Privacy Policy

Our commitment to your privacy

Nestphase ("we", "us", "our") operates from 12 Jalan Ampang, 50450 Kuala Lumpur, Wilayah Persekutuan, Malaysia. We provide retirement records information sessions and document organisation workshops. This Privacy Policy explains how we collect, use, store, and protect personal data provided to us through our website and session bookings.

This policy is issued in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010). If you have questions about this policy, please contact us at [email protected].

What personal data we collect and how

We collect personal data through the following means:

• Enquiry and booking forms on our website: full name, email address, and optionally a phone number and message.
• Session registration: name and contact details confirmed at the time of session booking.
• Cookies and analytics: technical data about your visit, including pages viewed and browser type, where you have consented to analytics cookies. See Section 05 for details.

Legal basis for processing: We process personal data on the basis of (a) your consent, given when you submit an enquiry form or accept cookies; (b) the performance of a contract, when processing your booking; and (c) our legitimate interests in operating the business and communicating with enquirers.

Data retention: Booking and contact records are retained for up to 24 months from the date of the most recent contact, after which they are securely deleted. Cookie-derived analytics data is retained in line with the third-party service provider's standard retention period (typically 26 months for Google Analytics).

Third-party services: We may use Google Analytics for website usage analysis and a third-party email platform for correspondence. These services have their own privacy policies.

Purposes of data use

We use personal data for the following purposes:

• Responding to enquiries and providing information about our sessions
• Confirming and administering session bookings
• Sending session reminders and follow-up communications directly related to your booking
• Analysing website usage to improve the site (analytics cookies, with consent)
• Complying with legal and regulatory obligations

We do not use your personal data for unsolicited marketing communications. We do not sell, rent, or trade personal data to third parties. We do not share your data with financial advisers, legal firms, or any referral partners.

If we are required to share data with a third party for legal or regulatory purposes, we will do so only to the extent required and will inform you where permitted by law.

How we protect your data

• Our website uses HTTPS encryption for all data transmissions.
• Personal data is stored on password-protected systems with access limited to authorised staff.
• We carry out periodic reviews of our data handling practices.
• In the event of a data breach that may affect your rights and interests, we will notify you and the relevant authorities as required under Malaysian law.

Cookies on this website

We use essential cookies for basic site functionality and optional analytics cookies (with your consent) to understand how visitors use our website. You can manage your cookie preferences at any time via our Cookie Policy page.

Essential cookies do not require consent as they are necessary for the site to operate. Optional cookies are only set after you provide consent through the cookie banner.

Your rights under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by Nestphase:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that inaccurate data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time.
• Right to limit processing: You may request that we stop using your data for direct communications.
• Right to inquire: You may contact us to ask how your data is being used.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. If you are dissatisfied with how we handle your request, you may refer the matter to the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

Links to other websites

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies independently.

Age restrictions

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] so we can take appropriate action.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website following any changes constitutes your acceptance of the updated policy.

Data controller contact details

Nestphase

12 Jalan Ampang, 50450 Kuala Lumpur, Wilayah Persekutuan, Malaysia

Email: [email protected]

Phone: +60 3 2168 5274