COTechEnterprise is operated by C&O Tech Enterprise, a business registered in Malaysia with the Companies Commission of Malaysia (SSM).
COTechEnterprise respects your right to request deletion of personal data that we hold or process, subject to applicable legal, contractual, security and record-retention requirements.
This page explains how clinic customers, clinic staff, patients, website users and other individuals may request deletion of data associated with COTechEnterprise.
1. Who can request deletion
A deletion request may be submitted by:
- a clinic or business customer of COTechEnterprise;
- an authorised user or staff member of a clinic account;
- a patient or other person who has communicated with a clinic through a COTechEnterprise-powered channel;
- a website or service user whose personal data is held directly by COTechEnterprise; or
- an authorised representative acting on behalf of one of the above.
Where a request is made on behalf of another person or organisation, we may require evidence that the requester is authorised to make the request.
2. How to submit a deletion request
To request deletion of personal data, email:
Use the email subject:
Data Deletion Request
In your request, please provide enough information for us to identify the relevant data.
Depending on your relationship with COTechEnterprise, this may include:
- your name;
- your email address;
- your telephone or WhatsApp number;
- the name of the clinic you interacted with;
- your clinic or business name;
- the email address associated with your COTechEnterprise account; and
- a short description of the information you want deleted.
Please do not send passwords, payment-card details, identity documents, medical records or other unnecessary sensitive information in your initial request.
We may contact you for additional information if necessary to identify the relevant records or verify your identity.
3. Identity verification
To protect users from unauthorised deletion of their information, COTechEnterprise may take reasonable steps to confirm:
- the identity of the person making the request;
- ownership of the relevant email address or telephone number;
- authority to act on behalf of a clinic or organisation; or
- authority to act on behalf of another individual.
We will only request information reasonably necessary to perform this verification.
A deletion request may be delayed or refused where we cannot reasonably verify the identity or authority of the requester.
4. Patient conversation data
COTechEnterprise provides communication and chatbot technology to clinics.
Where patient information or conversation data is processed by COTechEnterprise on behalf of a clinic, the clinic generally determines the purposes for which that information is used.
Patients may therefore contact the clinic with which they communicated to request access, correction or deletion of their information.
Patients may also contact COTechEnterprise directly using the procedure on this page.
Where appropriate, COTechEnterprise may:
- refer the request to the relevant clinic;
- consult the clinic before deleting clinic-controlled information; or
- assist the clinic in fulfilling the request.
This helps ensure that information is not deleted improperly where a clinic is legally or professionally required to retain certain records.
5. Information that may be deleted
Depending on the request and applicable circumstances, deletion may include information such as:
- COTechEnterprise user account information;
- clinic account information where the account is being closed;
- patient conversation records;
- chatbot conversation history;
- uploaded attachments or media stored by COTechEnterprise;
- telephone numbers or messaging identifiers;
- integration configuration information;
- WhatsApp Business integration identifiers;
- stored access credentials or tokens associated with a disconnected integration;
- selected application records associated with the requesting person; and
- other personal data that is no longer required for a lawful or legitimate purpose.
Where complete deletion is not appropriate or technically necessary, information may instead be anonymised or de-identified so that it can no longer reasonably be linked to an identifiable individual.
6. WhatsApp and Meta integration data
Clinics may connect their WhatsApp Business accounts to COTechEnterprise through Meta's authorised integration processes, including Meta Embedded Signup.
COTechEnterprise may hold information associated with that connection, including:
- WhatsApp Business Account identifiers;
- Meta business identifiers;
- WhatsApp phone-number identifiers;
- display telephone numbers;
- connection status;
- access credentials or access tokens;
- webhook configuration information; and
- related integration metadata.
A clinic may request that its COTechEnterprise WhatsApp integration be disconnected.
Where an authorised integration is disconnected or the relevant account is terminated, COTechEnterprise will cease using the associated Meta/WhatsApp credentials to provide the disconnected service and will delete or invalidate stored credentials where appropriate, subject to technical, security and legal requirements.
A clinic may also revoke COTechEnterprise's authorisation through applicable Meta account or business settings where that functionality is provided by Meta.
Revoking access prevents future authorised access through that connection, but it may not automatically delete information that COTechEnterprise is otherwise legally or contractually required to retain.
7. Account deletion
Clinic customers wishing to close their COTechEnterprise account should state clearly in the request that they are requesting:
COTechEnterprise Account Deletion
Before completing the request, we may verify that the requester is authorised to close the clinic's account.
Account deletion may result in:
- termination of user access;
- disconnection of connected WhatsApp integrations;
- invalidation or deletion of stored integration credentials;
- deletion or anonymisation of applicable account data;
- deletion or anonymisation of conversation information in accordance with applicable obligations; and
- cessation of services associated with that account.
Account deletion may be irreversible.
Clinics should export or retain any information they are legally or professionally required to maintain before requesting permanent account deletion.
8. Information we may need to retain
A deletion request does not necessarily require immediate deletion of every record associated with a person or account.
COTechEnterprise may retain limited information where retention is reasonably necessary or required for purposes including:
- compliance with applicable law or regulation;
- financial, tax, invoicing or accounting obligations;
- establishment, exercise or defence of legal claims;
- prevention or investigation of fraud or abuse;
- investigation of security incidents;
- enforcement of contractual rights;
- maintenance of records demonstrating compliance with legal obligations; or
- protection of the rights and safety of COTechEnterprise, our customers or other persons.
Any information retained for these purposes will remain subject to appropriate safeguards and will not be used for unrelated purposes.
9. Backups
Deleted information may remain temporarily within encrypted or secured system backups.
Backup copies are not intended for ordinary operational use and will be removed or overwritten according to COTechEnterprise's backup and retention procedures.
If a backup containing previously deleted information must be restored, COTechEnterprise will take reasonable steps to ensure that applicable deletion requirements continue to be respected.
10. Third-party platforms
Information transmitted using third-party services such as WhatsApp or Meta may also be processed independently by those providers.
Deleting information from COTechEnterprise does not necessarily delete copies independently held by:
- Meta;
- WhatsApp;
- the relevant clinic;
- another communication provider; or
- another third party with a lawful basis for retaining the information.
Requests concerning information independently controlled by another organisation should be directed to that organisation.
11. Processing of deletion requests
After receiving a valid deletion request, COTechEnterprise will:
- review the request;
- verify the identity or authority of the requester where reasonably necessary;
- identify the relevant information;
- determine whether COTechEnterprise or the relevant clinic controls the requested information;
- determine whether any information must be retained;
- delete, anonymise or otherwise remove applicable information from active systems; and
- confirm completion or explain any part of the request that cannot be fulfilled.
We aim to process valid requests within a reasonable period, taking into account the complexity of the request and any applicable legal requirements.
12. Withdrawal of consent and other privacy requests
A deletion request is not the only privacy right available to individuals.
Subject to applicable law, individuals may also request:
- access to personal data;
- correction of inaccurate or incomplete personal data;
- withdrawal of consent where processing is based on consent;
- limitation or cessation of certain processing; or
- further information concerning how their personal data is processed.
Malaysia's Personal Data Protection framework recognises rights including access, correction and withdrawal of consent.
Such requests may be sent to the same contact address.
13. Contact us
For deletion requests, privacy enquiries or questions regarding this page, contact:
C&O Tech Enterprise (COTechEnterprise)
Petaling Jaya, Selangor Darul Ehsan, Malaysia
Email: cotech.startup@gmail.com
Telephone: +60 10-521 2333
Website: www.cotechenterprise.com
For deletion requests, please use the email subject:
Data Deletion Request
For more information about how COTechEnterprise handles personal data, please see our Privacy Policy.