Privacy Policy

Last Updated: 18 September 2026

At 4hertz, operated by FOUR HERTZ ENTERPRISE (“4hertz”, “we”, “us” or “our”), we respect your privacy and are committed to protecting the personal data entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you interact with 4hertz, including when you contact us, use our website, make an enquiry, book a physiotherapy service, participate in training, engage us for event coverage, or otherwise use our services.

This Privacy Policy should be read together with any additional consent forms, patient notices or service-specific terms provided to you.

1. About 4hertz

Business Name: FOUR HERTZ ENTERPRISE Trading Name: 4hertz Registration No.: 202503270467 (AS0503027-D)

Business Address: No. 28, Lorong Sri Damak 60 Taman Sri Andalas 41200 Klang Selangor, Malaysia

Email: 4hertz.business@gmail.com Telephone / WhatsApp: +60 14-637 6176 Website: www.4hertz.xyz

4hertz provides services including:

• Physiotherapy house calls;
• Corporate and private training;
• Physiotherapy support for sporting events, competitions and other events; and
• Related physiotherapy, rehabilitation and educational services.

2. Personal Data We May Collect

The information we collect depends on how you interact with us and the services you request.

Personal and Contact Information

We may collect:

• Full name;
• Date of birth and/or age;
• Gender;
• Telephone number;
• Home or service address;
• Emergency contact information;
• Occupation; and
• Other information you voluntarily provide to us.

Health and Clinical Information

Where reasonably necessary to assess or provide physiotherapy services, we may collect information including:

• Relevant medical history;
• Current symptoms or concerns;
• Medications;
• Diagnosis, if any;
• Injury history;
• Surgical history;
• Previous treatments;
• Physiotherapy assessment information;
• Treatment information;
• Rehabilitation information;
• Functional and mobility information; and
• Other health information relevant to the provision of physiotherapy services.

Information concerning your physical or mental health may constitute sensitive personal data and will be handled accordingly.

Booking and Service Information

We may collect information concerning:

• Appointment requests;
• Appointment dates and times;
• Service location;
• Services requested;
• Assigned physiotherapist;
• Appointment history;
• Communications with 4hertz;
• Payment information;
• Transaction information; and
• Invoices or receipts.

Corporate Training Information

When you contact us on behalf of a company or organisation, we may collect:

• Company or organisation name;
• Contact person's name;
• Job title;
• Telephone number;
• Email address;
• Number of participants;
• Training requirements;
• Preferred dates and location;
• Billing information; and
• Other information reasonably necessary to prepare and deliver the training.

Event Information

For sports and event physiotherapy enquiries, we may collect:

• Event organiser information;
• Event name and type;
• Contact person's details;
• Event location;
• Event dates and times;
• Estimated number of participants;
• Physiotherapy coverage requirements;
• Billing information; and
• Other information necessary to plan and provide the agreed services.

Photographs and Videos

Where appropriate, photographs or videos may be taken for legitimate clinical purposes, such as documenting movement, function or progress.

Where identifiable photographs or videos are intended for marketing, promotional or social-media purposes, separate consent will be obtained.

Clinical consent does not automatically constitute consent for marketing use.

Website Information

When you visit our website, certain technical information may be processed automatically by our website infrastructure, such as:

• IP address;
• Browser type;
• Device information;
• Date and time of access;
• Pages visited; and
• Technical information necessary to operate and secure the website.

If 4hertz later introduces analytics, advertising pixels, cookies or similar technologies, this Privacy Policy and any applicable cookie notice will be updated as appropriate.

3. How We Collect Personal Data

We may collect personal data:

• Directly from you;
• Through WhatsApp;
• Through telephone calls;
• Through email;
• Through Instagram or Facebook;
• During physiotherapy appointments;
• Through patient documentation or intake processes;
• Through corporate training enquiries;
• Through event enquiries;
• From a parent, guardian, caregiver or authorised representative;
• From another healthcare professional where appropriate and authorised; and
• Through our website and associated technical systems.

4. How We Use Personal Data

We may use personal data to:

• Respond to enquiries;
• Arrange and confirm appointments;
• Communicate with patients and customers;
• Provide physiotherapy assessment and treatment;
• Plan rehabilitation and treatment;
• Monitor relevant clinical progress;
• Maintain appropriate patient and business records;
• Assign physiotherapists;
• Arrange house-call services;
• Prepare quotations;
• Provide corporate and private training;
• Arrange sports and event physiotherapy coverage;
• Process payments;
• Issue invoices and receipts;
• Manage customer and business relationships;
• Respond to feedback, complaints and requests;
• Operate and secure our website and systems;
• Improve our services;
• Maintain appropriate business and clinical records;
• Comply with applicable legal, regulatory and professional obligations;
• Establish, exercise or defend legal rights; and
• Carry out other purposes reasonably related to the services you request.

Where consent is required by applicable law, we will obtain the appropriate consent.

5. Health and Sensitive Personal Data

As a physiotherapy service provider, 4hertz may need to process sensitive personal data concerning a patient's health.

We seek to collect only information reasonably relevant to providing safe and appropriate physiotherapy services.

Patients should provide accurate and relevant information concerning their medical history, injuries, medications, diagnoses, previous treatments and other matters that may affect physiotherapy assessment or treatment.

6. Clinical Records

Patient and clinical information may be stored electronically, including through Google Drive and other systems adopted by 4hertz from time to time.

Access to clinical information is restricted according to legitimate operational and professional requirements.

The four founders of 4hertz may have authorised access to clinical records.

Physiotherapists engaged by 4hertz may be provided access to information reasonably necessary for patients assigned to them.

Administrative personnel may access booking, customer or other information reasonably necessary to perform their duties. Access to clinical information should be limited according to the person's role and legitimate need for access.

As our systems develop, 4hertz may introduce dedicated clinical record, booking or customer-management systems. Appropriate safeguards will be considered when such systems are introduced.

7. Sharing Personal Data

We do not sell your personal data.

Where reasonably necessary and permitted by applicable law, personal data may be disclosed to:

• The physiotherapist providing your service;
• The founders and authorised personnel of 4hertz;
• Physiotherapists engaged by 4hertz;
• Authorised administrative personnel;
• IT, hosting, storage and communication service providers;
• Payment service providers, if introduced;
• Booking or customer-management providers, if introduced;
• Professional advisers such as accountants, auditors, insurers and lawyers;
• Government authorities, regulators or law-enforcement bodies where disclosure is required or permitted by law; and
• Other parties where you have authorised the disclosure.

Relevant patient information may also be shared with another healthcare professional, such as a doctor or specialist, where appropriate and with the patient's consent, subject to circumstances where disclosure may otherwise be required or permitted by law.

We seek to limit disclosures to information reasonably necessary for the relevant purpose.

8. Google Drive and Third-Party Services

4hertz currently uses Google Drive for certain data-storage purposes.

Information stored or communicated through third-party services may also be processed by the relevant service provider in accordance with its applicable terms and privacy practices.

We may also communicate with you through services such as WhatsApp, Instagram, Facebook and email. When you use those platforms, the relevant platform provider may independently process information in accordance with its own privacy practices.

9. International Data Transfers

Some technology, cloud-storage, communications or other service providers may process or store information outside Malaysia.

Where personal data is transferred outside Malaysia, 4hertz will take steps required under applicable Malaysian personal data protection requirements in relation to such transfers.

10. Security

4hertz takes reasonable administrative, organisational and technical measures to protect personal data against risks including:

• Unauthorised access;
• Unauthorised disclosure;
• Accidental loss;
• Misuse;
• Alteration; and
• Destruction.

Access to patient information should be limited to persons with an appropriate reason to access it.

However, no electronic communication or storage system can be guaranteed to be completely secure.

11. Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, professional, clinical, accounting and operational requirements.

Clinical records may need to be retained for periods required or recommended by applicable healthcare, professional or legal requirements.

When personal data is no longer reasonably required, we will take appropriate steps concerning its deletion, destruction or anonymisation where applicable.

12. Patients Under 18

4hertz may provide physiotherapy services to patients under 18.

Where required or appropriate, consent from a parent or legal guardian will be obtained before providing services or processing relevant information.

Additional safeguards may apply to information concerning minors.

13. Marketing Communications

4hertz may introduce optional marketing communications through channels such as WhatsApp, email or SMS in the future.

Where consent or opt-in is required, marketing communications will only be sent after the appropriate permission has been obtained.

Marketing consent will be separate from the provision of physiotherapy services where appropriate.

Individuals who have opted in will be provided with a reasonable method of withdrawing from future marketing communications.

Operational communications relating to appointments, payments, enquiries or services are separate from marketing communications.

14. Testimonials and Reviews

4hertz may publish patient or customer testimonials and reviews.

Permission will be obtained before publishing testimonials in a manner that identifies an individual where appropriate.

Providing a testimonial does not automatically authorise 4hertz to use unrelated clinical information, photographs or videos.

15. Photography and Social Media

4hertz may create photographs or videos during its activities.

Where identifiable patient photographs or videos are intended for marketing, advertising or social-media use, we will obtain separate consent where appropriate.

Refusing marketing photography or withdrawing marketing permission where applicable will not affect a person's eligibility to receive physiotherapy services.

16. Your Personal Data Rights

Subject to applicable Malaysian law and permitted exceptions, you may have rights in relation to your personal data, including rights to:

• Request access to certain personal data held about you;
• Request correction of inaccurate or incomplete information;
• Withdraw consent where processing depends on consent, subject to applicable limitations and consequences;
• Ask questions concerning how your information is handled; and
• Exercise other rights available under applicable personal data protection requirements.

We may need to verify your identity before responding to certain requests.

Requests may be submitted using the contact details below.

17. Cookies and Analytics

Our website may use technologies necessary for its basic operation and security.

The use of additional analytics, advertising or tracking technologies is currently subject to our final website configuration.

If non-essential cookies, analytics services or advertising technologies are introduced, we will update our disclosures and provide any controls required under applicable requirements.

18. External Websites and Platforms

Our website may link to external websites and services.

Those websites are operated independently from 4hertz and may have their own privacy policies and terms.

We are not responsible for the privacy practices of third-party websites or platforms.

19. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technologies, business practices or legal obligations change.

The latest version will be published at www.4hertz.xyz with its updated date.

20. Contact Us

For questions about this Privacy Policy, requests relating to your personal data or concerns about how your information is handled, please contact:

FOUR HERTZ ENTERPRISE (4hertz) Registration No.: 202503270467 (AS0503027-D)

No. 28, Lorong Sri Damak 60 Taman Sri Andalas 41200 Klang Selangor, Malaysia

Email: 4hertz.business@gmail.com Telephone / WhatsApp: +60 14-637 6176 Website: www.4hertz.xyz

heal at your own frequency