Privacy Policy

LocumMY ("we", "us", "our") operates a locum-slot marketplace connecting clinics with doctors in Malaysia. This policy explains what personal data we collect, how we use it, and your rights under Malaysia's Personal Data Protection Act 2010 (PDPA). By using LocumMY you agree to this policy.

Depending on how you use LocumMY, we may collect:

• Account details — name, email address, password (hashed) and your role (doctor or clinic).
• Doctor profile — MMC/APC registration number, gender (used only for female-preferred matching), years of experience, state, city, phone and bio.
• Clinic profile — clinic name, location, address, phone and description.
• Postings & claims — slot details you post or claim, and any message you include.
• Sign-in providers — if you sign in with Google, we receive your name, email and profile basics from Google to create or link your account. We never receive your Google password.
• Technical data — session cookies needed to keep you signed in, and basic request information.

• To create and manage your account and profile.
• To show open slots to doctors and surface claims to clinics.
• To facilitate a match — when a clinic confirms a claim, contact details are shared between that clinic and that doctor so they can arrange the locum.
• To keep the service secure, prevent abuse, and respond to support requests.

We are a marketplace, so some information is shared by design. When you claim a slot, the clinic sees your name and the registration/experience details on your profile. When a clinic confirms a claim, the clinic's contact number is shown to you (and your phone to the clinic) so the locum can be arranged. We do not sell your personal data. We may use trusted infrastructure providers (e.g. Cloudflare) to host and run the service.

We keep your account and related data for as long as your account is active. You may request deletion of your account at any time, after which we remove your personal data except where we must retain it to comply with the law or resolve disputes.

Passwords are stored hashed, sessions are cookie-based, and the service runs over HTTPS. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data.

Under the PDPA you may access, correct, or request deletion of your personal data, and withdraw consent to certain processing. You can update most details directly in your profile, or contact us for help.

LocumMY is intended for registered healthcare professionals and clinics — not for minors.

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above. Continued use of LocumMY means you accept the updated policy.

For privacy questions or requests, email hi@locummy.com.