This article is a little different from the others on our blog. Most of our content addresses specific symptoms, conditions, or scenarios. This one is about us — specifically, about how we protect your medical privacy when you become our patient.
We’ve written this because privacy is one of the most common concerns we hear from patients before they come in, and the answers are often more reassuring than people expect. Rather than asking you to take our word for it, this article walks through the specific ways our privacy practices work — what we do, what we don’t do, and what your rights are throughout the process.
If you’ve been considering coming in but holding back because of privacy concerns, this is the article that should resolve those concerns directly.
Our Core Privacy Principles
Everything we do around privacy is grounded in a few simple commitments:
Your medical records are yours.
Not your spouse’s, not your family’s, not your employer’s, not your insurance company’s. Yours. Access to your records by anyone other than you and your treating clinicians requires your explicit consent. There are no exceptions to this principle in our practice.
Discretion is the default.
We don’t ask intrusive questions in earshot of others. We don’t put up obvious signage that announces what kind of clinic we are. We don’t make calls or send messages that identify your medical concerns. The default mode is discretion; we add visibility only when you specifically request it.
You control your communications.
How we contact you about appointments, results, and follow-ups is your choice. We use the channels you specify — phone, secure message, email, in-person only — and we don’t use channels you haven’t authorised.
Your data is protected by Malaysian law and professional standards.
The Personal Data Protection Act (PDPA) and medical confidentiality regulations apply to everything we hold about you. These aren’t just internal practices — they’re legal protections.
What Happens at Reception
This is often where patient anxiety is highest, so let’s walk through it specifically.
Standard registration covers basics only.
Reception takes name, IC number, contact details, and any payment information needed. They do not ask why you’re visiting in earshot of other patients in the waiting area. Any specific medical concerns are discussed only in the consultation room with the doctor.The waiting area is generic.
Our waiting areas are not visually marked as sexual health clinics. There are no posters announcing what we do that would identify you to other patients. The waiting area looks and functions like any normal medical clinic.Other patients have their own privacy too.
If you’re worried about being recognised by another patient — keep in mind that they have the same privacy as you. Whatever they’re there for, they don’t want to discuss it any more than you do. The mathematical reality is that the chance of running into someone you know is quite low, and if it happens, mutual discretion applies.Reception staff are professionally bound.
Our reception team is trained on confidentiality and bound by professional and legal standards. They don’t discuss patients outside of work, don’t share information with anyone outside the clinic, and treat your visit as routine medical care.
What Happens in the Consultation
The consultation room is where the actual medical care happens. Privacy here is even tighter.
The room is genuinely private.
Closed doors, soundproofing where appropriate, and consultation conducted at normal speaking volumes. Conversations cannot be heard from outside the room.
It’s just you and the doctor (or nurse).
Unless you specifically request someone else to be present, the consultation is one-to-one with the treating clinician. No observers, no extra staff in the room.
Whatever you share stays in the consultation.
Our doctors are professionally bound by medical confidentiality. Information shared in the consultation is used to provide your care and is not discussed outside that context. We don’t share patient stories with friends or family. We don’t post anonymised cases on social media. Confidentiality is real and complete.
You decide how much to share.
We need certain information to provide good medical care, but you control the level of detail. If something is uncomfortable to discuss but isn’t medically necessary, you can decline. If you’d prefer to keep your situation framed in general terms rather than specifics, that’s fine.
How We Handle Your Records
Medical records are stored under specific protections:
Records are kept secure.
Both digital and any physical records are stored with appropriate security — access-controlled systems for digital records, locked storage for any physical documents. Our systems comply with PDPA requirements for sensitive medical data.
Access is limited to those involved in your care.
Only clinicians directly involved in your treatment, plus essential administrative staff (for things like appointment scheduling), have access to your records. We don’t have a culture where staff casually browse patient records.
External sharing requires your consent.
If your records ever need to be shared outside the clinic (for example, if you change healthcare providers and need records transferred), we don’t do it without your explicit consent. You control what gets shared, with whom, and when.
Anonymous testing leaves no name-linked record.
If you choose anonymous HIV testing, the test result is linked to a code rather than your name. Even if someone somehow accessed our database (they can’t without your consent), there would be no record linking your name to the test.
How We Communicate with You
Communication is one of the most common privacy concerns. Here’s how we handle it:
We use the channel you specify.
Phone, WhatsApp, secure email, in-person follow-up only — whatever you prefer. We don’t use channels you haven’t authorised.
We don’t send identifiable physical mail.
Standard practice at our clinic is digital communication. We don’t send physical letters that arrive at your home address with the clinic name visible. If specific physical documentation is needed (rare), we discuss it explicitly with you first.
Voicemails are minimal.
If we need to leave a voicemail, it identifies the clinic only if you’ve specifically authorised that level of detail. Otherwise, voicemails just ask you to call back without identifying who’s calling.
Messages are content-light.
Text messages and other digital communications about your care don’t include detailed medical information unless you’ve authorised that. A typical message might say “Your test results are ready. Please contact us to discuss” rather than “Your HIV test is negative.” You receive the actual medical content in a way that’s appropriate to the privacy level.
Communication preferences can change.
If your situation changes and you need different communication preferences (for example, a partner getting access to your phone), let us know and we’ll adjust.
How We Handle Test Results
Result delivery is structured for privacy:
Results go to you, not to anyone else.
Even if you booked your appointment with help from someone, results are delivered only to you using contact information you’ve provided. We don’t deliver results to a partner, family member, or anyone else without your explicit instruction.
Negative results are quietly delivered.
Most STI tests come back clear. We deliver these results through your preferred channel without making them dramatic. A negative result is just a brief confirmation that you can move on.
Positive results are handled carefully.
If a result needs follow-up, we typically ask you to come in for a brief consultation rather than discussing details over phone or message. This is partly for privacy (more sensitive conversations are best in person) and partly so we can answer questions, discuss treatment, and start any needed care immediately.
You can decline result delivery.
If you’d prefer to come in for results in person rather than receive them remotely, that’s available. Some patients prefer this approach for maximum privacy.
Your Specific Privacy Rights
As a patient at our clinic, you have specific rights that we explicitly support:
The right to anonymous testing where appropriate.
Anonymous HIV testing is available if you specifically request it. Discuss this at your initial visit and we’ll structure your care accordingly.
The right to pay privately.
If you don’t want to use insurance, you can pay for any service privately. This keeps the visit out of insurance records entirely.
The right to specify communication channels.
How and when we contact you is your choice. Tell us your preferences and we’ll follow them.
The right to access your own records.
You can request copies of your medical records at any time. The records are about you and belong to you.
The right to be told what’s happening with your information.
If at any point you have questions about how your information is being handled, just ask. The doctor will give you a clear answer.
The right to revoke consent.
If you’ve previously authorised something (sharing records with another provider, specific communication channels, etc.) and want to change that, you can revoke consent at any time.
What We Don't Do
Sometimes it’s clearer to be specific about things we don’t do, since these are often the actions patients most worry about:
- We don’t contact your spouse, family, or employer about your visit
- We don’t disclose your status to public health authorities except where legally required (which for most STIs is statistical reporting only, with no identifying details)
- We don’t share patient information with insurance companies without your consent
- We don’t post identifiable patient information anywhere — social media, marketing materials, or otherwise
- We don’t have a database that’s accessible to other clinics or healthcare systems by default
- We don’t allow staff to browse patient records they’re not directly involved with
- We don’t sell or share patient data with third parties
- We don’t include identifying information in any external-facing communications about your care
Common Privacy Concerns We Hear
Quick answers to specific concerns we encounter often:
“What if a member of my family works at your clinic?”
If you have a specific concern about a relative who works in healthcare, we can structure your visit to avoid any direct contact with that person. We can also schedule you with a different doctor if needed.
“What if a friend works at the lab where samples are processed?”
Lab samples are processed under sample identification numbers, not names. Lab staff don’t typically know whose sample they’re processing. The privacy structure extends through the entire testing pipeline.
“What if I see someone I know in the waiting area?”
That person has the same privacy as you. Mutual discretion applies. There’s no way for either of you to know what the other is there for, and most patients in this situation simply nod and look at their phones.
“What if my partner asks to come in with me?”
That’s your choice entirely. Many couples come in together. Many patients prefer to come alone. Some bring a partner to the consultation portion but do testing privately. There’s no fixed expectation.
If You're Still Worried
If you’ve read all of this and still have specific privacy concerns, here’s what to do:
Book a consultation specifically about privacy.
Some patients book a brief consultation just to ask questions about how their care would work, without committing to any tests. This is a completely normal kind of visit. The doctor will walk through your specific situation and address whatever concerns you have.
Discuss specific scenarios with us.
If you have a particular privacy situation (specific family circumstances, employment context, insurance considerations), we can talk through how it would be handled. Most situations have practical solutions that are clearer once explained.
Start small.
If full privacy assurance feels difficult to grasp from an article, just come in for a single consultation and see how it actually works. Most patients find that the in-person experience confirms the privacy commitments rather than testing them.
The Bottom Line
At Dr Prevents, your medical privacy is real and protected through specific, deliberate practices — not just legal compliance. We’ve built our clinic to make sexual health care feel safe and confidential, because we know that’s often the determining factor in whether patients seek care at all.
Whatever specific privacy concern has been on your mind, there’s almost certainly a practical answer to it. The first step is just walking in. Once you do, the rest is something we handle for you.
📞 Your privacy. Our priority. Walk in with confidence. 🩺