Skip to content

Legal

Privacy policy

How we handle your personal data and your health information, and the choices you have under Malaysian law.

Last updated 12 September 2026

1. Who we are

Rise is a men's health service in Malaysia that connects you with a registered doctor for an online consultation about erectile dysfunction and prostate or urinary symptoms, and arranges supply of medicine when a doctor prescribes it.

This notice explains how we collect, use, disclose and protect personal data when you visit riseforman.com, message us on WhatsApp, or use our service. It is issued in accordance with the Personal Data Protection Act 2010 and the standards made under it. In this notice, Rise, we and us refer to the operator of riseforman.com.

2. What we collect

We collect only what we need to arrange your consultation and, if a doctor prescribes it, your medicine.

  • Details you give us, such as your name, mobile number, email address and age.
  • Messages you send us, including the content of WhatsApp conversations with our team.
  • Health information you share before or during a consultation, such as your symptoms, medical history, current medicines, allergies and lifestyle.
  • Order and delivery information, such as your delivery address, order history and payment confirmation. We do not store full card numbers.
  • Technical information collected automatically when you visit the site, such as your device type, browser, approximate location derived from your network address, the pages you view and the date and time of your visit.

3. Why we collect it

  • To arrange and support your consultation with a registered doctor.
  • To allow the doctor to assess whether treatment is suitable for you, and to arrange supply and delivery if a prescription is issued.
  • To answer your questions and provide customer support, including over WhatsApp.
  • To keep the medical, dispensing and business records that Malaysian law requires us and our partners to keep.
  • To operate, secure and improve the website, and to understand in aggregate how people use it.
  • To send you service messages about a consultation or an order. We send marketing messages only if you have agreed to receive them, and you can stop them at any time.
  • To meet legal, regulatory and professional obligations, and to establish or defend legal claims.

4. Health information and consent

Information about your physical or mental health is sensitive personal data under the Personal Data Protection Act 2010. We process it only with your explicit consent, or where the law otherwise permits or requires it, for example to comply with a legal obligation or to protect your vital interests.

You give that consent when you choose to start a consultation and share your symptoms and medical history. You may withdraw your consent at any time by writing to us, and we will stop processing your health information for the purposes you withdraw. Withdrawing consent may mean we can no longer provide the service to you, and it does not affect records we are required by law to retain.

Consultations are covered by medical confidentiality. The doctor who treats you owes you a professional duty of confidence in addition to the protections in this notice.

5. Who we share it with

We do not sell your personal data, and we do not share it for anyone else's advertising.

  • The licensed telemedicine provider and the registered doctors who carry out your consultation and issue any prescription. They receive the information needed to assess and treat you, and they keep their own medical records as their professional obligations require.
  • The licensed pharmacy or dispensing facility that fulfils a prescription, and the courier that delivers it. The courier receives only delivery details, not your health information.
  • Payment providers, which process your payment under their own terms.
  • Service providers that support us, such as hosting, communications, customer support and analytics providers, acting on our instructions under written obligations of confidentiality and security.
  • Regulators, law enforcement, courts or other authorities where disclosure is required or permitted by Malaysian law.
  • A buyer or successor, if the business or part of it is transferred, subject to the same protections described here.

6. WhatsApp messages

If you contact us through the WhatsApp button on this site, your message and your mobile number reach us through WhatsApp, which is operated by Meta and governed by its own terms and privacy policy. We are not responsible for how Meta handles data on its platform.

Please do not send detailed medical information, images of your body, or identity documents over WhatsApp. Share clinical details during the consultation instead, where they are handled as medical records.

7. Where your data is stored

Your data is stored on secure servers, and some of our service providers host or access data outside Malaysia. Where personal data leaves Malaysia, we transfer it only where the receiving party is bound by written contractual obligations to protect it to a standard comparable to the Personal Data Protection Act 2010, or where the transfer is otherwise permitted under that Act, including where you have consented.

8. How long we keep it

We keep personal data only for as long as it is needed for the purposes described here, and then delete it or make it anonymous.

Medical records created during a consultation are kept for as long as you want them kept, so that a doctor can see your history if you come back to us. If you want them deleted, write to dpo_malaysia@riseforman.com and we will delete them, apart from anything Malaysian law requires us or the treating clinic to retain.

Order, dispensing, tax and accounting records are kept for the periods set by law. Enquiries that do not lead to a consultation are kept for up to twelve months.

9. How we protect it

We use encryption in transit, access controls that limit staff access to what their role requires, confidentiality obligations for our people and our providers, and regular review of our systems. Orders are delivered in plain packaging with no reference to the medicine or the condition on the outside.

No method of transmission over the internet and no method of electronic storage is completely secure, so we cannot guarantee absolute security. If a breach of security involving your personal data occurs and it is likely to cause you significant harm, we will notify you and the Personal Data Protection Commissioner as required by law.

10. Your rights

Under the Personal Data Protection Act 2010 you have the right to:

  • Ask for access to the personal data we hold about you, and for information about how it is used.
  • Ask us to correct personal data that is inaccurate, incomplete, misleading or out of date.
  • Withdraw your consent to our processing of your personal data, including your health information.
  • Ask us to limit the processing of your personal data for a specific purpose, including profiling.
  • Tell us to stop using your personal data for direct marketing, which we will act on without charge.
  • Ask us to transmit your personal data to another data controller of your choice, where that is technically feasible and the law provides for it.
  • Ask us to delete your records, including the medical records from a consultation, by writing to dpo_malaysia@riseforman.com.

Some rights are qualified. For example, we may not be able to delete records that Malaysian law requires us or the treating clinic to keep.

11. How to exercise your rights

Write to dpo_malaysia@riseforman.com with your request and enough information for us to identify you. We may ask you to verify your identity before we act, to make sure we do not disclose your data to someone else.

We aim to respond within twenty one days. If we cannot meet a request, we will tell you why. A reasonable fee may apply to a data access request as permitted under the Act.

If you are not satisfied with our response, you may complain to the Personal Data Protection Commissioner, Department of Personal Data Protection, Ministry of Digital, Malaysia.

12. Cookies and analytics

This site uses a small number of cookies and similar technologies. Some are necessary to make pages load and work correctly. Others help us count visits and understand which sections people read, in aggregate, so we can improve the page.

You can block or delete cookies in your browser settings. Blocking necessary cookies may stop parts of the site from working. We do not use cookies to build advertising profiles about your health.

13. Adults only

This service is for adults aged eighteen and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, write to us and we will delete it.

14. Changes to this notice

We may update this notice when our service, our providers or the law changes. The date at the top shows when it was last revised. If a change materially affects how we use your personal data, we will tell you before it takes effect. This version was last updated on 12 September 2026.

15. Contact us

For any question about this notice, or to exercise your rights, write to dpo_malaysia@riseforman.com.

Nothing on this page is medical advice. Prescription medicines are supplied only after a consultation and a valid prescription issued by a registered doctor.