Privacy Policy.

1. Introduction

Baby Angels Childcare Centre Sdn. Bhd. ("Baby Angels", "we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website, use our companion app, or engage our care services.

By using our website, our app, or our care services, you agree to the practices described here. We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

2. Who We Are

3. Information We Collect

3.1 Information You Provide

When you contact us, book a tour, or enrol your baby, we may collect:

• Your name, phone number, and email address
• Your home address (for pickup and drop-off coordination)
• Company or organisation name (for partner inquiries)
• Your baby's name, date of birth, and developmental stage
• Medical history of your baby (allergies, conditions, vaccinations, paediatrician details)
• Emergency contact information
• Identification documents (for KYC and security verification)
• Payment information (processed by our payment partners, not stored by us directly)

3.2 Information We Generate While Caring for Your Baby

• Daily care logs (feeding, sleep, diaper, mood, milestones)
• Live CCTV recordings within our centre
• Air quality, temperature, and humidity readings from our facility
• Photographs and short videos of activities (only with your consent)
• Health observations recorded by our nurses

3.3 Information Collected Automatically

When you visit our website or use our app, we may collect device type, browser, operating system, IP address, approximate location, pages viewed, and time spent.

4. How We Use Your Information

We use your information to:

• Provide and personalise care services for your baby
• Communicate with you about your baby's wellbeing
• Send you daily logs and live updates via our companion app
• Process payments and manage your account
• Respond to inquiries and partner outreach
• Improve our care quality, facility, and services
• Comply with legal and regulatory obligations
• Send marketing communications about new offerings, only with your consent

5. CCTV and Live Monitoring

Our care centre is equipped with 24/7 CCTV across all common areas and care rooms. Recordings are:

• Used for security, safeguarding, and quality assurance
• Accessible to you in real-time through our app, limited to your baby's assigned area
• Retained for up to 30 days unless required for an active investigation
• Never shared publicly or with third parties without your written consent or a lawful request from authorities

6. Sharing Your Information

We do not sell your personal data. We may share your information with:

• Our care staff and contracted specialists (nurses, paediatricians, lactation consultants, counsellors) on a need-to-know basis
• Partner clinics and hospitals if you are referred for medical care
• Service providers who help us operate (payment processors, IT vendors, secure cloud storage)
• Legal authorities when required by law

All third parties we engage are required to handle your data with confidentiality and PDPA compliance.

7. Children's Information

We care for babies aged 1 to 18 months. All information about your baby is collected with the explicit consent of the parents or legal guardians. We treat children's data with the highest level of protection.

8. Data Security

We protect your information through:

• Encrypted storage and transmission
• Restricted access on a strict need-to-know basis
• Biometric and credential-based entry to our facility
• Background-checked staff under confidentiality obligations
• Regular security audits and policy reviews

9. Data Retention

We retain your information for as long as you remain a client, and for up to seven (7) years after the end of our relationship unless a longer period is required by law. CCTV recordings are retained for up to 30 days.

10. Your Rights Under PDPA

You have the right to:

• Access the personal information we hold about you
• Correct any inaccurate or incomplete information
• Withdraw consent (where consent is the basis for processing)
• Request deletion of your information (subject to legal retention requirements)
• Limit how we use your information for marketing
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise these rights, please write to us at info@babyangels.com.my. We will respond within 21 days.

11. Cookies

Our website sets one first-party cookie, ba_consent, which records the choice you make in our cookie notice so that we stop asking; it lasts six months and identifies nobody. We run no analytics and no advertising trackers, and we set no third-party cookies. A few further items may be saved in your own browser if you allow them. You can change what we are allowed to remember at any time using our cookie preferences. Our Cookie Policy sets out exactly what they are, and which third-party services load alongside our pages.

12. Third-Party Links

Our website may contain links to third-party sites such as our partners. We are not responsible for the privacy practices of these sites. Please review their privacy policies separately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Material changes affecting how we handle your data will be communicated to you directly through our app or email.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach us: