 09:42:15 | QUERY | Nutritionist | View restricted profile
2026-01-21 09:42:20 | LOGOUT | Token invalidated
Exercise Your Rights
To make a request regarding your personal data, please contact our designated Data Protection Officer (DPO). We aim to respond to all legitimate requests within 30 days.
Data Protection Officer
Sihat Nutri
Level 15, Menara HLA
Jalan Raja Chulan
Kuala Lumpur, 50200