Legal

Privacy Policy

Last updated: 20 May 2025  |  Effective: 20 May 2025

1. Who this policy applies to

This policy applies to anyone who visits our website at nyxara.pro, contacts us through our enquiry form, or enters into a service engagement with Nyxara. It covers personal data processed in connection with our voice interface design services.

2. What personal data we collect

We collect personal data that you provide to us directly, and some data that is collected automatically when you use our website.

Data you provide:

• Name and contact details (email address, phone number) submitted through our enquiry form
• Any information you include in your message or project description
• Communication records if you contact us by email or telephone

Data collected automatically:

• Device type, browser, and operating system
• Pages visited and time spent on each page
• Referring URL and general location (country or region level)
• Cookie consent preferences stored in your browser

3. Legal basis for processing

We process your personal data under the following legal bases, consistent with the Malaysian Personal Data Protection Act 2010 (PDPA):

• Consent — when you submit an enquiry form or accept cookies, you are providing consent to process the relevant data
• Legitimate interest — we process analytics data to understand how our website is used and improve it
• Contract — when you engage our services, processing is necessary to fulfil our contractual obligations

4. How we use your data

• Responding to enquiries and arranging consultations
• Delivering agreed services and producing design deliverables
• Communicating about ongoing engagements
• Understanding how our website is used so we can improve it
• Complying with legal obligations

We do not use your personal data for automated decision-making or profiling.

5. Data retention

• Enquiry data: retained for up to 24 months after the last contact, then deleted
• Client engagement records: retained for 7 years after project completion for legal and financial record-keeping purposes
• Website analytics data: aggregated and anonymised after 26 months
• Cookie consent logs: retained for 13 months

6. Data sharing

We do not sell your personal data to third parties. We may share limited data with the following service providers who assist us in operating our business:

• Analytics providers (e.g. Google Analytics) — receive anonymised usage data
• Email and cloud storage services — used to handle project communications and documents

All third-party providers are required to handle your data in accordance with applicable privacy laws.

7. Data protection measures

• Data transmitted to and from our website is encrypted using HTTPS/TLS
• Access to client data is restricted to team members working on the relevant project
• Project documents are stored in access-controlled cloud environments
• We review our data handling practices regularly

In the event of a data breach that affects your personal data, we will notify you and the relevant authority as required by Malaysian law.

8. Cookies

Our website uses cookies to function and to understand usage patterns. For full details of what cookies we use and how to manage them, please see our Cookie Policy.

9. Your rights

Under the PDPA and applicable regulations, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Withdraw consent to processing at any time (where consent is the legal basis)
• Request deletion of your data where there is no overriding legal reason to retain it
• Object to processing based on legitimate interest
• Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. External links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies directly.

11. Children's privacy

Our services are intended for business users and individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.

12. Changes to this policy

We may update this policy from time to time. Significant changes will be communicated by updating the "Last updated" date at the top of this page. Continued use of our website or services after changes are posted indicates your acceptance of the updated policy.

13. Contact

For questions or requests related to this privacy policy: