Environmental, Social, Governance (ESG) Policy

At UCrest Berhad, we are committed to integrating Environmental, Social, and Governance (ESG) considerations into our business practices, operations, and investments. Our goal is to create long-term value for our stakeholders while promoting a more sustainable future. To achieve this goal, we have established the following ESG policy:

Environmental:

We are committed to reducing our environmental impact and promoting sustainable practices within our healthcare organization. Our environmental objectives include:

1. Minimizing waste generation and promoting recycling and waste reduction practices.
2. Reducing our energy consumption and promoting the use of renewable energy sources.
3. Encouraging sustainable transportation practices for employees, patients, partners and suppliers.
4. Ensuring responsible procurement practices that prioritize environmentally friendly products and services.
5. Managing and reducing the use of hazardous materials and waste.
6. Regularly monitoring and reporting on our environmental performance.

Social:

We recognize the importance of our social responsibility to our patients, employees, and the communities we serve. Our social objectives include:

1. Developing high-quality healthcare services that prioritize patient safety and satisfaction.
2. Providing a safe and healthy work environment for all employees, promoting equal opportunities and fair treatment.
3. Supporting local communities by promoting volunteerism and providing training and exposures to university students and internship programs and activities, and by partnering with local suppliers and service providers.
4. Maintaining high ethical standards in all aspects of our business, upholding the principles of transparency, integrity, and accountability.
5. Encouraging social responsibility among our suppliers and business partners.

Governance:

We are committed to maintaining strong governance practices that prioritize ethical behaviour, transparency, and accountability. Our governance objectives include:

1. Ensuring compliance with applicable laws and regulations.
2. Maintaining open and transparent communication with our stakeholders, including patients, employees, shareholders, and regulators.
3. Maintaining a diverse and independent board of directors that prioritizes ESG considerations in decision-making.
4. Regularly assessing and monitoring our ESG risks and opportunities.
5. Reporting on our ESG performance and progress towards our ESG objectives.

Conclusion:

We believe that integrating ESG considerations into our operations is not only the responsible thing to do, but also essential to our long-term success. We are committed to continuously improving our ESG performance and reporting on our progress towards our ESG objectives.

Sustainability Policy

At Ucrest Berhad, we recognize the critical role we play in promoting the health and wellbeing of our patients and communities. We are committed to operating in a sustainable and responsible manner, minimizing our environmental impact and promoting social and economic sustainability. To achieve this goal, we have established the following sustainability policy:

Environmental Sustainability:

We are committed to reducing our environmental impact and promoting sustainable practices across our operations. Our objectives include:

1. Reducing our greenhouse gas emissions through the implementation of energy-efficient measures and the use of renewable energy sources.
2. Reducing waste generation and promoting recycling and waste reduction practices.
3. Promoting sustainable transportation practices for our employees, patients, partners and suppliers.
4. Ensuring responsible procurement practices that prioritize environmentally friendly products and services.
5. Managing and reducing the use of hazardous materials and waste.
6. Regularly monitoring and reporting on our environmental performance.

Social Sustainability:

We recognize our social responsibility to our patients, employees, partners and the communities we serve. Our social sustainability objectives include:

1. Providing high-quality healthcare solutions and services that prioritize patient safety and satisfaction.
2. Fostering a safe and inclusive workplace that values diversity, equity, and inclusion.
3. Ensuring fair and ethical treatment of our employees, including providing competitive compensation and benefits packages.
4. Supporting our local by promoting volunteerism and providing training to medical service providers, exposures to university students and internship programs and activities, and by partnering with local suppliers and service providers.
5. Encouraging social responsibility among our suppliers and business partners.

Economic Sustainability:

We are committed to operating in a financially sustainable manner, creating long-term value for our stakeholders. Our economic sustainability objectives include:

1. Ensuring responsible financial management and governance practices.
2. Identifying and managing financial risks and opportunities.
3. Promoting sustainable business practices that contribute to long-term profitability and growth.
4. Creating value for our stakeholders through the provision of high-quality healthcare solutions.

Conclusion:

We believe that sustainable and responsible healthcare operations are essential to our long-term success and the health and wellbeing of our patients and communities. We are committed to continuously improving our sustainability performance and reporting on our progress towards our sustainability objectives.

Data Protection and Privacy Policy

At UCrest Berhad, we are committed to protecting the privacy and security of our patients’ personal data. We understand the importance of this data to our patients and we take our responsibilities to protect it seriously. To achieve this, we have established the following data protection and privacy policy:

1. Data protection:
   • We will comply with all relevant data protection laws and regulations, including the General Data Protection Regulation (GDPR) and the Health Insurance Portability and Accountability Act (HIPAA).
   • We will implement appropriate technical and organizational measures to protect the confidentiality, integrity, and availability of our patients’ personal data.
   • We will regularly review and update our data protection policies and procedures to ensure they remain effective.
2. Privacy:
   • We will obtain our patients’ consent before collecting, using, or sharing their personal data.
   • We will only collect personal data that is necessary for the purposes for which it is being processed.
   • We will only use our patients’ personal data for the purposes for which it was collected and will not share it with third parties except where necessary or where we have obtained explicit consent.
3. Security:
   • We will implement appropriate security measures to prevent unauthorized access to our patients’ personal data.
   • We will ensure that our employees and contractors are trained in data protection and security best practices.
   • We will regularly review and test our security measures to ensure they remain effective.

By implementing these policies and procedures, we aim to protect the privacy and security of our patients’ personal data and to comply with all relevant data protection laws and regulations.

---

i-MEDIC PRIVACY STATEMENT

Version 1.0 – April 2020
i-Medic is an mobile application (“i-Medic”) developed by UCrest Berhad (“UCrest”) and this i-Medic Privacy Statement is to inform you of how your Personal Data are being stored and handled by i-Medic.
i-Medic is designed as a stand-alone mobile application that that primarily stored your personal data (such as your username, personal data, measurement data, and etc hereinafter jointly referred to as “Personal Data”) in our cloud server. i-Medic automatically provide
UCrest and/or any of its affiliated companies shall not collect, store, maintain or process any of your Personal Data if you explicitly choose not to. However, in order to provide you with optimal user experience and connectivity options, i-Medic does . Note that such sharing or transferring of your Personal Data is only available if you explicitly choose to do so. UCrest, whilst offering the option to connect to third party application, shall not be responsible for the safeguarding, security and proper processing of your Personal Data by such third party applications. Any such transfer or third party processing of your Personal Data shall be governed by such third party’s privacy terms policy, terms and conditions or otherwise. By opting to share with a third party application or transfer your data to such third party, you explicitly acknowledge that UCrest shall not be responsible for the processing of the Personal Data by such third party and you agree that UCrest excludes any and all liability for losses or damages caused by such third party’s processing of your Personal Data.
In case you wish to delete your Personal Data from your mobile device, you should uninstall the i-Medic.
If you have any concerns, questions, comments and requests about this i-Medic Privacy Statement, then please contact us through email to:  info@ucrest.net or by regular mail to: UCrest Berhad, Lot 6.04 KPMG Tower, 8 First Avenue, Bandar Utama, 47800 Petaling Jaya, Selangor, D.E.

UCrest Privacy and Cookie Policy (“Policy”)

UCrest Berhad (“we” or “UCrest”) are committed to protecting and respecting the privacy of any person who makes use of . This Policy (together with our terms of use and any other documents referred to in it) sets out what (kind of) information we collect from you or that you provide to us, how it is processed, with whom it may be shared and what choices you have regarding the use of your information. By clicking on the “I Accept” button or accessing any part of the i-Medic, you hereby accept and consent to the processing and transfer of your personal data by UCrest in accordance with the terms of this Policy in full.

What information we may collect from you

We may collect and process the following :

• Information that you provide by filling in forms on the i-Medic such as your name, address, gender, date of birth, height, weight, national identity information and contact details. For doctor module application, we also collect data such as working experience, professional registration detail with the authority, location tagging, education background, awards attained and short biography. This includes information provided at the time you register to use i-Medic. We may also ask you for your information when you enter a competition or promotion sponsored by UCrest, and when you report a problem with i-Medic.
• If you contact us, we may keep a record of that correspondence. We may also ask you to surveys that we use for research purposes, although you do not have to respond to them.
• Details of your access to i-Medic and the resources that you access.
• Details about your devices, including where available your IP address, mobile device information, operating system and browser type, for system administration.

Provision of your personal data to us is voluntary. However, if you do not provide us with the required data, you may not be able to use certain functions of i-Medic and we may not be able to provide you with certain services which you have requested.
Our cloud application or services uses cookies to distinguish you from other users. A cookie is a small file that is sent together with pages of the application and stored by your web browser on the local device. If a cookie has been stored, the information contained therein can be sent back to our servers during your next visit. This helps us to provide you with a good experience when you use our i-Medic application and also allows us to improve it.
Through the i-Medic Application, a analytic code is placed by Google as part of its ‘Analytics’ service. We use this service to monitor how visitors use the i-Medic. Google might provide such information to third parties to comply with statutory legal obligations or to third parties who process such information on behalf of Google.
The information gathered by Google will be made anonymous as much as possible. The information will be transferred to the United States and saved on servers in the United States. Google has indicated to comply with the Safe Harbor principles and joined the Safe Harbor Program of the U.S. Department of Commerce.
We will use Apple’s HealthKit APIs to read and/or write certain data to the Health App Database on your device (the “Health Data”). Such information may include:
• Weight
• Body Mass Index
• Heart Rate
• Blood Pressure
• Sleep Analysis
• Mindful Minutes
• VO2 max
We will use your Health Data to show you details of your activities in this app.
We will not use your Health Data for marketing or advertising purposes. Your Health Data will be accessed locally through the HealthKit and will not be stored or cached by the app. Your Health Data will not be sent to our server. This app cannot read from or write to the Health App Database without your consent.

Responsibility for data provided to us

i-Medic is owned and operated by UCrest Berhad. All the data you provide us through the i-Medic will be held in a database maintained by UCrest Berhad.  Where we have given you (or where you have chosen) a password which enables you to access certain parts of the i-Medic, you are responsible for keeping this password confidential.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our cloud server; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorized access.

Uses made of the information

We may use information held about you in the following ways:

• To ensure that content from the cloud server is presented in the most effective manner for you and for your local devices.
• To provide you with information, products or services that you request from us or which we feel may interest you, where you have consented to be contacted for such purposes.
• To carry out our obligations arising from any contracts entered into between you and us.
• To allow you to participate in interactive features of our service, when you choose to do so.
• To notify you about changes to our service.
• To respond to your queries.
• To ensure compliance with company policies, regulatory obligations and applicable laws whether within or outside Malaysia.

Unless you have indicated otherwise, we may also use your data to provide you with information about goods and services which may be of interest to you and we may contact you about these.

Disclosure of your information

Your personal data may be transferred and disclosed to and processed by our affiliated companies for the purposes of sending you promotional information about our products or services. We may transfer and disclose your personal data to any member of the UCrest group, including, but not limited to, our affiliated company and its subsidiaries for the purposes described herein. In addition, your personal data may also be disclosed to our distributors and/or service providers in order for us to perform our contractual obligations.
We may disclose your personal data to third parties:

• In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
• If UCrest or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
• If we are under a duty to disclose or share your personal data in order to comply with any legal obligation whether within or outside Malaysia.

Your rights

• If you wish to access, correct and supplement the personal data that UCrest holds about you or wish to limit the processing of your personal data or if you wish to make any inquiries or complaints in respect of your personal data, or register an objection in connection with your particular personal circumstances or if you would like to unsubscribe from any UCrest mailing list, please contact us by using the contact details at the bottom of this Policy.
• Subject to any exceptions under applicable laws, UCrest will honor your request or objection, or inform you as to whether and, if so, to what extent it is complying therewith within 21 days after we receive such request or objection.
• UCrest reserves the right to impose a fee for access of your personal data in the amounts as permitted under law.
• To prevent misuse we might ask you to adequately identify yourself

Personal data from minors and other individuals

• UCrest does not knowingly collect personal data from individuals under 18 years of age. As a parent or legal guardian, please do not allow the minor under your care to submit personal data to us. In the event that such personal data is provided to us, you hereby consent to the processing of the minor’s personal data and personally accept and agree to be bound by this privacy policy and take responsibility for his or her actions.
• In some circumstances you may have provided personal data relating to other individuals (such as your spouse, family members or friends) and in such circumstances you represent and warrant that you are authorised to provide their personal data to UCrest and you have obtained their consent for their personal data be processed and used in the manner as set forth in this Policy.

Changes to our privacy policy

• UCrest may revise this Policy at any time at its own discretion by updating this posting. You should check the i-Medic and our official website from time to time to review the then current privacy policy.

Contact

• Questions, complaints, comments and requests regarding this Policy are welcomed and should be addressed to:
  Customer Support
  Email:  info@ucrest.net
  Address: UCrest Berhad, Lot 6.04 KPMG Tower, 8 First Avenue, Bandar Utama, 47800 Petaling Jaya, Selangor.
  Telephone No.: +603 7729 3300
• In the event of any conflict between the English and other language versions of this Policy, the English version shall prevail.