Privacy Policy

1. Introduction

Nymbus is committed to handling personal data with care and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy explains what data we collect, how we use it, and the choices available to you as a subscriber, enquirer, or visitor to our website and products.

This policy applies to personal data processed in connection with our website at nymbus.live, our Benchmark Reference Library, Comparison Toolkit, Custom Insight Reports, and any related communications. Questions about this policy can be directed to [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, phone number (if provided), and organisation name — submitted via our enquiry form or during product onboarding.
• Usage data: pages visited, time on site, downloads initiated — collected via analytics cookies where consent has been given.
• Communication records: emails and messages exchanged with our team in the course of providing support or scoping Custom Insight Reports.
• Technical data: IP address, browser type, and device type — collected automatically by our web hosting infrastructure for security and performance purposes.

We do not collect sensitive personal data (as defined under the PDPA) and do not process data about health, religion, political opinion, or criminal records.

Legal basis: Data processing for product delivery and enquiry handling is conducted under contractual necessity and legitimate interest. Analytics data is processed only with your consent. Marketing communications require explicit opt-in.

Retention: Contact and communication data is retained for three years from the date of last interaction, unless a shorter or longer period is required by applicable law or by the terms of an active subscription.

3. How We Use Your Data

• Fulfilling product subscriptions and delivering access credentials
• Responding to enquiries and support requests
• Scoping and delivering Custom Insight Reports
• Sending product update notifications and quarterly library refresh notices (subscribers only)
• Analysing website usage to improve content and navigation (analytics cookies, consent-based)
• Maintaining security and preventing unauthorised access

We do not use personal data for automated profiling or decision-making. We do not sell personal data to third parties.

Third-party services: We use Google Analytics (where consented) for website traffic analysis, and a third-party email delivery service for transactional communications. These providers act as data processors under written agreements and are not permitted to use your data for their own purposes.

4. Data Protection Measures

• Subscriber account data is stored on servers with TLS encryption in transit and AES-256 encryption at rest.
• Access to personal data is restricted to team members with a direct need to process it in the course of their role.
• Access controls and audit logs are reviewed periodically.
• In the event of a data breach affecting your personal data, we will notify affected individuals and the relevant authority within the timeframe required under Malaysian law.
• Third-party data processors are subject to contractual data protection obligations.

5. Cookies

We use cookies for essential site functionality, analytics (with consent), and preference storage (with consent). You can manage your cookie preferences at any time. For full details, please see our Cookie Policy.

6. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent to marketing communications at any time
• Request deletion of your data, subject to legal retention requirements
• Object to processing based on legitimate interest, in certain circumstances

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you believe your rights have not been upheld, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

7. Third-Party Links

Our website may contain links to external resources and publications. Nymbus is not responsible for the privacy practices of linked sites. We recommend reviewing the privacy policy of any external site you visit.

8. Children's Privacy

Our products and website are intended for professional users aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us at [email protected] so we can remove it promptly.

9. Policy Updates

We may update this policy when our data practices change or when required by law. Subscribers will be notified of material changes by email. Continued use of our products after the effective date of an updated policy constitutes acceptance of the revised terms.

10. Contact

Data controller: Nymbus, Jalan SS2/24, 47300 Petaling Jaya, Selangor, Malaysia.

Privacy enquiries: [email protected]