NPM Malaysia · Effective 6 October 2026

Privacy Policy

This policy explains, in plain language, what personal data we collect, why we use it and the choices you have. It applies to this website, our booking form, and your visits to our centre.

Who we are

This website is operated by M Lab Beauty Sdn Bhd (202201013449 / 1459146-D), trading as NPM Malaysia, F-137A, Level 1, The Starling, Damansara Utama, 47400 Petaling Jaya, Selangor. In this policy, “we”, “us” and “our” mean M Lab Beauty Sdn Bhd.

Contact: npm.malaysia@gmail.com · +60 11-2056 1789

What we collect

Booking and enquiry forms. Name, phone number, preferred date and time, hair concern, preferred language, any notes you type and, on the enquiry form, your email address.

When you press send, the form shows a short thank-you page and then opens WhatsApp with your details already filled in. Your details stay in your own browser tab until WhatsApp opens; the website does not store your form data on our server or send it to our server. We only receive it if you send the message in WhatsApp. WhatsApp handles that message under its own terms and privacy policy.

Messages, calls and emails. What you tell us when you contact us on WhatsApp, by phone or by email.

At the in-store assessment. Photos of your hair and scalp, and scan or measurement data. We only take these with your consent.

Why we use it

To arrange, confirm and change your bookings.
To follow up on your enquiry, assessment or treatment.
To provide our service, keep your treatment record and answer your questions.
To meet our legal and accounting obligations.

We will only use photos that show you for anything beyond your own treatment record, for example to show results, if you give us separate consent.

We do not sell or rent your personal data. We only share it with service providers that help us run our business (such as messaging, email, website hosting and the analytics tools described below), or when the law requires us to.

Cookies and analytics

We use analytics and advertising tools (such as Google, Meta and OpenAI) to measure website visits and bookings. These tools use cookies or similar technologies and collect information such as the pages you visit, your device and browser type, and your approximate location. They do not receive the details you type into the booking form. You can block or delete cookies in your browser settings.

How long we keep it

We keep personal data only for as long as we need it for the purposes above, including any period the law requires. After that, we delete it or make it anonymous.

Your rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you can ask to access the personal data we hold about you, ask us to correct it, and withdraw your consent or ask us to limit how we use it. To do this, contact us at npm.malaysia@gmail.com or +60 11-2056 1789. We will confirm your identity first and reply within the time the PDPA requires.

Keeping it safe

We take reasonable steps to protect your personal data from loss, misuse and unauthorised access.

Updates to this policy

We update this policy from time to time. The latest version will always be on this page with its effective date.

Effective date: 6 October 2026.

NPM Malaysia