DRMS™ (Discover, Records, Monitoring & Solutions) is a healthcare and prevention system developed by HTM Pharmacy to support Malaysians in achieving better health, longer lifespan, and improved wellbeing.
At HTM Pharmacy, your privacy matters. This Privacy Policy explains how we collect, use, store, and protect your personal and health information when you use DRMS™ services.
2. Information We Collect
We only collect information necessary to provide personalised healthcare and wellness services.
A. Personal Information
Name
Age / Date of Birth
Gender
Contact details (phone number, email)
B. Health & Lifestyle Data (Sensitive Data)
As part of DRMS™, we may collect:
Health screening results
Vital signs (e.g. blood pressure, glucose, etc.)
Symptoms and health concerns
Medication and supplement history
Lifestyle information (e.g. diet, activity, habits)
Pharmacist notes and recommendations
C. System & Usage Data
I. General System Data
Device information
Interaction with DRMS™ services
System logs (for improvement and security)
II. Fitness Data (Health Connect / Apple Health)
With your permission, HTM DRMS reads step count and sleep session data from Android Health Connect and Apple Health to display your fitness summary and history within the app. This access is read-only — HTM DRMS never writes data back to Health Connect or Apple Health.
Fitness data is not uploaded automatically. It is only stored to your HTM account when you actively choose to upload it from the Fitness screen. Once uploaded, this data is handled under the same protections described elsewhere in this policy for other health information: not sold or traded, disclosed only internally for healthcare purposes, retained only while your account is active or as required by law, and deletable on request.
You can review or revoke Health Connect / Apple Health access at any time through the Health Connect app or Apple Health app, your device's system settings, or by disconnecting within the app's Fitness screen.
D. Analytics Data
DRMS™ uses PostHog as its analytics provider to help us understand how the app is used, so we can improve features and reliability. Analytics data is hosted on PostHog US Cloud.
We collect two events:
app_active — the app was opened or is in active use
module_opened — a module within the app was accessed
Each event includes only:
An anonymous app-instance identifier (a randomly generated ID tied to the app installation, not to your personal account)
The module name that was opened
We do not send your name, email, account ID, medical records, medication history, vital signs, prescriptions, photos, or audio to PostHog. Analytics data is kept entirely separate from your health and personal information and cannot be used to identify you.
The purpose of this data is limited to measuring daily active usage and understanding which modules are most used, so we can prioritise improvements. It is not used for advertising, profiling, or shared with any third party beyond PostHog acting as our data processor.
3. How We Use Your Information
Your data is used to support DRMS™ objectives:
Provide personalised health screening and recommendations
Monitor your health progress over time
Help pharmacists deliver targeted and effective care
Analyse health trends to improve services
Enhance your in-store and digital experience
Comply with legal and regulatory requirements
Your health and fitness data, including data obtained through Apple HealthKit and Health Connect, is used strictly for healthcare, health monitoring and wellness purposes. It will not be sold, used for advertising or marketing, shared with data brokers, or used for advertising-related profiling or data mining.
4. Data Sharing
We respect your confidentiality.
Your data may only be shared:
With HTM pharmacists and authorised staff for care delivery
With trusted service providers (e.g. cloud hosting, analytics) under strict security controls
When required by law or authorities
We do NOT sell or trade your personal or health data.
5. Data Retention
We retain your data only as necessary:
Health records: up to 7 years (or as required by law)
Account data: while your account remains active
System logs: for security and improvement purposes
Analytics data (PostHog): retained for 12 months from collection, after which it is automatically deleted from PostHog's systems
After these periods, data will be securely deleted or anonymised.
6. Your Rights (Access & Deletion)
You have the right to:
Access your personal and health data
Correct inaccurate information
Request deletion of your data
Requesting Data Deletion
You may request deletion by:
Contacting your nearest HTM Pharmacy
Emailing: [email protected]
We will process your request within 30 days, unless retention is required by law.
Withdrawing Analytics Consent
You can opt out of analytics data collection at any time by disabling "Usage Analytics" in the app's Settings > Privacy menu, or by contacting us at the email above to request that your app-instance identifier be excluded going forward. Opting out does not affect any other DRMS™ functionality.
7. Data Security
We implement appropriate safeguards, including:
Secure systems and encrypted communication
Controlled access by authorised personnel
Continuous monitoring and system protection
However, no system is 100% secure, and users should take care when sharing information online.
8. Confidentiality
All health and personal data collected under DRMS™ is treated as strictly confidential.
Access is limited to authorised personnel only, and we ensure all handling follows professional healthcare standards.
9. Changes to This Policy
HTM Pharmacy reserves the right to update this Privacy Policy at any time. Updates will be published on this page.
10. Contact Us
HOOIT MART SDN. BHD.
Registration No.: 201201005148 (978673-A)
No. 3, Persiaran Kilang, Kawasan Perindustrian Jelapang, 30100 Ipoh, Perak, Malaysia
