Privacy Policy

1. Introduction

Nestora ("we", "us", "our") is committed to protecting the privacy of individuals who engage with our educational programs and website. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to all personal data collected through our website at nestoracgn.live, our contact form, program enrolment processes, and any other interaction with Nestora. By engaging with our services, you acknowledge that you have read and understood this policy.

For questions about this policy, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

• Contact Information: Full name, email address, and phone number when provided via our contact form or program enrolment.
• Programme Participation Data: Information about which program you are enrolled in, workshop attendance records, and learning progress where relevant to program delivery.
• Technical Data: IP address, browser type, device type, and pages visited — collected automatically when you visit our website.
• Cookie Data: Preferences and consent records stored locally via browser cookies and localStorage.

We do not collect sensitive personal data such as financial account details, identification numbers, or health information.

Legal basis for processing: Data is processed based on your consent (where given), the performance of a contract (program enrolment), or our legitimate interests in operating and improving our educational services.

Retention: Contact enquiry data is retained for up to 12 months. Program participation records are retained for up to 3 years for administrative purposes and then securely deleted.

3. How We Use Your Data

• To respond to enquiries submitted through our contact form
• To administer your enrolment in a Nestora program and deliver program materials
• To send program-related communications, including session reminders and facilitator check-in notes
• To improve our website, course content, and participant experience based on aggregate feedback
• To comply with applicable legal obligations

We do not use your personal data for direct marketing without your explicit consent. We do not sell, rent, or trade personal data to third parties.

Third-party sharing: We may share data with service providers who assist us in delivering programs (e.g., hosting providers, email delivery services), solely for that purpose and under appropriate data processing agreements. We do not share data with financial product providers or advertisers.

4. Data Protection Measures

Nestora takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Secure HTTPS encryption for all data transmitted via our website
• Access controls limiting who within the Nestora team can access personal data
• Regular review of stored data to ensure retention limits are respected
• Staff awareness of data handling responsibilities under the PDPA

In the event of a data breach that is likely to affect your rights or interests, we will notify you and the relevant authority as required under applicable law.

5. Cookies

Our website uses cookies and similar technologies to store your consent preferences and support basic site functionality. We do not use cookies for advertising profiling. For full details on which cookies we use and how to manage them, please refer to our Cookie Policy.

6. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights with respect to your personal data held by Nestora:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
• Right to limit processing: You may request that we restrict the use of your data in certain circumstances.
• Right to prevent processing for direct marketing: You may opt out of receiving any marketing communications at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you believe your rights have not been respected, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).

7. Third-Party Links

Our website may contain links to external websites for reference purposes. Nestora is not responsible for the privacy practices of those websites. We encourage you to review the privacy policy of any external site you visit.

8. Children's Privacy

Nestora's programs are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us and we will take appropriate steps to remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last Updated" date. Continued use of our website or programs after changes are posted constitutes acceptance of the updated policy. For significant changes, we will make reasonable efforts to notify enrolled participants directly.

10. Contact Information

If you have any questions or requests relating to this Privacy Policy or how we handle your personal data, please contact: