DiMS Security and Data Protection

DiMS Solutions Sdn Bhd (“DiMS”) provides digital solutions that support dialysis care, centre operations, sponsorship administration and connected healthcare workflows. We recognise that the confidentiality, integrity and availability of information are important to our customers, users and partners.

1. Our approach

DiMS uses administrative, technical and organisational measures designed to protect the information and systems under our control. Our approach is intended to support secure access, responsible data handling, operational resilience and continual improvement.

2. Access and account security

Access to DiMS systems is intended for authorised users with individual accounts and role-appropriate permissions.

• Users must protect their passwords and must not share account credentials.
• Access may be changed, suspended or removed where reasonably necessary to protect users, patients, customers, systems or legal compliance.

3. Data handling

Where DiMS processes information through its services, the applicable Service Licence Agreement/Terms and Conditions, data processing arrangements, platform configuration and customer instructions determine the authorised purpose and use. Users must access and use information only for authorised business purposes and within their assigned role.

4. Integrations and connected services

DiMS may support approved integrations with customer systems, laboratories, devices, technology partners and other external services. Each connection is assessed and enabled according to the relevant technical, security, customer-authorisation and contractual requirements. No integration should be treated as approved unless DiMS has expressly confirmed it.

5. Suppliers and third parties

DiMS may use carefully selected suppliers to help host, operate, secure or support its services. Where appropriate, DiMS seeks to ensure that third parties are subject to obligations appropriate to the services they provide and the information they handle.

6. Security incident reporting

If you believe there has been unauthorised access to a DiMS account, system or information, contact [email protected] promptly and provide the available details. DiMS will assess and manage reported incidents through its applicable internal processes and contractual obligations.

7. Privacy and personal data

DiMS processes personal data in accordance with its Privacy Notice and applicable contractual arrangements. Our Privacy Notice explains the personal data we collect through our websites, accounts and services, how it is used, and how to contact us about privacy questions or requests.

8. Security and quality maturity

DiMS is working towards alignment with recognised information-security and quality-management practices, including ISO/IEC 27001 and ISO 9001. This statement does not mean that DiMS is currently certified to either standard unless DiMS expressly states otherwise and provides current certification details.

9. Your responsibilities

• Use DiMS services only through authorised accounts and for approved purposes.
• Protect account credentials, devices and access to downloaded information.
• Do not disclose patient data, customer data or DiMS confidential information through public or unapproved tools, including public generative AI tools, without the required approval.
• Tell DiMS promptly if you suspect unauthorised access, loss, disclosure or misuse.

10. Contact

For security or account-access concerns, privacy questions or requests, contact [email protected].