Legal

Privacy Policy

Nestward · Last updated: 10 July 2025

This Privacy Policy explains how Nestward ("we", "us", "our") collects, uses and protects personal information provided by individuals ("you") who visit our website or engage our services. Our practices are conducted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about how we handle personal data, please contact us at [email protected] before proceeding.

1. Who we are

Nestward
12 Jalan Gaya, 88000 Kota Kinabalu, Sabah, Malaysia
Email: [email protected]
Telephone: +60 88-247 936

2. What personal data we collect

We collect only the personal information necessary to respond to enquiries and carry out our document coordination services.

Through our website contact form:

Full name
Email address
Telephone number (if provided voluntarily)
Details of your enquiry

During service engagements:

Household contact information for scheduling
Brief session notes (used to prepare the next session's plan)
Descriptions of document categories — not the document contents themselves

We do not collect sensitive personal data (financial account numbers, medical information, identity document numbers) except where a client refers to these incidentally during a session, in which case they are not recorded in our notes.

3. Legal basis for processing

Consent — for enquiries submitted through the website contact form
Contract performance — to carry out services described in our engagement letter
Legitimate interest — to respond to enquiries and manage session scheduling

4. How we use your personal data

To respond to your enquiry
To arrange and conduct document coordination sessions
To send written outputs (summaries, gap lists, document maps) to the household
To contact you between sessions with short plans or templates
To comply with legal obligations, if applicable

We do not use your personal data for marketing communications, profiling or automated decision-making. We do not sell or share personal data with third parties for commercial purposes.

5. Data retention

Enquiry data — retained for 90 days if no engagement follows; deleted thereafter
Session notes — retained for 12 months after engagement close; deleted thereafter
Working copies of client documents — deleted from our equipment within 7 days of engagement completion
Financial records (engagement fees) — retained for 7 years in accordance with Malaysian accounting obligations

6. Data security

We take reasonable precautions to protect personal data from unauthorised access or disclosure. These include:

Password-protected devices used for all client-related work
Encrypted email where clients share sensitive information electronically
No retention of client document scans beyond 7 days of engagement close
Physical session notes kept in a locked filing cabinet at our Jalan Gaya office

In the event of a data breach that may affect your rights, we will notify you within a reasonable period and take steps to contain the breach.

7. Cookies

Our website uses a small number of cookies to keep the site functioning correctly. We do not use advertising or cross-site tracking cookies unless you accept them. Please see our Cookie Policy for full details.

8. Third-party services

Our website may use basic analytics to understand how visitors use the site (e.g. which pages are viewed most). This data is aggregate and does not identify individuals. We do not use social media tracking pixels or advertising networks on our website.

If you follow a link from our website to an external site, we are not responsible for the privacy practices of that site.

9. Your rights under Malaysia's PDPA

Under the Personal Data Protection Act 2010, you have the following rights in respect of your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to correction — to request that inaccurate data be corrected
Right to withdraw consent — where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing
Right to limit processing — to request that we cease processing your data in certain circumstances

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days.

10. Children

Our services are directed at adults (18 years and older). We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently received such data, we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. Where changes are material, we will post a notice on our website. The "last updated" date at the top of this page reflects the most recent revision. Continued use of our website or services after a revision constitutes acceptance of the updated policy.

12. Contact for privacy matters

For any question, concern or request relating to this policy or your personal data, please contact:

Nestward — Privacy Enquiries
12 Jalan Gaya, 88000 Kota Kinabalu, Sabah
[email protected]
+60 88-247 936