Nexus Personal Data Protection Policy

PERSONAL DATA PROTECTION ACT 2010 (PDPA)

On 15 November 2013, the Personal Data Protection Act 2010 (PDPA) came into force in Malaysia with the objective of protecting the personal data of individuals with respect to commercial transactions. As such, our Group has worked out firm’s policies in respect of this change.

YOUR PRIVACY IS IMPORTANT TO US

In this policy, “we”, “us”, “our” or “Nexus” means Nexus Advance Corporate Services Sdn Bhd, its related corporations and affiliates.

In line with Personal Data Protection Act 2010 (PDPA), Nexus wishes to ensure that proper privacy is maintained for your benefit. Hence, we would like to inform you that we will work within applicable laws pertaining to the collection, usage and dealing of your personal data.

Under this policy, please be assured that your data shall only be used for Nexus business and services only. For your information, we have put this policy in place to let you further understand the processes involved.

We will process your personal data as mentioned below which have been provided by you to Nexus and to our intermediaries such as lawyers, accountants, introducer and associates partners and government authorities and/ or agencies.

WHAT PERSONAL DATA WE COLLECT

“Personal data” is data that can be used to identify a natural person. Some examples of personal data that we may collect and have been provided by you to Nexus are:

• Personal and family particulars (eg. name, contact details, residential address, date of birth, identity card/passport details);
• Financial details (eg. financial statements, investment accounts, bank accounts, bank transactions);
• Images (eg. photographs, photocopy of passport and official identification);
• Employment details (eg. occupation, directorships, employment history, educational qualifications);
• Personal data derived from legal documents (eg. Insurance Policies, Powers of Attorney, Birth Certificates, Death Certificates, Trust Deeds, Letters of Wishes, Shareholder Agreements, Company Incorporations, Declarations of Trust, Certificates of Incumbency, any other statutory records, etc.).

HOW YOUR PERSONAL DATA IS COLLECTED

Personal data is collected:

• When you sign up to purchase our products and services from Nexus;
• When you register your interest with Nexus to purchase the products and services;
• When you attend our public talks and seminars;
• When you visit our websites, mobile apps or social networking sites;
• When you perform any transaction or communication with Nexus;
• From third party sources such as referrers, government agencies and publicly available sources of information.

USAGE OF YOUR PERSONAL DATA

We may use your personal data for our core business purposes, such as for:

• The incorporation of companies;
• The provision of training and workshops;
• Billing and financial purposes, including payments for Nexus services (and all transactions related thereto), audit, accounting and tax;
• Administrative purposes;
• Meeting legal and statutory requirements;
• The drafting of wills and any other instruments as instructed by you;
• The drafting of deed of trusts as instructed by you;
• Contact purposes;
• Responding to your enquires;
• Conducting research and statistical analysis.

USE OF PERSONAL DATA FOR MARKETING PURPOSES

We may use your personal data for marketing purposes, including:

• Monitoring and improving our product and service offerings;
• Providing you with regular communications relating to services provided by Nexus from time to time;
• For direct marketing purposes;
• Providing you with information and updates on the products and services.

Such marketing messages may be sent to you in various modes including but not limited to electronic mail, direct mailers, short message service, telephone calls, facsimile and mobile Apps. In doing so, we will comply with the PDPA and other applicable data protection and privacy laws.

DISCLOSURE AND SHARING OF PERSONAL DATA

We may transfer, store, process and/or deal with your personal data outside Malaysia. You may wish to refer to the agreements and terms and conditions that govern our relationship with you. Hence to facilitate the purposes above and the provision of products and services to you, we may process, use and disclose your personal data to the following classes of parties:

• Companies within the Nexus Group;
• Our intermediaries and service providers providing services relating to the purposes for which the personal data is collected;
• Our service providers, consultants, auditors and advisors on a need to know basis;
• Regulatory authorities and enforcement agencies;
• Any person who is under a duty of confidentiality who has undertaken to keep such data confidential and updates on the products and services.

NOTICE AND CHOICE

Please note that you have the right to make a choice not to provide your Personal Data and may revoke your consent to the collection and processing of Personal Data. However, certain services we provide and the continuation thereof requested by us from you is obligatory and failure to provide such Personal Data will inter alia:-

(i) result in us being unable to provide you with the notices, services and/or products requested; and

(ii) result in us being unable to contact you to update you on our services offered now and in the future; and

(iii) result in disqualify you from being our customer.

PROTECTION OF MINORS

As a general rule, children and persons under the age of 18 years (“Minors”) should not disclose Personal Data to us without the consent of their parents and/or guardians. We do not solicit Personal Data from Minors and we do not knowingly collect Personal Data from Minors, use such Personal Data in any way or disclose the Personal Data to third parties without the prior consent of their parents and/or guardians.

TRANSMISSION OF DATA OVER THE INTERNET

The Internet is a global platform. By using our websites, or communicating with us electronically via contact forms, you agree to the unencrypted transfer of all Personal Data that you intend to send us. Due to the risky nature of any operations on the Internet, and the inherent systemic risks, you undertake to accept any and all risks arising from such transfer of Personal Data over the Internet by you to us.