Privacy Policy

1. Introduction

Nestbridge ("we", "us", "our") is committed to protecting the personal data of those who contact us, attend our sessions, and visit our website. This policy explains what information we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to all personal data processed by Nestbridge in connection with our educational programmes, website, and communications. It is governed by the Personal Data Protection Act 2010 of Malaysia (PDPA 2010).

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Enquiry form submissions: Name, email address, phone number, and any information shared voluntarily in a message.
• Intake conversations: Notes taken before or during a session, limited to what is necessary to deliver the programme.
• Session participation: Written summaries are prepared after each session. These are shared with participants and stored securely by Nestbridge.
• Website analytics: Aggregated, anonymised data about pages visited, device type, and referral source, collected via third-party analytics if cookies are accepted.

We do not collect sensitive personal data (such as racial origin, health information, religious beliefs, or financial details) unless a participant chooses to share such information voluntarily in the context of a session. In that case, it is treated with heightened care and not included in written summaries.

3. Legal Basis for Processing

We process personal data on the following bases under the PDPA 2010:

• Consent: When you submit a contact form or agree to cookies, you provide consent to the processing described in this policy.
• Contractual necessity: When you book and attend a programme, processing your name and contact details is necessary to deliver the service.
• Legitimate interests: We may retain records of completed sessions for internal quality review and to handle any follow-up queries from participants.

4. How We Use Your Data

• To respond to enquiries submitted via our website or by phone.
• To schedule and confirm sessions.
• To prepare and deliver educational programmes.
• To send a written session summary to participants.
• To conduct follow-up check-ins for participants in the Wellbeing Coordination Programme.
• To improve our website and services using aggregated, anonymised analytics data.

We do not use your personal data for direct marketing without your explicit consent. We do not sell or share personal data with third parties for commercial purposes.

5. Data Retention

• Enquiry form data: Held for up to 12 months. Deleted after that unless converted to a programme booking.
• Session records and summaries: Held for up to 3 years from the date of the session to allow for any follow-up queries or quality review.
• Analytics data: Aggregated and anonymised; retained for up to 26 months in line with standard analytics provider terms.

6. Data Protection Measures

• Access to personal data is limited to Nestbridge staff directly involved in the relevant programme or administration.
• Physical session notes are stored in a locked filing cabinet at our Jalan Song office.
• Digital records are stored in password-protected systems with restricted access.
• In the event of a data breach affecting personal data, we will notify affected individuals within a reasonable timeframe and take immediate steps to contain and address the breach.
• We conduct an internal data handling review annually.

7. Cookies

We use cookies on our website to ensure basic functionality and, where you consent, to collect anonymised analytics data. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies are required for the site to function and cannot be disabled.

8. Third-Party Services

Our website may use the following third-party services:

• Google Analytics (if analytics cookies are accepted): Provides aggregated, anonymised data about website usage. Google's privacy policy applies to data processed by this service.
• Google Maps: Used to display our office location. No personal data is passed to Google Maps through our embed.
• Font providers (Google Fonts, Font Awesome): May log IP addresses as part of font delivery. These are standard CDN services.

We are not responsible for the privacy practices of third-party services. We encourage you to review their policies where relevant.

9. Your Rights Under PDPA 2010

As a data subject under Malaysian law, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request that we cease processing your personal data for marketing purposes.
• Request deletion of your data, subject to any legal retention obligations.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please write to us at [email protected] or by post to 22, Jalan Song, 93350 Kuching, Sarawak. We will respond within 21 days. For formal complaints, you may also contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

10. External Links

Our website may include links to external websites. Nestbridge is not responsible for the content or privacy practices of those sites. Visiting a third-party link takes you outside our control, and we recommend reviewing the privacy policy of any website you visit.

11. Children's Privacy

Our website and services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently received data from a minor, please contact us at [email protected] so we can delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. We encourage you to review it periodically. Continued use of our website or services after changes have been posted constitutes acceptance of the updated policy.

13. Contact

Data Controller: Nestbridge
Address: 22, Jalan Song, 93350 Kuching, Sarawak, Malaysia
Phone: +60 82 457 138
Email for data enquiries: [email protected]