Privacy Notice
How we collect, use, and protect your personal information.
Last updated: 27 March 2026
We collect only the information needed to respond to enquiries, arrange consultations, improve the website, and send requested updates. We do not sell personal data.
Dr Fazliana Ismail (“Dr Faz”, “we”, “us”, or “our”) respects your privacy and handles personal data with care.
This Privacy Notice explains how personal data may be collected, used, stored, and disclosed when you visit drfazliana.com, contact us, submit an enquiry, request a consultation, or sign up for educational updates.
This website is intended to provide general educational information and help patients take the next step in contacting Dr Faz. It does not replace medical advice, diagnosis, or treatment.
1. Who this notice applies to
This notice applies to visitors, patients, prospective patients, family members making enquiries, and anyone who interacts with this website or contacts us through the channels listed on it.
2. What personal data may be collected
Depending on how you use the website, we may collect personal data such as:
- your name
- phone number
- email address
- preferred contact method
- information you include in an enquiry or booking request
- appointment-related details you voluntarily provide
- technical information such as IP address, browser type, device type, pages visited, and approximate usage data
Please do not send more medical information than necessary through a general website contact form.
3. How personal data may be collected
Personal data may be collected when you:
- submit a contact or enquiry form
- request an appointment or consultation
- use a third-party booking tool linked from this website
- subscribe to the newsletter or educational updates
- email us directly
- browse the website
Some booking, email signup, analytics, or form tools may be provided by third-party service providers.
4. Why personal data may be used
We may use personal data for purposes such as:
- responding to enquiries
- helping arrange consultations or appointments
- following up on booking requests
- sending educational emails that you requested
- operating, improving, and securing the website
- keeping records of communications
- complying with legal, regulatory, or professional obligations
We do not sell personal data.
5. Medical and sensitive information
If you choose to share health-related information through a contact form, email, or booking request, that information may be considered sensitive.
Please only share information that is reasonably necessary for us to understand your enquiry and guide you to the appropriate next step.
For urgent or emergency eye problems, please seek immediate medical attention through the appropriate clinic, hospital, or emergency service.
6. Cookies and website analytics
This website may use cookies or similar technologies for basic site functionality, traffic analysis, and performance monitoring.
These technologies may help us understand which pages are useful, how visitors use the site, and how to improve the patient experience.
If analytics or embedded third-party tools are used, those providers may process certain technical data according to their own privacy policies.
7. Third-party services
This website may link to or embed third-party services, including services for:
- appointment booking (Calendly, UMSC Booking)
- email newsletter signup (ConvertKit)
- maps (Google Maps)
- website security and spam prevention
When you interact with those services, your information may also be processed by those providers under their own terms and privacy notices.
8. Disclosure of personal data
Personal data may be disclosed only where reasonably necessary, including to:
- website, hosting, or technical service providers
- booking or email service providers
- clinic, hospital, or administrative teams involved in arranging care, where appropriate
- professional advisers or regulators where legally required
- authorities where disclosure is required by law
We aim to limit disclosure to what is necessary for the relevant purpose.
9. Cross-border processing
Some service providers may store or process data outside Malaysia.
Where this happens, reasonable steps should be taken to ensure that personal data is handled with appropriate safeguards and only for relevant purposes.
10. Data security
Reasonable practical steps are taken to protect personal data from loss, misuse, unauthorized access, modification, or disclosure.
However, no website, email system, or online transmission method is completely secure, so absolute security cannot be guaranteed.
11. Data retention
Personal data will be kept only for as long as reasonably necessary for the purpose for which it was collected, or as required by law, regulation, professional obligations, or record-keeping needs.
12. Your choices and rights
Subject to applicable law, you may have the right to:
- request access to your personal data
- request correction of inaccurate or incomplete personal data
- withdraw consent for certain uses where consent is the basis of processing
- ask questions about how your personal data is handled
To make a privacy-related request, please contact us using the contact details below.
13. Children
This website is not intended for unsupervised use by children providing personal data on their own. If information is submitted on behalf of a child, it should be done by a parent, guardian, or authorized caregiver.
14. Links to other websites
This website may contain links to external websites. We are not responsible for the privacy practices, content, or security of external websites.
15. Changes to this notice
This Privacy Notice may be updated from time to time. The latest version published on this page will apply.
16. Contact
For questions about this Privacy Notice or how personal data is handled, please contact: