QueueIn Business-Account Privacy Notice / Notis Privasi Akaun Perniagaan QueueIn

Version / Versi: 1.0-alpha

Last updated / Dikemas kini: 3 September 2026 / 3 September 2026

Effective date / Tarikh kuat kuasa: 3 September 2026 / 3 September 2026

This notice is for clinic owners, managers, staff, prospects, and billing contacts. The separate Customer Privacy Policy covers people joining queues.

Notis ini adalah untuk pemilik klinik, pengurus, kakitangan, prospek, dan hubungan pengebilan. Polisi Privasi Pelanggan yang berasingan meliputi orang yang menyertai barisan.

English

1. Who is responsible

Effortless Engine Sdn. Bhd. (Company No. 202601018243 / 1680340-K), which operates QueueIn, is the data controller for the business-account processing described here.

Contact:

Privacy enquiries/requests: [email protected], subject “Privacy request”
Phone: 019-205 0235
Address: 9, Jalan Prima Pelangi 6, Bukit Prima Pelangi, Segambut, 51200,

Malaysia

For patient and queue data entered for a clinic, the clinic normally decides the purposes and QueueIn normally acts as its processor under the DPA. QueueIn may separately control limited processing required for account security, fraud/abuse prevention, billing, legal compliance, and incident response.

2. Personal data we process

Category	Examples	Required?
Contact and role	Name, work email, phone, job title, clinic, owner/manager/staff role	Owner contact and work email are required; phone/title may be optional unless needed for support or verification
Clinic and signup	Clinic legal/trading name, company/registration details, outlet details, signup/referral/source field, trial dates	Core clinic/account details required; referral/source answer optional unless marked otherwise
Authentication	PropelAuth user/organisation identifiers, role/permissions, verification state, session/security metadata, login timestamps	Required for account access and security; QueueIn does not need the user's PropelAuth password
Billing and Stripe references	Billing name/email/address, tax details, Stripe customer/session/subscription/invoice/payment/refund references, amount/currency/status, renewal/cancellation dates	Required only for purchase, invoicing, refunds, or billing support; full card number and CVC do not reach QueueIn
Product and audit records	Account/outlet configuration, staff actions, feature use, status changes, audit event, time, account/user reference, device/browser/IP security data where collected	Required to operate, secure, support, and evidence account activity
Support and complaints	Emails, call notes, issue descriptions, files intentionally provided, response and resolution records	Optional to contact us; requested details may be required to investigate
Website and source data	Page/request logs, referrer or campaign/source fields actually collected, necessary cookie/local-storage data	Basic technical data is required to serve and secure the site; campaign/source fields may be optional
Communications choices	Language, service notices, optional marketing choice, withdrawal/unsubscribe record	Service notices required for the contract; marketing is optional

Do not send patient names, phone numbers, medical details, waiting-page links, passwords, card data, or other sensitive information in a general support message unless QueueIn asks for a secure, necessary route.

3. Sources

We obtain data:

directly from you through signup, account forms, Checkout, support, or

communications;

from your clinic owner, administrator, or inviter;
from authentication provider PropelAuth;
from Stripe and relevant payment/financial participants for billing status,

fraud controls, receipts, and refunds;

automatically from the service, browser, device, and security/audit systems;

and

from lawful public or business sources where needed to verify the clinic or

prevent misuse.

4. Purposes

We process business-account data to:

create, verify, authenticate, and administer the clinic account and staff

roles;

provide the trial and paid service, support, training, and service notices;
display plan/renewal status, collect payment through Stripe, issue records,

reconcile payment, handle failed payment, cancellation, refund, or dispute;

secure the service, preserve audit evidence, detect fraud/abuse, investigate

incidents, and enforce the contract;

understand product operation and improve QueueIn using minimised usage and

support information;

record the signup or campaign source actually supplied, evaluate business

outreach, and contact a prospect where requested or permitted;

comply with accounting, tax, e-Invoice, corporate, privacy, law-enforcement,

and legal-claim obligations; and

send optional marketing only where the recipient has chosen or the law

otherwise permits it, with an unsubscribe route.

If required information is not provided, QueueIn may be unable to create or secure the account, supply the trial, accept payment, issue an invoice, grant the requested role, investigate an issue, or meet a legal duty. Declining optional marketing or a voluntary source field does not affect the service.

5. Recipients and processors

We may disclose relevant, minimised data to:

clinic owners/managers and authorised staff within their account;
PropelAuth for authentication and organisation/user management;
Stripe, banks, card networks, payment providers, fraud services, and tax or

e-Invoice systems for payments and records;

Render and other verified infrastructure, database, storage, backup, CDN,

monitoring, and security providers;

Google/Firebase for optional push-notification infrastructure; Meta/WhatsApp

and approved providers only when the account uses that feature;

professional advisers, auditors, insurers, and contractors under

confidentiality and need-to-know limits;

regulators, courts, law enforcement, tax authorities, or other persons where

required or lawfully necessary; and

a genuine buyer/successor during a corporate transaction, subject to

confidentiality and continued protection.

We do not sell business-contact personal data. QueueIn must publish and keep an accurate subprocessor schedule before this notice becomes effective.

6. Cross-border processing

QueueIn is operated from Malaysia. Some providers may process data in Singapore, the United States, or other countries listed in the verified subprocessor schedule. Cross-border processing is limited to a specified purpose and handled using a condition permitted by PDPA section 129, practical security measures, processor contracts, and transfer records/assessment where required. Contact us for the current countries, recipient classes, and basis.

7. Retention

Record	Alpha retention target
Active account, staff role, and authentication link	While required for the account, then delete/anonymise within 30 days after the post-termination export window unless a legal or dispute hold applies
Routine product/security logs	Normally 30 days; relevant incident evidence may be retained until resolution plus up to 24 months
Support and complaint records	Normally 24 months after closure; longer only for an active dispute/legal duty
Unconverted prospect and source records	Normally 24 months after the last meaningful interaction, or earlier on a valid objection/withdrawal
Contract, acceptance, billing, invoice, tax, refund, and accounting records	Normally seven years where needed for tax/accounting/legal records
Backups containing deleted operational data	Cycle out within 90 days and remain unavailable for ordinary use

These periods are launch commitments only after QueueIn verifies that product jobs, vendors, backups, and operator procedures match them. We retain no data longer merely because storage is available.

8. Security

We use practical technical and organisational measures appropriate to the data and risk, including access control and role scoping, encrypted transport, protection of sensitive stored fields, restricted production access, audit events, secret/card-data exclusion, backups, security review, and incident procedures. No internet service can promise absolute security. Report a suspected account or data incident promptly using the privacy contact.

9. Your rights and choices

Subject to the PDPA and permitted exceptions, an individual may ask to:

access personal data and receive information about its processing;
correct inaccurate, incomplete, misleading, or outdated personal data;
withdraw consent where consent is the basis, without affecting earlier

lawful processing;

stop optional direct marketing;
request technically feasible data portability where the statutory right

applies; or

complain about processing.

Email [email protected] with subject “Privacy request”. State the account, your relationship to it, the right requested, and enough detail to locate the record. We will verify identity and authority proportionately and will not ask for unrelated patient data. QueueIn will respond within the period required by applicable law and explain any lawful refusal or limitation.

You may also complain to Malaysia's Personal Data Protection Commissioner. Current official contact and complaint routes are at https://www.pdp.gov.my/.

10. Analytics and communications

As of the date above, QueueIn has not detected active GA4, Google Tag Manager, or Firebase Analytics initialisation in the product. Search Console may give QueueIn aggregated search-performance data. Necessary session and preference storage and optional Firebase Messaging are explained in the Analytics and Cookie Disclosure. We will update this notice before enabling a materially different analytics provider or purpose.

11. Changes

We version and date this notice. We will give reasonable advance notice of a material change unless law, security, or an urgent provider change requires faster action. Earlier versions will be retained for acceptance and audit evidence.

Bahasa Malaysia

1. Siapa yang bertanggungjawab

Effortless Engine Sdn. Bhd. (No. Syarikat 202601018243 / 1680340-K), pengendali QueueIn, ialah pengawal data bagi pemprosesan akaun perniagaan yang diterangkan di sini.

Hubungan:

Pertanyaan/permintaan privasi: [email protected], tajuk “Permintaan privasi”
Telefon: 019-205 0235
Alamat: 9, Jalan Prima Pelangi 6, Bukit Prima Pelangi, Segambut, 51200,

Malaysia

Bagi data pesakit dan barisan yang dimasukkan untuk klinik, klinik biasanya menentukan tujuan dan QueueIn biasanya bertindak sebagai pemproses di bawah DPA. QueueIn boleh mengawal secara berasingan pemprosesan terhad yang diperlukan untuk keselamatan akaun, pencegahan penipuan/penyalahgunaan, pengebilan, pematuhan undang-undang, dan respons insiden.

2. Data peribadi yang kami proses

Kategori	Contoh	Wajib?
Hubungan dan peranan	Nama, e-mel kerja, telefon, jawatan, klinik, peranan pemilik/pengurus/kakitangan	Hubungan pemilik dan e-mel kerja wajib; telefon/jawatan mungkin pilihan kecuali diperlukan
Klinik dan pendaftaran	Nama sah/perdagangan, butiran pendaftaran, outlet, sumber rujukan/kempen, tarikh percubaan	Butiran teras wajib; jawapan sumber pilihan kecuali ditanda sebaliknya
Pengesahan	Pengenal pengguna/organisasi PropelAuth, peranan, status pengesahan, metadata keselamatan/sesi, masa log masuk	Wajib untuk akses dan keselamatan; QueueIn tidak memerlukan kata laluan PropelAuth pengguna
Pengebilan dan rujukan Stripe	Nama/e-mel/alamat bil, butiran cukai, rujukan pelanggan/sesi/langganan/invois/pembayaran/bayaran balik, amaun/status, tarikh pembaharuan	Wajib hanya untuk pembelian/pengebilan; nombor kad penuh dan CVC tidak sampai kepada QueueIn
Produk dan audit	Konfigurasi akaun/outlet, tindakan kakitangan, penggunaan ciri, perubahan status, peristiwa audit, masa, rujukan akaun/pengguna, data keselamatan peranti/pelayar/IP jika dikumpul	Wajib untuk operasi, keselamatan, sokongan, dan bukti aktiviti
Sokongan dan aduan	E-mel, nota panggilan, isu, fail yang sengaja diberikan, respons dan penyelesaian	Menghubungi kami adalah pilihan; butiran tertentu mungkin perlu untuk siasatan
Laman dan sumber	Log halaman/permintaan, perujuk atau sumber kempen yang dikumpul, data kuki/storan perlu	Data teknikal asas perlu; sumber kempen mungkin pilihan
Pilihan komunikasi	Bahasa, notis perkhidmatan, pilihan pemasaran, rekod berhenti	Notis perkhidmatan wajib untuk kontrak; pemasaran pilihan

Jangan hantar nama/nombor telefon pesakit, maklumat perubatan, pautan halaman menunggu, kata laluan, data kad, atau maklumat sensitif lain dalam mesej sokongan umum melainkan QueueIn meminta saluran selamat yang benar-benar perlu.

3. Sumber

Kami memperoleh data terus daripada anda; pemilik/pentadbir/penjemput klinik; PropelAuth; Stripe dan peserta pembayaran berkaitan; perkhidmatan, pelayar, peranti, serta sistem keselamatan/audit; dan sumber awam/perniagaan yang sah jika perlu untuk mengesahkan klinik atau mencegah penyalahgunaan.

4. Tujuan dan akibat tidak membekalkan data

Kami memproses data untuk mencipta, mengesahkan, dan mentadbir akaun/peranan; menyediakan percubaan, perkhidmatan berbayar, sokongan, latihan, dan notis; mengurus pelan, pembayaran, invois, kegagalan pembayaran, pembatalan, bayaran balik dan pertikaian; menjaga keselamatan, audit, pencegahan penipuan, insiden, dan penguatkuasaan kontrak; menambah baik operasi menggunakan maklumat minimum; merekod sumber pendaftaran/kempen yang sebenar; mematuhi tugas perakaunan, cukai, e-Invois, korporat, privasi dan undang-undang; serta menghantar pemasaran pilihan dengan cara berhenti.

Tanpa maklumat wajib, QueueIn mungkin tidak dapat mencipta/melindungi akaun, menyediakan percubaan, menerima pembayaran, mengeluarkan invois, memberi peranan, menyiasat isu, atau memenuhi tugas undang-undang. Menolak pemasaran pilihan atau medan sumber sukarela tidak menjejaskan perkhidmatan.

5. Penerima dan pemproses

Data minimum yang berkaitan boleh didedahkan kepada pemilik/pengurus dan kakitangan yang dibenarkan; PropelAuth; Stripe, bank, rangkaian kad, penyedia pembayaran, perkhidmatan penipuan/cukai/e-Invois; Render dan penyedia infrastruktur, pangkalan data, storan, sandaran, CDN, pemantauan dan keselamatan yang disahkan; Google/Firebase untuk push pilihan; Meta/WhatsApp jika ciri itu digunakan; penasihat/auditor/kontraktor yang terikat kerahsiaan; pihak berkuasa apabila diwajibkan secara sah; dan pengganti perniagaan sebenar dengan perlindungan berterusan.

Kami tidak menjual data peribadi hubungan perniagaan. QueueIn mesti menerbitkan jadual subpemproses yang tepat sebelum notis ini berkuat kuasa.

6. Pemprosesan rentas sempadan

QueueIn dikendalikan dari Malaysia. Sesetengah penyedia mungkin memproses data di Singapura, Amerika Syarikat, atau negara lain dalam jadual subpemproses yang disahkan. Pemprosesan rentas sempadan dihadkan kepada tujuan tertentu dan dikendalikan menggunakan syarat yang dibenarkan seksyen 129 PDPA, langkah keselamatan praktikal, kontrak pemproses, serta rekod/penilaian pemindahan jika diperlukan. Hubungi kami untuk negara, kelas penerima, dan asas semasa.

7. Penyimpanan

Akaun/peranan/pautan pengesahan: sepanjang diperlukan, kemudian

dipadam/dinyahkenal dalam 30 hari selepas tempoh eksport tamat, kecuali penahanan undang-undang/pertikaian.

Log rutin produk/keselamatan: biasanya 30 hari; bukti insiden yang berkaitan

sehingga selesai dan sehingga 24 bulan lagi.

Rekod sokongan/aduan: biasanya 24 bulan selepas ditutup.
Rekod prospek/sumber yang tidak menjadi pelanggan: biasanya 24 bulan selepas

interaksi bermakna terakhir.

Rekod kontrak, penerimaan, bil, invois, cukai, bayaran balik, dan perakaunan:

biasanya tujuh tahun jika diperlukan.

Sandaran data operasi yang dipadam: dikeluarkan dalam 90 hari dan tidak

tersedia untuk penggunaan biasa.

Tempoh ini hanya menjadi komitmen pelancaran selepas QueueIn mengesahkan bahawa produk, vendor, sandaran, dan prosedur operator sepadan dengannya.

8. Keselamatan

Kami menggunakan langkah teknikal dan organisasi praktikal yang sesuai, termasuk kawalan akses/peranan, penghantaran disulitkan, perlindungan medan sensitif, akses produksi terhad, audit, pengecualian data rahsia/kad, sandaran, semakan keselamatan, dan prosedur insiden. Tiada perkhidmatan internet boleh menjanjikan keselamatan mutlak. Laporkan insiden yang disyaki dengan segera.

9. Hak dan pilihan anda

Tertakluk kepada PDPA dan pengecualian yang dibenarkan, individu boleh meminta akses, pembetulan, penarikan persetujuan jika persetujuan ialah asas, penghentian pemasaran langsung pilihan, kemudahalihan yang boleh dilaksanakan secara teknikal jika hak berkanun terpakai, atau membuat aduan.

E-mel [email protected] dengan tajuk “Permintaan privasi”. Nyatakan akaun, hubungan anda, hak yang diminta, dan butiran mencukupi untuk mencari rekod. Kami akan mengesahkan identiti/kuasa secara berkadar tanpa meminta data pesakit yang tidak berkaitan. QueueIn akan menjawab dalam tempoh yang diwajibkan undang-undang dan menerangkan sebarang penolakan/had yang sah. Aduan juga boleh dibuat kepada Pesuruhjaya Perlindungan Data Peribadi melalui https://www.pdp.gov.my/.

10. Analitik, komunikasi, dan perubahan

Pada tarikh di atas, tiada pengaktifan GA4, Google Tag Manager, atau Firebase Analytics dikesan dalam produk. Search Console mungkin memberikan data prestasi carian agregat. Storan sesi/keutamaan yang perlu dan Firebase Messaging pilihan diterangkan dalam Pendedahan Analitik dan Kuki.

Kami memberikan versi dan tarikh kepada notis ini serta akan memberi notis awal munasabah bagi perubahan ketara kecuali undang-undang, keselamatan, atau perubahan penyedia yang segera memerlukan tindakan lebih pantas. Versi lama akan disimpan untuk bukti penerimaan dan audit.