Privacy Policy — Nestpoint

1. Introduction

Nestpoint ("we", "us", "our") is committed to handling personal data responsibly and transparently. This Privacy Policy explains how we collect, use, store and protect information provided to us by visitors to this website and participants in our programmes. It applies to all personal data processed in connection with our educational sessions, evening courses and enterprise consulting engagements in Kuching, Sarawak, Malaysia.

Nestpoint operates in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. Questions about this policy may be directed to [email protected].

2. Data We Collect

We collect only the personal data necessary to respond to enquiries and deliver our services. This may include:

Full name
Email address
Phone number (optional, provided by you)
Organisation name (for enterprise enquiries)
Message content submitted through our contact form

We do not collect copies of documents brought to clinic sessions. Documents reviewed during sessions remain in the participant's possession at all times and are not retained, photographed or digitised by Nestpoint.

Legal basis for processing (PDPA 2010):

Consent — when you submit an enquiry form
Legitimate interest — for internal administrative and operational records
Contractual necessity — for enterprise engagements under signed agreements

Retention periods: Enquiry contact data is retained for 24 months. Enterprise engagement records are retained for 5 years. Session attendance records are retained for 12 months.

3. How We Use Your Data

To respond to your enquiry and communicate about programme availability
To send confirmation and administrative correspondence related to booked sessions
To maintain internal attendance and session records
To send anonymised feedback summaries (aggregate data only, no personal identifiers)
To comply with legal and regulatory requirements under Malaysian law

We do not use personal data for direct marketing without your explicit consent. We do not sell personal data to third parties under any circumstances.

4. Data Sharing

Personal data is not shared with third parties except:

Where required by Malaysian law or a court order
With service providers who assist in operating this website (hosting, analytics), under data processing agreements
With guest practitioners who attend course sessions, where participant consent has been obtained

No data is transferred outside Malaysia for processing purposes.

5. Data Protection Measures

Website data is transmitted over HTTPS (TLS encryption)
Contact form data is stored on password-protected, access-controlled servers
Access to personal data is limited to Nestpoint staff who require it for operational purposes
In the event of a data breach affecting personal data, affected individuals will be notified within a reasonable timeframe as required by Malaysian PDPA obligations
Internal data access logs are reviewed periodically

6. Cookies

This website uses cookies to maintain basic functionality. A cookie consent banner is displayed on first visit, allowing you to accept or decline non-essential cookies. Essential cookies necessary for the site to function are always active. For full details of cookie types and how to manage them, see our Cookie Policy.

7. Your Rights Under Malaysian PDPA 2010

Under the Personal Data Protection Act 2010, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Withdraw consent to processing, where consent is the legal basis
Request that we cease processing your data for direct marketing purposes
Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, write to [email protected]. We will respond within 21 days.

8. Third-Party Links

This website may contain links to external resources such as government agencies, EPF and SOCSO websites. Nestpoint is not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policy of any external site you visit.

9. Children's Privacy

Our programmes and website are directed at adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received data from a minor, please contact us at [email protected] and we will delete it promptly.

10. Policy Updates

This policy may be updated from time to time. The "Last Updated" date at the top of this page will reflect any changes. Where changes are material, we will note them prominently on this page. Continued use of our website or services after a policy update constitutes acknowledgement of the revised policy.

11. Contact

For privacy-related questions, requests or complaints:

Email: [email protected]
Address: Nestpoint, Lot 3-08, Plaza Merdeka, Jalan Tun Abang Haji Openg, 93000 Kuching, Sarawak, Malaysia