Privacy & Personal Data Protection Notice

Last updated: 20 Aug 2026

This Privacy & Personal Data Protection Notice (“Privacy Notice”) explains how Listening Lab Sdn Bhd, operating the Sleeping Lab brand in Malaysia (“Sleeping Lab”, “we”, “us” or “our”), collects, uses, processes, stores, discloses and protects personal data.

This Privacy Notice is intended to be read in accordance with Malaysia’s Personal Data Protection Act 2010 (“PDPA”), including applicable amendments, regulations, standards and guidelines.

1. Personal Data We May Collect

Depending on your interaction with Sleeping Lab, we may collect personal data including:

Identification and Contact Information

• name;
• date of birth;
• age;
• gender;
• telephone number;
• email address;
• residential or correspondence address;
• identification information where reasonably required.

Health and Sleep-Related Information

This may include:

• sleep-related symptoms;
• medical or health history relevant to our services;
• sleep questionnaire responses;
• sleep-test recordings and results;
• oxygen saturation information;
• respiratory information;
• heart-rate information;
• information relating to sleep apnoea or other sleep-related concerns;
• CPAP therapy information;
• therapy or treatment history;
• prescriptions;
• referrals;
• medical or clinical reports provided to us; and
• other information concerning your health that is relevant to our products or services.

Certain health information may constitute sensitive personal data under Malaysian law.

Transaction and Service Information

This may include:

• appointment information;
• products and services purchased;
• product trial or rental information;
• payment and transaction records;
• invoices;
• warranty information;
• repair records; and
• customer-service history.

Digital and Website Information

This may include:

• IP address;
• browser type;
• device information;
• Website usage information;
• cookies and similar technologies;
• online form submissions; and
• communications with Sleeping Lab through digital channels.

Marketing and Programme Information

This may include:

• marketing preferences;
• participation in promotions;
• membership or programme information;
• eligibility information; and
• communication preferences.

2. How We Collect Personal Data

Sleeping Lab may collect personal data:

• directly from you;
• through our Website;
• through our CRM or appointment systems;
• through forms or questionnaires;
• during consultations and assessments;
• through home sleep tests or other equipment;
• through telephone, email, messaging or other communications;
• from a parent, guardian, caregiver or authorised representative;
• from healthcare professionals or clinics where permitted;
• from business or programme partners where relevant;
• from service providers acting on our behalf; and
• from other lawful sources.

3. Purposes for Processing Personal Data

Sleeping Lab may collect, use and otherwise process personal data for purposes including:

• responding to enquiries;
• registering and maintaining customer records;
• scheduling and managing appointments;
• conducting sleep-health assessments;
• administering home sleep tests;
• reviewing and communicating test results;
• providing appropriate product or service recommendations;
• supporting CPAP fitting, setup, trials, rentals or purchases;
• providing therapy support and follow-up;
• processing transactions and payments;
• managing warranties, repairs and after-sales support;
• communicating regarding appointments and services;
• managing enquiries, complaints and feedback;
• administering promotions, benefits and programmes;
• verifying programme eligibility;
• facilitating redemption of benefits;
• maintaining internal administrative and operational records;
• quality assurance and service improvement;
• complying with applicable legal, regulatory and audit requirements;
• fraud prevention and security;
• exercising or protecting legal rights;
• sending marketing communications where permitted; and
• other purposes reasonably related to the above that are notified to you.

4. Sensitive Personal Data

Sleeping Lab may process sensitive personal data, particularly information relating to an individual’s health.

Where required by applicable law, Sleeping Lab will obtain the appropriate consent before processing sensitive personal data unless such processing is otherwise permitted by law.

5. Disclosure of Personal Data

Where reasonably necessary and permitted by law, Sleeping Lab may disclose personal data to:

• authorised employees and personnel;
• related or affiliated companies;
• healthcare professionals;
• referring clinics or healthcare providers;
• diagnostic or technical service providers;
• equipment suppliers and manufacturers;
• CRM, software, IT and cloud-service providers;
• payment processors;
• logistics and delivery providers;
• professional advisers, including accountants, auditors and lawyers;
• business or programme partners where necessary for participation in a programme;
• government authorities;
• regulatory authorities;
• law-enforcement agencies; and
• other persons or organisations authorised by you or permitted by law.

Sleeping Lab does not sell personal data as a business practice.

6. Promotions, Partnerships and Programmes

Where you participate in a promotion, benefit, referral arrangement, corporate programme or other programme involving a third-party organisation, Sleeping Lab may collect, use or disclose personal data where reasonably necessary to:

• verify eligibility;
• register participation;
• administer the relevant programme or benefit;
• facilitate redemption;
• coordinate appointments or service delivery;
• verify utilisation;
• prevent duplicate or fraudulent redemptions;
• manage enquiries, complaints or disputes; and
• fulfil reasonable administrative, reporting or legal requirements.

Sleeping Lab will seek to limit the personal data disclosed to what is reasonably necessary for the relevant purpose.

7. Marketing Communications

Where permitted by law, Sleeping Lab may contact you regarding:

• products and services;
• health information and educational content;
• events;
• promotions;
• offers; and
• other relevant updates.

You may request to stop receiving direct-marketing communications at any time using the unsubscribe facility provided or by contacting Sleeping Lab.

Withdrawal from marketing communications will not affect service-related communications that are reasonably necessary in connection with your appointments, purchases, tests or other requested services.

8. Cookies and Similar Technologies

Sleeping Lab’s Website may use cookies and similar technologies for purposes including:

• essential Website functionality;
• security;
• remembering user preferences;
• Website analytics;
• performance measurement; and
• marketing or advertising, where applicable.

You may manage cookies through your browser settings or any cookie-management tools made available on the Website.

Disabling certain cookies may affect Website functionality.

9. Transfer of Personal Data Outside Malaysia

Some service providers, technology platforms, related companies or infrastructure used by Sleeping Lab may be located outside Malaysia.

Where personal data is transferred outside Malaysia, Sleeping Lab will take reasonable steps to ensure that the transfer is handled in accordance with applicable Malaysian data protection requirements.

10. Security of Personal Data

Sleeping Lab takes reasonable administrative, physical, organisational and technical measures intended to protect personal data against:

• loss;
• misuse;
• unauthorised access;
• unauthorised disclosure;
• alteration; and
• destruction.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

11. Retention of Personal Data

Sleeping Lab retains personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected or to meet legal, regulatory, operational, accounting, contractual or dispute-resolution requirements.

Where personal data is no longer required, Sleeping Lab will take reasonable steps to securely delete, destroy or anonymise it, subject to applicable legal requirements.

12. Your Rights

Subject to applicable Malaysian law and any permitted exceptions, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• withdraw consent where applicable;
• request that certain processing cease where permitted by law;
• object to or opt out of direct marketing; and
• make enquiries or complaints regarding our handling of your personal data.

Sleeping Lab may require reasonable verification of your identity before processing a request.

13. Consequences of Not Providing Personal Data

Some personal data may be necessary for Sleeping Lab to provide particular products or services.

If you do not provide information reasonably required by Sleeping Lab, we may be unable to:

• process your enquiry or booking;
• conduct an appropriate assessment;
• conduct or interpret a sleep test;
• recommend or provide certain products or services;
• process a transaction;
• provide follow-up support; or
• administer a promotion, benefit or programme.

14. Withdrawal of Consent

Where Sleeping Lab relies on your consent to process personal data, you may withdraw that consent by contacting us.

Withdrawal of consent will not affect processing already carried out before the withdrawal became effective.

Depending on the information involved, withdrawing consent may affect our ability to continue providing certain products or services.

15. Personal Data Breaches

Sleeping Lab maintains processes for identifying, assessing and responding to personal data breaches.

Where notification is required under applicable Malaysian data protection law, Sleeping Lab will notify the relevant authorities and/or affected individuals in accordance with the applicable requirements.

16. Data Protection Contact

Questions, requests or complaints regarding personal data may be directed to:

Listening Lab Sdn Bhd
Operating the Sleeping Lab brand in Malaysia

Email: info@listeninglab.my
Telephone: +603 7725 9334

17. Changes to This Privacy Notice

Sleeping Lab may update this Privacy Notice from time to time to reflect changes to our business, services, systems or applicable legal requirements.

The latest version will be published on the Website together with the last-updated date.