Privacy Policy

1. Who We Are

Nestwell operates as the data controller for personal information processed through this website and during our educational sessions. Our registered office is at 46, Jalan Telawi 3, Bangsar Baru, 59100 Kuala Lumpur, Malaysia.

For data-related enquiries, write to [email protected] or call +60 3 2287 9165.

2. What Data We Collect

We collect only the information necessary to respond to your enquiries and deliver our educational services.

• Contact details: name, email address, and telephone number provided via our enquiry form or by contacting us directly.
• Booking information: session preferences, dates, and any notes you provide when booking a programme.
• Website usage data: pages visited, time spent, browser type, and device information collected via cookies and analytics tools. See our Cookie Policy for details.
• Correspondence: emails, messages, and follow-up queries you send to us.

We do not collect sensitive personal data, financial information, or personal retirement account details as part of our service delivery. Sessions use general example materials, not participants' own documents.

3. Legal Basis for Processing

• Consent: where you have opted in to receive communications or have submitted the enquiry form.
• Contract: to process your booking and deliver the session or programme you have enrolled in.
• Legitimate interest: to maintain records, improve our services, and respond to follow-up queries in a timely and useful manner.
• Legal obligation: where we are required to retain records under Malaysian law.

4. How We Use Your Data

• To respond to your enquiries and schedule sessions
• To send confirmation details and session reminders
• To provide follow-up support where included in the programme
• To maintain administrative records for our internal purposes
• To improve the content and delivery of our educational programmes
• To comply with legal and regulatory requirements under Malaysian law

We do not sell your personal data to third parties. We do not use your data for automated profiling or algorithmic decision-making.

5. Data Sharing

We share personal data only where necessary:

• Service providers: email hosting, website analytics, and booking tools that process data on our behalf under data processing agreements.
• Legal authorities: where required by Malaysian law or a court order.

We do not transfer personal data outside Malaysia without adequate safeguards.

6. Data Retention

Enquiry and booking records are retained for up to three years from the date of last contact. Website analytics data is retained for up to twenty-six months. You may request deletion at any time (see Section 8). Where retention is required by Malaysian law, we retain data only for the period required by that obligation.

7. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. These include:

• Encrypted connections (HTTPS) for all web communications
• Access controls limiting staff access to personal data
• Regular review of data handling procedures

In the event of a data breach that could affect your rights, we will notify the relevant authority and, where required, affected individuals within the timeframe required under the PDPA.

8. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: ask us to correct inaccurate or incomplete data
• Withdrawal of consent: withdraw consent for processing at any time, where consent was the basis
• Deletion: request that we erase your data, subject to legal retention obligations
• Objection: object to processing based on legitimate interest
• Complaint: lodge a complaint with Malaysia's Department of Personal Data Protection (JPDP) at www.pdp.gov.my

To exercise any of these rights, email [email protected]. We will respond within 21 days.

9. Cookies

This website uses cookies for basic functionality and, with your consent, analytics. Essential cookies cannot be disabled as they keep the site working correctly. For full details and to manage your preferences, see our Cookie Policy.

10. Third-Party Links

Our website may contain links to external sites including EPF, LHDN, and other official bodies. We are not responsible for the privacy practices of those sites and recommend you read their own policies before providing personal information.

11. Children

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. The revised version will be posted on this page with an updated date. Continued use of our website or services after a change constitutes acceptance of the revised policy.

13. Contact for Privacy Matters