Patient Registration

Choose your Language:

Enter the Hospital/Clinic code:

Verify

Already Enroled? Take me to Login

Consent
Personal Details
Confirmation
Verification

BC/FRM/2025-JUN/FA-11450706

Privacy Notice and Informed Consent Form (ICF) for HOPE Patient Assistance Program (PAP)

We, Novartis Corporation (Malaysia) Sdn. Bhd. ("Novartis"), together with Novartis' affiliated companies, are responsible for processing your personal information for the HOPE Patient Assistance Program (PAP) ("Program") as the 'Data Controller' (previously known as 'data user'), we decide why and how we do this.

This Program is being managed by DKSH Distribution Malaysia Sdn. Bhd. ("DKSH"), a duly appointed administrator of the Program ("Program Administrator") appointed by Novartis. DKSH's employees and/or agents shall handle your Personal Data (as Data Processor), which is processed in accordance with applicable privacy laws and Novartis privacy/data protection standards.

You will be notified if the administrator of the Program changes and your Personal Data will continue to be protected with equivalent safeguards. For purposes of this Informed Consent Form ("ICF"), the term 'Program Administrator' shall include DKSH and/or any other party designated by Novartis as administrator of the Program.

Please read this Privacy Notice ("Notice") carefully as it contains important information about how Novartis process information that relates directly or indirectly to you ("personal data") and explains your rights with respect to the processing of your personal information.

Participation in this Program is voluntary.

Program Details: This Program is an exclusive service offered by Novartis for doctors to enhance care to patients taking Kryxana® in combination with an aromatase inhibitor for the treatment of pre/perimenopausal or postmenopausal women, or in men, with hormone receptor (HR)-positive, human epidermal growth factor receptor 2 (HER2)-negative advanced or metastatic breast cancer, as initial endocrine-based therapy; or in combination with fulvestrant for the treatment of postmenopausal women or in men with HR-positive, HER2-negative advanced or metastatic breast cancer, as initial endocrine-based therapy or following disease progression on endocrine therapy.

Patients who have purchased nineteen (19) boxes of Kryxana® 200mg (63 tablets) from the private sector in Malaysia are eligible to receive complimentary Kryxana® 200mg (63 tablets) for life, unless they decide to discontinue from the Program or are deemed ineligible by their treating physician. The complimentary Kryxana® may be redeemed in quantities of one (1) to three (3) boxes per round, with or without Femara® 2.5mg (30 tablets), based on the physician's discretion.

Patient eligibility: This Program is strictly only for patients who have already been prescribed to use Kryxana® (Ribociclib succinate) 200mg tablet, by their treating doctor. Once you have been examined by a doctor and deemed to eligible and benefit from this Program, your physician will enrol you into this Program.

Patients are required to submit proof of purchase for Kryxana® 200mg (63 tablets). Only proof of purchase dated within 2 months prior to enrolment will be accepted. The proof of purchase must include the following information:

(i) Patient's Name
(ii) Medication Name and Purchase Quantity
(iii) Invoice / Receipt Date
(iv) Invoice / Receipt Number
(v) Hospital / Pharmacy Name

It is advisable to submit all proof of purchase within 3 months from the date of purchase to avoid rejection. Any other requests will be subject to approval.

Patient Deactivation – Patients who remain inactive for more than 12 months will be automatically deactivated from the Program. Reactivation is required should the account be deactivated.

Program Discontinuation – To discontinue your participation in the Program, you may contact DKSH using the contact details provided herein or you may click the 'Program Discontinuation' button in DKSH PSPhere. A DKSH Patient Solutions Executive will respond with confirmation of your discontinuation within 3 working days and your doctor will be notified of your withdrawal from the Program.

Enrolment Process:

1. To join this Program, you are required to accept the terms and complete this Enrolment and Informed Consent Form ("Form").

2. New patient enrolment runs from 1st June 2021 – 1st September 2027. Decision of continuing, terminating or extending the new patient enrolment lies with Novartis. In this case, the Program Administrator will notify you.

3. Notwithstanding the period proposed herein or anything to the contrary, Novartis reserve the right to amend, withdraw or terminate all or any part of Program or your participation at any time for any reason provided always that a two (2) months' written prior notice shall be given. This clause shall not, in any way, affect the rights and benefits of any patient who enrolled in this Program prior to the said amendment and/or termination. To avoid any confusion, the patient who enrolled into this Program will continue to enjoy his/her rights and benefits until the patient decided to discontinue or until the patient is no longer eligible in this Program.

4. Novartis and the Program Administrator reserves the right to disqualify you from participating in this Program in case of any misuse of this Program and/or if you breach any terms and conditions contained herein.

5. You agree that this Program does not take effect and is not intended to take effect as an incentive or reward for past, present or future willingness to recommend, endorse, authorize, approve, purchase or supply any Novartis product or as an incentive to grant an interview for any sales or marketing purpose.

6. Novartis may disclose publicly and/or to any authorities regarding the Program if required under applicable laws and regulations.

7. Patients enrolled in the HOPE Patient Support Program shall not be eligible to receive any additional discounts, rebates, or financial assistance schemes other than the benefits defined in the HOPE Patient Support Program.

Purpose of Processing Personal Information:

We will collect and use your personal information for the following purpose:

1. For your successful enrolment in the Program.

2. To communicate with you for the fulfilment of Program operations.

3. To facilitate communication between stakeholders.

4. To meet requests from health authorities or regulatory obligations regarding reporting and managing adverse events. If you report an undesirable incident, please refer to our Privacy Notice for processing of personal data for the purpose of patient safety, medical information and quality, available here. (https://www.novartis.com/my-en/privacy-notice-individuals-involved-adverse-event-medical-information-query-or-product-complaint).

5. To perform verification of the source documents for the mentioned Program.

6. Provision of Program's services (E.g., sharing Program benefits, disease counselling, periodic reminders on medication, sharing educational content, dispensation and delivery of the medicines when ordered and as applicable among other services (collectively "Services")).

7. To respond to questions or requests you may have.

8. Gaining your insights or seek your feedback regarding the Program.

9. Meeting any legal or regulatory requirements relating to our provision of services and products and to make disclosure under the requirements of any applicable law, regulation, direction, court order, by-law, guideline, circular and/or code applicable to us.

10. To conduct analyses for commercial, research, audit, review and monitoring purposes by using only anonymized data.

Processing Your Personal Information:

For the purposes listed above, we will collect the information from you or you as patient's caregiver as specified in this consent form for the purpose of this Program.

i. From Patient: Name, Contact Details (Email Address, Mobile Number)
ii. From Patient's Caregiver (Optional): Caregiver's Name and Contact Details (Email Address, Mobile Number)

Please provide the other individual's personal data requested above on behalf of him/her. Please be reminded that you shall be responsible to ensure the respective other individual had consented for their personal data to be provided and processed for the Purpose of the Program.

Your personal data may be collected via the following means: digital enrolment through the Program portal.

Processing of Your Personal Information by Program Administrator:

The Program Administrator will process your information as agreed with Novartis through a written contract and implement all necessary controls to safeguard your personal information in its systems or environment.

The Program Administrator is responsible for the implementation and execution of the Program. During the Program, The Program Administrator will perform the following tasks, including but not limited to:

(i) Register patients who enrol in the Program.
(ii) Manage and review submitted receipts to ensure completeness and accuracy.
(iii) Report any adverse events or product technical complaints identified during the Program to Novartis. These will be submitted to the local Health Authority by Novartis, if required.
(iv) Provide the "DKSH PSPhere" online platform for HCPs and patients to register and maintain Program related information.

The Program Administrator may contact you by phone or email during your participation in the Program, if necessary. HOPE Program Administrator: hopepap@dksh.com | Program Administrator's DPO: my.dpo@dksh.com

Sharing Your Information with Other Recipients:

The Program Administrator may share your details with the following service providers to support the management of the program:

(i) NICE inContact
(ii) Any other party to whom you authorize us to disclose your Personal Data to via written request.

Only the people involved in these activities will have access to your information. By law, these people and organizations must protect the confidentiality and security of your information.

The Program Administrator will only share Anonymized or Aggregated data with Novartis. Only for Pharmacovigilance and monitoring of the Program, Novartis, may have access to a unique Patient Identifier Number (PIN) of all the patients enrolled into this Program. No other parties besides Novartis Employees, authorised third parties or Program Administrators, third parties authorised by the program administrator for the purpose of this program will have access to/share/disclose your information.

Your information may be processed in, accessed from, or stored in a different country from the one you are located in. In the event Novartis requires this and the other country does not have the same level of legal protection for your data, we will make sure your information is protected as required by the law where you are located. We will do this by using 'binding corporate rules' and 'standard contractual clauses' - for more information about these, email us at the address: my.dpo@dksh.com or Novartis Data Privacy at my.cdpo@novartis.com.

Storing Your Information:

1. All personal data recorded through and for the Program shall be retained until all the Purposes have been fulfilled. Such data may be used for generating physical and/ or digital statistical or analytical report, monitoring and regulatory purposes by the Company, third party service provider vendors, outsourced personnels, affiliates, and subsidiaries. De-identified, aggregated, or anonymized data may continue to be used as described above.

2. Notwithstanding the above, in case of Adverse Events, all pharmacovigilance data and documents relating to individual registered medicine products must be retained for the product lifecycle and for at least an additional 10 years after the product is deregistered to comply with the regulatory requirements.

3. This period is known as the retention period. We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with legal or regulatory requirements.

4. When this period expires, your personal data is removed from our active systems.

5. Please take note that your personal data may be stored in cloud-based services owned and operated by DKSH, physically located in Singapore.

Protecting Your Information:

The Program Administrator has taken appropriate measures in place to provide an adequate level of security and confidentiality to personal information as required under Malaysia Personal Data Protection Act. These measures will protect your information against accidental or unlawful destruction or alteration, accidental loss, unauthorized access or sharing, and any unlawful forms of processing.

Data Subject Right:

You may exercise the following rights under the conditions and within the limits set forth in the law:

1. The right to access your personal data as processed by Data Controller and its authorized third party and, if you believe that any information relating to you is incorrect, obsolete or incomplete, to request its correction or updating.

2. The right to request the erasure of your personal data or the restriction thereof to specific categories of processing.

3. The right to withdraw your consent at any time, without affecting the lawfulness of the processing before such withdrawal and subsequent data retention in accordance with applicable local law [Note: Withdrawing consent will result in termination of participation in the Program and its Services and no new personal data will be collected].

4. The right to object, in whole or in part, to the processing of your personal data; and

5. The right to request its portability, i.e. that the personal data you have provided to us be returned to you or transferred to the person of your choice, in a structured, commonly used and machine-readable format without hindrance from us and subject to your confidentiality obligations.

6. Right to Prevent Processing likely to cause damage or distress.

7. Right to Prevent Processing for Direct Marketing purpose; and

8. Right to File a Complaint with the competent data protection authorities.

If you have a question or want to exercise the above rights, you may send an email to: DKSH Distribution Malaysia Sdn. Bhd. data privacy practice: my.dpo@dksh.com.

If you wish to learn more about DKSH's privacy notice, please contact the DKSH Data Protection Officer at my.dpo@dksh.com.

Please note that you are required to provide Personal Data to participate in the Program and it will be necessary for the Personal Data to be processed for the Purposes, without which you will not be able to participate in the Program.

Malay Translation:

Nama dan Tujuan Program: HOPE Patient Assistance Program (PAP) ("Program") adalah perkhidmatan eksklusif yang ditawarkan oleh Novartis kepada para doktor untuk menambah baik penjagaan pesakit yang mengambil Kryxana® dengan kombinasi perencat aromatase untuk rawatan wanita pra/perimenopaus atau postmenopaus atau lelaki yang menghidap kanser payudara reseptor hormon (HR)-positif, reseptor faktor pertumbuhan epidermal manusia 2 (HER2)-negatif peringkat lanjutan atau metastatik sebagai terapi awal berasaskan endokrin; atau dengan kombinasi fulvestrant untuk rawatan wanita postmenopaus atau lelaki yang menghidap kanser payudara HR-positif, HER2-negatif peringkat lanjutan atau metastatik sebagai terapi awal berasaskan endokrin atau selepas berlakunya perkembangan penyakit ketika menggunakan terapi endokrin.

Tujuan Pemprosesan Maklumat Peribadi:

Kami akan mengumpul dan menggunakan maklumat peribadi anda untuk tujuan berikut:

1. Menguruskan pendaftaran anda dalam program ini.

2. Berkomunikasi dengan anda.

3. Memudahkan komunikasi antara pihak berkepentingan.

4. Memenuhi permintaan daripada pihak berkuasa kesihatan atau kewajipan peraturan mengenai laporan dan pengurusan kejadian buruk. Jika anda melaporkan kejadian yang tidak diingini, sila rujuk Notis Privasi kami untuk pemprosesan data peribadi bagi tujuan keselamatan pesakit, maklumat perubatan dan kualiti, yang boleh didapati di sini (https://www.novartis.com/my-en/privacy-notice-individuals-involved-adverse-event-medical-information-query-or-product-complaint).

5. Melakukan pengesahan dokumen sumber untuk program yang disebutkan.

6. Berkongsi perkhidmatan Program (contohnya, berkongsi manfaat program, kaunseling penyakit, peringatan berkala mengenai ubat, berkongsi kandungan pendidikan, pengeluaran dan penghantaran ubat apabila dipesan dan jika berkenaan antara perkhidmatan lain (secara kolektif "Perkhidmatan"));

7. Menjawab soalan atau permintaan yang mungkin anda ada.

8. Mendapatkan pandangan anda atau meminta maklum balas anda mengenai Program.

9. Memenuhi keperluan undang-undang atau peraturan yang berkaitan dengan penyediaan perkhidmatan dan produk kami serta membuat pendedahan di bawah keperluan mana-mana undang-undang, peraturan, arahan, perintah mahkamah, peraturan kecil, garis panduan, pekeliling, kod yang terpakai kepada kami.

10. Menjalankan analisis untuk tujuan komersial, penyelidikan, audit, semakan dan pemantauan dengan hanya menggunakan data yang dianonimkan.

Kami hanya akan memproses data peribadi anda dalam tujuan yang dimaksudkan untuk Program ini dan seperti yang dibenarkan oleh undang-undang untuk tujuan tersebut setelah kami mendapat kebenaran anda terlebih dahulu. Tiada data peribadi yang akan digunakan untuk pemasaran langsung.

Pemprosesan Maklumat Peribadi Anda:

Untuk tujuan yang disenaraikan di atas, kami akan mengumpul maklumat berikut daripada anda di bawah program ini:

(i) Daripada pesakit: Nama, Maklumat Hubungan (Alamat Emel, Nombor Telefon Bimbit)
(ii) Daripada Penjaga Pesakit (Pilihan): Nama, Maklumat Hubungan Penjaga Pesakit (Alamat Emel, Nombor Telefon Bimbit)

Sila berikan data peribadi individu lain yang diminta di atas bagi pihaknya. Sila diingatkan bahawa anda bertanggungjawab untuk memastikan individu lain tersebut telah memberikan persetujuan untuk data peribadi mereka diberikan dan diproses untuk Tujuan Program.

Data peribadi anda mungkin dikumpulkan melalui cara berikut: pendaftaran digital melalui portal Program.

Pemprosesan Maklumat Peribadi oleh Pentadbir Program

Pentadbir Program akan memproses maklumat anda seperti yang dipersetujui dengan Novartis melalui kontrak bertulis dan melaksanakan semua kawalan yang diperlukan untuk melindungi maklumat peribadi anda dalam sistem atau persekitarannya.

Pentadbir Program bertanggungjawab untuk pelaksanaan dan pelaksanaaan Program ini. Sepanjang tempoh Program, Pentadbir Program akan melaksanakan tugas-tugas berikut, termasuk tetapi tidak terhad kepada:

(i) Mendaftarkan pesakit yang menyertai Program.
(ii) Mengurus dan menyemak resit yang dihantar untuk memastikan maklumat lengkap dan tepat.
(iii) Melaporkan sebarang kejadian buruk atau aduan teknikal produk yang dikenal pasti sepanjang Program kepada Novartis. Novartis akan mengemukakan laporan tersebut kepada Pihak Berkuasa Kesihatan tempatan, sekiranya diperlukan.
(iv) Menyediakan platform atas talian "DKSH PSPhere" untuk doktor dan pesakit mendaftar serta menyelenggara maklumat berkaitan Program.

Pentadbir Program mungkin akan menghubungi anda melalui telefon atau e-mel sepanjang penyertaan anda dalam Program, sekiranya perlu.

Pentadbir Program HOPE: hopepap@dksh.com | DPO Pentadbir Program: my.dpo@dksh.com

Perkongsian Maklumat Anda dengan Penerima Lain:

Pentadbir Program mungkin akan berkongsi butiran anda dengan penyedia perkhidmatan lain untuk menyokong pengurusan program ini. Berikut adalah senarai penyedia perkhidmatan lain yang akan mempunyai akses kepada maklumat anda:

(i) NICE inContact
(ii) Pihak lain yang anda beri kuasa kepada kami untuk mendedahkan Data Peribadi anda melalui permintaan bertulis

Hanya individu yang terlibat dalam aktiviti ini yang akan mempunyai akses kepada maklumat anda. Mengikut undang-undang, individu dan organisasi ini mesti melindungi kerahsiaan dan keselamatan maklumat anda.

Pentadbir Program hanya akan berkongsi data yang dianonimkan atau agregat dengan Novartis. Tiada pihak lain selain Kakitangan Novartis, pihak ketiga yang diberi kuasa atau Pentadbir Program, pihak ketiga yang diberi kuasa oleh pentadbir program untuk tujuan program ini akan mempunyai akses kepada/membahagi/menyebarkan maklumat anda.

Maklumat anda mungkin diproses di, diakses dari, atau disimpan di negara yang berbeza dari negara tempat anda berada. Sekiranya Novartis memerlukan ini dan negara lain tidak mempunyai tahap perlindungan undang-undang yang sama untuk data anda, kami akan memastikan maklumat anda dilindungi seperti yang diperlukan oleh undang-undang di lokasi anda. Kami akan melakukan ini dengan menggunakan 'peraturan korporat mengikat' dan 'klausa kontrak standard' - untuk maklumat lanjut tentang ini, hantarkan emel kepada alamat: my.dpo@dksh.com atau Privasi Data Novartis di my.cdpo@novartis.com.

Penyimpanan Maklumat Anda:

1. Semua data peribadi yang direkodkan melalui dan untuk Program akan disimpan sehingga semua Tujuan dipenuhi. Data tersebut boleh digunakan untuk menghasilkan laporan statistik atau analitik fizikal dan/atau digital, pemantauan dan tujuan peraturan oleh Syarikat, penyedia perkhidmatan pihak ketiga, vendor, kakitangan luar, afiliasi, dan anak syarikat. Data yang dianonimkan, digabungkan, atau dide-identifikasi mungkin terus digunakan seperti yang diterangkan di atas.

2. Walau bagaimanapun, dalam kes Kejadian Buruk, semua data farmakovigilans dan dokumen yang berkaitan dengan produk ubat yang didaftarkan individu mesti disimpan untuk kitaran hayat produk dan sekurang-kurangnya tambahan 10 tahun selepas produk itu dikeluarkan untuk mematuhi keperluan peraturan.

3. Tempoh ini dikenali sebagai tempoh penyimpanan. Kami menyimpan data peribadi anda hanya untuk tempoh yang diperlukan untuk memenuhi tujuan ia dikumpulkan atau untuk mematuhi keperluan undang-undang atau peraturan.

4. Apabila tempoh ini tamat, data peribadi anda akan dipadamkan dari sistem aktif kami.

5. Sila ambil perhatian bahawa data peribadi anda mungkin disimpan dalam perkhidmatan berasaskan awan yang dimiliki dan dikendalikan oleh DKSH, yang terletak secara fizikal di Singapura.

Melindungi Maklumat Anda:

Pentadbir Program telah mengambil langkah yang sesuai untuk menyediakan tahap keselamatan dan kerahsiaan yang mencukupi kepada maklumat peribadi seperti yang diperlukan di bawah Akta Perlindungan Data Peribadi Malaysia. Langkah-langkah ini akan melindungi maklumat anda daripada kemusnahan atau perubahan yang tidak sengaja atau tidak sah, kehilangan yang tidak sengaja, akses atau perkongsian yang tidak dibenarkan, dan sebarang bentuk pemprosesan yang tidak sah.

Hak Subjek Data:

Anda boleh melaksanakan hak berikut mengikut syarat dan had yang ditetapkan dalam undang-undang:

1. Hak untuk mengakses data peribadi anda yang diproses oleh Pengguna Data dan pihak ketiga yang dibenarkan dan, jika anda percaya mana-mana maklumat yang berkaitan dengan anda adalah salah, lapuk atau tidak lengkap, untuk meminta pembetulan atau kemas kini.

2. Hak untuk meminta pemadaman data peribadi anda atau mengehadkannya kepada kategori pemprosesan tertentu.

3. Hak untuk menarik balik kebenaran anda pada bila-bila masa, tanpa menjejaskan kesahihan pemprosesan sebelum penarikan balik tersebut dan penyimpanan data seterusnya mengikut undang-undang tempatan yang terpakai [Nota: Menarik balik kebenaran akan mengakibatkan penamatan penyertaan dalam Program dan Perkhidmatannya dan tiada data peribadi baru akan dikumpulkan];

4. Hak untuk membantah, sepenuhnya atau sebahagian, pemprosesan data peribadi anda; dan

5. Hak untuk meminta pemindahan data, iaitu data peribadi yang anda berikan kepada kami dikembalikan kepada anda atau dipindahkan kepada individu pilihan anda, dalam format yang terstruktur, lazim digunakan dan boleh dibaca mesin tanpa halangan daripada kami dan tertakluk kepada kewajipan kerahsiaan anda.

6. Hak untuk Menghalang Pemprosesan yang berkemungkinan menyebabkan kerosakan atau kesulitan;

7. Hak untuk Menghalang Pemprosesan untuk tujuan Pemasaran Langsung; dan

8. Hak untuk Memfailkan Aduan dengan pihak berkuasa perlindungan data yang kompeten.

Jika anda mempunyai sebarang soalan atau ingin melaksanakan hak di atas, anda boleh menghantar e-mel ke: Amalan privasi data DKSH Distribution Malaysia Sdn. Bhd.: my.dpo@dksh.com.

Jika anda ingin mengetahui lebih lanjut mengenai notis privasi DKSH, sila hubungi Pegawai Perlindungan Data DKSH di my.dpo@dksh.com.

Sila ambil perhatian bahawa anda dikehendaki menyediakan Data Peribadi untuk menyertai Program ini dan pemprosesan Data Peribadi tersebut akan diperlukan untuk Tujuan yang dinyatakan, tanpa yang mana anda tidak akan dapat menyertai Program ini.

Consent and Attestation:

By clicking the 'Agree' button, you are declaring that you have read, understood, agreed and consented to the terms above and you further certify that:

1. You have read and understood the Privacy Notice (this document).

2. You authorize Novartis and the Program Administrator together with its affiliates and authorized third parties to collect and process your personal data for the Purpose and manner stated in this Form.

3. You agree to be enrolled in HOPE Patient Assistance Program (PAP) which is sponsored by Novartis and managed by the Program Administrator.

4. You authorize the Program Administrator to collect and process your personal data for the Purpose and manner stated in this Form and as defined by the Data Controller.

5. You declare that all the information you have given below, and will give in the future, is complete, true and accurate.

6. You are aware that if it becomes evident that you have provided false information, you may be excluded from the Program.

7. You agree to immediately inform the Program Administrator should you later learn of any inaccuracies, or should there be significant changes, in the Personal Data submitted.

8. You allow your treating doctor to release your personal health information related to your treatment with Novartis products in scope (please refer to above Drug in Scope in the Name & Purpose of the program section), if required.

9. You allow to be contacted by the Program Administrator for matters relating to the Program.

10. You agree to comply with the Program guidelines and understand that Novartis, at its sole and absolute discretion, reserves the right to modify or discontinue the Program at any time.

11. You have been given the opportunity to ask questions about this Program and get clarifications with respect to this Form.

12. You understand that your participation is voluntary, and you may withdraw at any time.

BC/FRM/2025-JUN/FA-11450706

Clinic and Treating Doctor Information:

Hospital/Clinic Name (non-editable):

Treating Doctor's name: *

Personal Information:

Patient's Name: *

Email: *

Mobile Number: *

I am a caregiver signing up on behalf of the Patient because the Patient does not have an email address/mobile number

Caregiver Information: (Optional)

Caregiver 1 Name:

Caregiver 1 Email:

Caregiver 1 Number:

Caregiver 2 Name:

Caregiver 2 Email:

Caregiver 2 Number:

*= Mandatory

Hospital/Clinic Name:

Treating Doctor's name:

Patient's Name:

Email:

Mobile Number:

Please enter the 6-digit verification code we sent via SMS:

Didn't receive the code?

Password Creation

Password: *

Confirm Password: *

Password must be at least 8 characters long, with at least one number and a special symbol(! @ # $ % .),one capital letter, one small letter and begin with an alphabet.

HOPE Patient Assistance Program is operated by DKSH Distribution Malaysia Sdn Bhd. (“DKSH”). At DKSH, we are committed to respecting and safeguarding your privacy by handling your personal data responsibly and in accordance with applicable laws. By accessing or using the Program service offerings and features on https://login.hopepap.com.my (the “Site”), and any components that support the functionality of the services (the “Services”), as further defined in our Terms and Conditions https://login.hopepap.com.my, you expressly consent to the collection, processing, use and disclosure of your personal data according to this Privacy Policy. DKSH may share your personal data with our affiliates, group companies, subsidiaries and other authorized third parties solely for the purposes described herein. This Privacy Policy is aimed at giving you transparency about how we collect, use, and keep your personal data safe, and what your rights are under the Personal Data Protection Act 2010 (PDPA).

1. What personal data about you do we collect?

DKSH collects and uses certain types of personal data about you, depending on the relationship that you have with us as well as applicable laws. In order to access the Site and to use Program, you will be asked to provide certain personal data. We may collect the following personal data about you:

Personal data category	Types of personal data
General information	Your full name (including prefixes and suffixes which may indicate your gender); date of birth and age; job information; educational, training, licensing and certification information; professional membership information; marital status; national identification number and passport number; Site account details such as username and online identifiers.
Contact information	Your address, telephone, mobile phone, fax, e-mail, social network information and other relevant contact details, as well as information about the preferred way and time of communication.
Financial information	Information collected in connection with sales and promotional activities; financial information including transaction details, bank and debit/credit card details, payment methods and terms; income and salary information; insurance information and claims history.
Sensitive information	Ethnicity and race; hereditary information and health records including but not limited to your medical history, height, weight, disability, blood type and allergies, drug prescription history, your healthcare professional’s name and contact information; biometric identifiers including but not limited to facial recognition, retina recognition, fingerprint recognition, voice recognition for the purposes of verifying and confirming your identity for the use of our products and services.
Usage information	Information regarding your mobile telephone, your computer, your IP address, the type of Internet browser you are using, the location from which you are visiting the Site, or the areas of the Site you visited and the actions you performed on the Site.
Other information	Information provided in connection with assessing, recording and reporting adverse events; information necessary to provide product recalls and product safety notification; records of sample medicines provided to healthcare professionals; information about your attendance at programs organized or supported by DKSH; information about your interactions with sales representatives; information in relation to complaints that you have made; information about your calendar for appointment scheduling and reminders.

2. How we collect your personal data.

We may collect your personal data through the following methods:

Collection method	Description
Directly from you	Including when you communicate with us over the telephone, in person, through the Site, forms, surveys, or by email; when you make an inquiry, complaint or report an actual or suspected adverse event; when you use our information services; when you attend a DKSH event; when you agree to other specific terms, privacy policies and/or consent forms required by DKSH,
Through your use of the Site	Including through the use of “cookies” that store information on your computer, mobile phone or other device, and though other tracking technologies like tags, pixels, clear pixels, gifs, bugs, beacons, and other similar technologies.
Through third parties	Including from organizations carrying out functions on our behalf such as event management organizations and data analytics organizations; pharmaceutical companies and medical device companies; hospitals and other healthcare service providers or professionals; government authorities and regulators; professional membership bodies; online directories; insurers, banks and financial institutions.

3. Why do we collect, use and disclose your personal data?

We may collect, use and disclose your personal data for the following reasons, and any other reasons which corresponds or are similar to these reasons:

Reason	Description
Provision of the Site	This includes the provision of our services to you based on our contractual obligations, to process and respond to your applications, requests, comments, inquiries, reports, complaints, and other forms you submit through the Site.
Facilitating our interactions with you	This includes maintaining our business relationship by providing you with information related to our products and services, sales and delivery of products, performing any contract with you or as agreed by you. If you are a healthcare professional, we may also use our personal data to provide information to you on educational opportunities relevant to your field, and to invite you to educational events that are relevant to your field.
Managing our relationship	This includes managing our product and service delivery, related financial transactions including invoicing for services, and carrying out quality reporting concerning our products.
Complying with legal requirements and DKSH policies	This includes processing your personal data for income tax and national insurance deductions, record-keeping and reporting obligations, conducting audits, complying with inspections and other requests from law enforcement or other public authorities; ensuring pharmaceutical business and pharmacovigilance compliance; reporting adverse events; responding to legal processes such as subpoenas and court orders; pursuing legal rights and remedies; enforcing or applying our Terms and Conditions and other agreements; defending litigation and managing any internal complaints or claims, etc.
Sale and acquisition	This includes when we become involved in a transaction involving the sale of our assets, such as a merger or acquisition, or if DKSH is transferred to another company, we may disclose and/or transfer your personal data as part of the transaction. If the surviving entity is not DKSH, your personal data may be used pursuant to the surviving entity’s privacy policies, which may be different from this Privacy Policy.
Research and insights	This includes strategic internal research and data analytics. Your personal data may be combined with the information collected from other individuals in order to generate aggregated and anonymized data that does not contain identifying information, for commercial and non-commercial purposes. We also use your personal data to enhance our understanding of our users’ preferences and to improve our Site accordingly.
Other legitimate interests	This includes when such collection, use and disclosure is permitted under the Personal Data Protection Act 2010 (PDPA) such as when it is necessary for the performance of a contract to which you are a party, or in order to take steps as requested by you, when it is for our lawful interests or for other parties’ lawful interests which override your fundamental rights, when it is for the prevention or suppression of danger to a person’s life, body or health, when it is necessary for the completion of our tasks in the public interest, when preparing historical documents or archives for public and education interest or for purposes relating to research or statistics, and for the compliance of applicable laws.

4. Who may have access to your personal data?

We may share, or otherwise disclose your personal data to the following parties:

Parties
Our group companies, business partners and/or other persons that we have a legal relationship with, including our directors, employees, third party contractors, authorized representatives, and advisors. Local and international governmental authorities and/or supervisory or regulatory authorities, credit bureaus, fraud prevention agencies, courts, health authorities, professional organizations or any persons whom we are required or permitted by laws, regulations, or orders to share personal data. Our suppliers, agents and other entities including pharmaceutical companies, medical device companies and health service providers where the disclosure of your personal data has a specific purpose and is done under a lawful basis, including third parties providing services to us. Any relevant persons as a result of activities relating to selling rights of claims and/or assets, restructuring or acquisition of any of our entities, where we may transfer their rights to, and any persons with whom we are required to share data for a proposed sale, reorganization, transfer, financial arrangement, asset disposal or other transaction relating to our business and/or assets held by our business. Insurers, banks, financial institutions, and third parties where required by law. Attorneys, authorized persons or legal representatives who have lawfully authorized power.

Parties

Our group companies, business partners and/or other persons that we have a legal relationship with, including our directors, employees, third party contractors, authorized representatives, and advisors. Local and international governmental authorities and/or supervisory or regulatory authorities, credit bureaus, fraud prevention agencies, courts, health authorities, professional organizations or any persons whom we are required or permitted by laws, regulations, or orders to share personal data. Our suppliers, agents and other entities including pharmaceutical companies, medical device companies and health service providers where the disclosure of your personal data has a specific purpose and is done under a lawful basis, including third parties providing services to us. Any relevant persons as a result of activities relating to selling rights of claims and/or assets, restructuring or acquisition of any of our entities, where we may transfer their rights to, and any persons with whom we are required to share data for a proposed sale, reorganization, transfer, financial arrangement, asset disposal or other transaction relating to our business and/or assets held by our business. Insurers, banks, financial institutions, and third parties where required by law. Attorneys, authorized persons or legal representatives who have lawfully authorized power.

To the extent permitted under applicable laws, we have contracts in place with these parties to ensure that personal data is processed based on our instructions and in compliance with this Privacy Policy and any other appropriate confidentiality and security measures. We only share your personal data with the parties mentioned above and other third parties, as far as this is reasonably necessary for the purposes as outlined in this Privacy Policy. Please note that DKSH companies and subsidiaries, as well as authorities, customers and suppliers to whom we may disclose your personal data, may be located outside of your country of domicile, whose data protection laws may differ from those in the country in which you are located. In such cases, we will ensure that appropriate safeguards are in place to protect your personal data by implementing appropriate legal mechanisms, such as EU Standard Contractual Clauses. For more information, please contact us as described in the section “How to contact us”.

5. How long will your personal data be stored?

DKSH will store your personal data as long as necessary for the purposes outlined in this Privacy Policy, unless a longer or shorter retention period is required or permitted by law.

6. How is your personal data secured?

DKSH has implemented technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss or alteration and unauthorized disclosure or access to your personal data. These measures include training of our personnel who may have access to your personal data.

7. What rights do you have in respect to your personal data?

You can exercise the rights relating to your personal data below:

Your right	Description
Right to withdraw consent	You have the right to withdraw your consent that has been given to us at any time pursuant to the methods and means prescribed by us, unless the nature of consent does not allow such withdrawal. Please note that the withdrawal of consent will not affect the lawfulness of the collection, use, or disclosure of your personal data based on your consent before it was withdrawn.
Right to access and obtain copy	You have the right to access and obtain copy of your personal data held by us, or to request the disclosure of details on how your personal data was acquired, unless we are entitled to reject your request under applicable laws or court orders, or if such request will adversely affect the rights and freedoms of other individuals.
Right to object	You have the right to object to the collection, use or disclosure of your personal data at any time where such personal data was collected, used, or disclosed on a lawful basis, or for the purpose of direct marketing, or for the purpose of scientific, historical or statistic research, unless we have legitimate grounds to reject your request according to applicable laws.
Right to restrict	You have the right to request us to restrict the use of your personal data under certain circumstances, such as when we are processing your request to rectify your personal data.
Right to rectification	You have the right to rectify your inaccurate personal data and to update your incomplete personal data.
Right to lodge a complaint	You have the right to make a complaint with the Personal Data Protection Officer according to the Personal Data Protection Act 2010 (PDPA) if you believe that we are not in compliance with applicable laws.

To exercise any of your rights above, please contact us as described in the section “How to contact us” below. After receiving your proof of identity, we will respond to your requests within one month.

8. Cookies.

The Site uses cookies for your convenience to collect and store information that your browser makes available when you visit the Site, so that you do not have to reenter your data upon each visit. This information includes your IP address, browser type, browser language, and the date and time of your query, which enables us to better understand and improve the usability, performance and effectiveness of the Site. This information is transmitted to and stored on DKSH’s servers in Singapore. If you do not want DKSH to analyze your use of the Site, you can set your browser options to reject cookies or select the privacy mode setting on your individual internet browser. Rejecting cookies or selecting privacy mode may affect your ability to use some features of the Site.

9. Privacy of minors.

DKSH is committed to protecting the privacy of minors. We do not knowingly collect, use or disclose any personally identifiable information from minors under 18 years old. Minors are not permitted to use HOPE Patient Assistance Program. For any minor to access the Site, the parent or legal guardian of that minor must contact us on their behalf. If a minor has provided DKSH with personally identifiable information, the parent or legal guardian of that minor should contact us immediately at hopepap@dksh.com to delete this information from our files.

10. Changes to this Privacy Policy.

DKSH may update this Privacy Policy. We will notify you about significant changes in the way we treat personal data by sending a notice to the primary e-mail address specified in your HOPE Patient Assistance Program account or by placing a notice on the Site.

11. How to contact us?

If you have any questions, comments or concerns about this Privacy Policy, or want to request access to your personal data or exercise your privacy rights, please contact us at:

Contact	Contact information
Data Controller	DKSH Distribution Malaysia Sdn. Bhd. 03 9212 1410 ext. 032 hopepap@dksh.com

Last updated: May 20, 2021.