Privacy Policy

1. Introduction

Nxwlto ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and store your personal information when you use our website, services, or interact with us in any way.

We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable data protection laws. By using our services or providing us with your information, you consent to the practices described in this Privacy Policy.

2. Information We Collect

We may collect the following types of information:

2.1 Personal Information

• Contact information (name, email address, phone number, physical address)
• Business information (company name, job title, industry)
• Payment information (for clients only)
• Event preferences and requirements
• Communication preferences

2.2 Technical Information

• IP address and device information
• Browser type and version
• Operating system
• Referring website
• Time and date of website visits
• Pages viewed and interactions with our website

3. How We Collect Information

We collect information through various channels:

• Direct interactions: When you fill out forms on our website, correspond with us by phone, email, or otherwise, or when you engage our services.
• Automated technologies: As you interact with our website, we may automatically collect technical information about your equipment, browsing actions, and patterns.
• Third parties: We may receive information about you from third parties including business partners, analytics providers, and search information providers.

4. How We Use Your Information

We use your information for the following purposes:

• To provide, operate, and maintain our services
• To process and fulfill your event planning requests
• To communicate with you about our services, events, and promotions
• To improve our website and services
• To personalize your experience and deliver relevant content
• To analyze usage patterns and optimize our operations
• To detect, prevent, and address technical issues or fraud
• To comply with legal obligations

5. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: Where you have explicitly agreed to the processing of your data.
• Contractual necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
• Legal obligation: Where processing is necessary to comply with legal obligations.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

• The duration of our ongoing relationship with you
• Legal obligations to retain data for certain periods
• Statutes of limitations under applicable law
• Ongoing or potential disputes or legal claims
• Guidelines issued by relevant data protection authorities

7. Information Sharing and Disclosure

We may share your information with:

• Service providers: Third-party vendors who perform services on our behalf, such as event venues, caterers, technical suppliers, and payment processors.
• Professional advisors: Lawyers, auditors, bankers, and insurers who provide professional services to us.
• Authorities: Government authorities or law enforcement officials if required by law or to protect our rights.
• Business transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business.

We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

8. International Transfers

We primarily process and store your information within Malaysia. However, we may transfer your information to service providers or business partners located in other countries to fulfill the purposes described in this Privacy Policy. When we transfer your information outside of Malaysia, we ensure appropriate safeguards are in place to protect your information and comply with applicable data protection laws.

These safeguards may include:

• Ensuring the recipient country has adequate data protection laws
• Implementing standard contractual clauses approved by relevant authorities
• Obtaining your explicit consent for the transfer
• Ensuring the recipient is bound by corporate rules that provide appropriate protection

9. Your Rights

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable laws, you have certain rights regarding your personal information, including:

• Right to access: You can request a copy of the personal information we hold about you.
• Right to rectification: You can request that we correct any inaccurate or incomplete information we hold about you.
• Right to erasure: In certain circumstances, you can request that we delete your personal information.
• Right to restrict processing: In certain circumstances, you can request that we restrict the processing of your personal information.
• Right to data portability: You can request that we transfer your personal information to another organization or directly to you.
• Right to object: You can object to the processing of your personal information in certain circumstances.
• Right to withdraw consent: Where we rely on your consent to process your personal information, you can withdraw your consent at any time.

To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below. We may need to verify your identity before responding to your request.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of sensitive information
• Regular security assessments and testing
• Access controls and authentication procedures
• Staff training on data protection and security
• Physical security measures for our premises and systems

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

11. Cookies and Similar Technologies

We use cookies and similar technologies on our website to enhance your experience, analyze usage, and assist in our marketing efforts. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

12. Children's Privacy

Our services are not intended for individuals under the age of 18, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information as quickly as possible.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the updated Privacy Policy on our website with a new effective date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Nxwlto
32-01, Level 32, Tower B, The Vertical Corporate Towers,
Jalan Kerinchi 8 Unit, Bangsar South,
59200 Kuala Lumpur, Malaysia

Email: [email protected]
Phone: +60 3 2246 6175

15. Complaints

If you are not satisfied with our response to your concern or believe that we are not processing your personal information in accordance with the law, you can make a complaint to the Department of Personal Data Protection, Ministry of Communications and Multimedia of Malaysia.