Privacy notice

1. Who this notice is from

Thinkint Sdn Bhd (1304353-V), trading as re:mind Psychology Center, is the data user responsible for the personal data described here. We are at C-02-3A, The Hub SS2, Jalan 17/47, Seksyen 19, 46400 Petaling Jaya, Selangor.

This notice covers our website, our free check-in, our booking system, our clinical services and the programs we run for organisations. If you become a client, consent to treatment and to clinical record-keeping is taken separately at your first session — not by your using this website.

2. What we collect

• Browsing— standard technical data your browser sends, and cookies
• Contact form— your name, email, organisation if given, and your message
• Free check-in— your DASS-21 answers, handled as described in section 4
• Clients— identity and contact details, an emergency contact, payment details, and clinical records including assessments, session notes, correspondence and reports

About the contact form

We only ask for a name, an email and a message. But people writing to a psychology centre often describe what they’re going through, and that becomes health information the moment it reaches us. We treat anything in that box as sensitive. If you’d rather not put it in writing, call us instead.

3. Health information is treated differently

Under the Act, information about a person’s physical or mental health is sensitive personal data, and requires your explicit consent — a higher standard that cannot be bundled into general terms. So:

• Consent to treatment and clinical records is taken in writing at your first session
• Participation in organisational screening is consented to by you, not by your employer on your behalf
• You can withdraw consent at any time, subject to section 8

We never use health information for marketing, advertising or profiling, and never share it with third parties for theirs.

4. The free check-in (DASS-21)

The check-in is a screening questionnaire, not a diagnosis, and it does not create a clinical record. Because your answers say something about your mental health, they are sensitive personal data and we handle them accordingly.

• Your answers are stored against the name and contact details you provide.They are not anonymous
• We never share or publish individual results. Only aggregated, anonymised data, from which no one can be identified, is used, for education, research and to understand patterns of need
• Access is limited to the people who need it, on the same basis as any other record we hold
• If you later book a session, your answers are not added to your client record unless you choose to share them with your therapist
• You can ask us to delete your check-in responses at any time

5. Programs run for an organisation

• Your employer does not see your individual results.They receive group-level findings only — patterns, proportions and what we’d recommend
• Groups too small for anonymity are reported combined with others, or not at all.
• Participation is voluntary and consented to individually

6. Children and young people

• Where a client is under 18, consent is given by a parent or guardian, and we also explain to the child in age-appropriate language what happens with what they tell us
• Where a school engages us, the school does not receive individual session content
• What is and isn’t shared with parents from a young person’s sessions is set out in the consent form we go through with you at the first session, so that everyone — including the young person — knows where they stand before any work begins

7. Why we process it, and who sees it

We process personal data to provide care and keep the records our professions require; to arrange, remind and take payment for sessions; to answer your enquiries; to run our organisational programs; to meet legal, tax and professional obligations; to keep people safe where there is serious and imminent risk; for education and research using anonymised, aggregated data only; and to send you things you have opted in to. If we ever want to use your data for something else, we will ask first.

We do not sell personal data or share it for advertising. We share it only with:

• Our booking, payment, hosting and IT providers (including SafeTalk, NomiLogic and the payment gateway)
• Clinical supervisors, as ethical practice requires, with your identity protected wherever possible
• Other professionals you specifically ask us to write to
• Anyone the law requires, or where there is serious and imminent risk to life

We do not disclose an individual’s personal data to their employer.

Your data stays in Malaysia. We do not transfer personal data outside the country. If that ever changes, we will update this notice first and only transfer where the receiving jurisdiction offers protection substantially similar to the Act.

8. How long we keep it

Only as long as needed, or as long as required. Periods below are proposals to confirm against your professional obligations.

• Clinical records, adults — 7 years from last contact
• Booking and payment records —7 years, for tax
• Enquiries that don’t become bookings — 12 months 
• Free check-in responses — as long as required
• Marketing contacts — until you opt out, then only a record that you did

At the end of the period, data is securely destroyed or irreversibly de-identified.

9. Keeping it safe

Access is limited to people who need it — a therapist sees their own clients’ records, not the whole practice. Everyone here, including trainees and administrative staff, is bound by confidentiality and trained on handling personal data. We review access when someone joins or leaves, and require our providers to meet equivalent standards. Clinical records are held in locked storage, an encrypted system, or both.

If a breach occurs that is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and tell you directly if you are affected.

0. Your rights

You can ask us to give you access to your data, correct it, limit how we use it, stop using it for marketing, transfer it to another provider where technically feasible, or withdraw your consent. Marketing consent is separate from consent to treatment, and declining it has no effect on your care — every message carries an unsubscribe link.

Email hello@remindpsych.co. We respond within 21 days. A prescribed fee may apply to an access request, and if we can’t comply we’ll tell you why.

Only limitation: 

We cannot delete clinical records on request. Our professional bodies require us to keep them for a set period, and that obligation survives the end of treatment and the withdrawal of consent. We can restrict who sees them and stop using them for anything beyond that obligation, and we’ll tell you exactly what we’ve kept and why.

11. Questions, complaints and changes

Talk to us first — most things are resolved that way. re:mind Psychology Center, C-02-3A, The Hub SS2, Jalan 17/47, Seksyen 19, 46400 Petaling Jaya, Selangor · hello@remindpsych.co · +60 11-545 41268. 

If you’re not satisfied with our response, you may complain to the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi).

If we change how we handle personal data we’ll update this page and the date below, and tell affected clients directly where the change is significant. This notice is published in Bahasa Malaysia and English. Confirm with your lawyer which version prevails, and link the two to each other.