Last updated: 26 August 2026
1. Information we may collect
Depending on the enquiry or service, we may receive your full name, telephone number, current facial photograph, address, photographs of a location or item, selected service details, communications and payment information.
We request only information relevant to the enquiry or service. Please do not send additional information that has not been requested.
2. How the information is used
Client information is used to identify the service recipient, clarify service requirements, carry out the ordered process, provide progress updates or reasonable follow-up support, administer payments and transaction records, and answer enquiries.
Facial photographs and other requested images are used as references for the relevant service. They will not be used in advertising, testimonials or publications without separate permission.
3. Consent and choice
By sending information after receiving a service explanation, the client consents to its use for the stated purposes. Clients may ask questions before providing data or withdraw consent for processing that has not yet taken place.
4. Access and disclosure
Access is limited to Zamzul Nizam and parties genuinely required to provide communications, technical storage or related service functions. These may include WhatsApp, website hosting and Google Analytics providers, subject to their respective policies.
We do not sell client data. Information will not be shared for third-party marketing without permission, except where required by law or necessary to protect legitimate rights and safety.
5. Retention
Facial photographs and service-specific images are retained only as long as necessary to deliver the service and reasonable follow-up support. They will generally be removed from active working storage within 90 days after completion, unless a programme remains active, the client requests continuity, separate permission is provided, or retention is required by law.
Transaction records, invoices and important communications may be retained longer where required for accounting, disputes, security or legal compliance. Data that is no longer required will be reasonably deleted or destroyed.
6. Security
Practical measures are taken to reduce the risk of loss, misuse, alteration, unauthorised access or disclosure. However, no digital transmission or storage method can be guaranteed to be completely secure.
7. Website, cookies and analytics
This website uses Google Analytics to understand general site usage, such as pages visited, country and device type. Analytics information is used to improve the website and is not intended to personally identify clients.
8. Your rights
Clients may request access to, correction of or deletion of personal data held, subject to lawful record-keeping requirements. Clients may also ask how their information is used or withdraw consent for future use.
9. Contact
For a privacy question or data request, contact BioMetaphysica Malaysia on WhatsApp at +60 19-336 0445.
This notice should be read together with the description of the selected service. Contact us if you need further clarification.