1.1 Personal Information

Full name
Email address
Phone number
Billing address
Payment information (processed securely by third-party payment processors)
Employment history and professional background (for assessment purposes)
Educational background

1.2 Assessment Data

Psychometric assessment responses
Cognitive test results
Personality profile data
Work style preferences
Career interest indicators

1.3 Automatically Collected Information

IP address
Browser type and version
Device information
Operating system
Pages visited and time spent
Referring website
Cookies and similar tracking technologies

1.4 Social Media Engagement Data

Where you interact with our official social media pages (including Facebook, Instagram, and TikTok), we may collect engagement metrics relating to our content, such as views, likes, comments, and shares, through platform APIs and in accordance with each platform’s own privacy policy and terms.

Service Delivery: To provide, maintain, and improve our assessment services
Assessment Processing: To analyze assessment responses and generate professional reports
Consultation: To schedule and conduct personalized consultation sessions
Communication: To send order confirmations, assessment instructions, and service updates
Customer Support: To respond to inquiries and resolve technical issues
Payment Processing: To process transactions and send receipts
Legal Compliance: To comply with applicable laws and regulations
Service Improvement: To analyze usage patterns and enhance our offerings
Security: To detect and prevent fraud and unauthorized access

Under the Personal Data Protection Act 2010 (Malaysia) and GDPR, we process your personal data based on: contractual necessity, consent, legitimate interests, and legal obligation.

We do not sell your personal information. We may share your data with:

4.1 Service Providers

Payment processors (for secure transaction handling)
Cloud hosting providers (for data storage)
Email service providers (for communication delivery)
Video conferencing platforms (for consultation sessions)
Assessment platform providers (for delivery of psychometric assessments)

4.2 Sponsoring Organisations

Where you take an assessment as part of a program sponsored by your employer, university, or event organiser, we may share your assessment results and reports with that sponsoring organisation. This will be made clear to you at the point of registration.

4.3 Legal Requirements

We may disclose your information if required by court order, legal process, government authorities with proper jurisdiction, or applicable laws and regulations.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We implement appropriate technical and organizational measures to protect your personal data: encryption of data in transit (SSL/TLS) and at rest, secure server infrastructure with firewalls, regular security assessments, access controls and authentication mechanisms, employee training, and incident response procedures. Despite our efforts, no security system is impenetrable, and we cannot guarantee absolute security of your data.

Active Accounts: As long as necessary to provide our services
Assessment Data: 7 years from the date of assessment (for professional reference)
Financial Records: 7 years as required by Malaysian tax laws
Marketing Communications: Until you opt out or withdraw consent

After the retention period, your data will be securely deleted or anonymized.

Under Malaysian PDPA and GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. To exercise these rights, contact us at enquiries@nucleusadvisory.co. We will respond within 30 days.

Our website uses cookies and similar technologies to maintain user sessions, remember preferences, analyze website traffic and usage patterns, and improve functionality. You can control cookies through your browser settings; disabling cookies may affect website functionality.

Your personal data may be transferred to and processed in countries outside Malaysia. When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses, adequacy decisions, and binding corporate rules.

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us immediately.

Contact our DPO for privacy-related inquiries:

Email: syahmi@nucleusadvisory.co
Address: Nucleus Advisory Sdn Bhd, Lot No. 4, Jalan P/13, Kawasan Perindustrian Miel, Bangi Phase 5, Section 10, Bandar Baru Bangi, Selangor, Malaysia

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. We encourage you to review this policy regularly.

Nucleus Advisory Sdn Bhd
Lot No. 4, Jalan P/13, Kawasan Perindustrian Miel, Bangi Phase 5, Section 10, Bandar Baru Bangi, Selangor, Malaysia
Email: syahmi@nucleusadvisory.co
Phone: (+60) 17 253 9816
Website: https://nucleusadvisory.co

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia or the relevant supervisory authority in your jurisdiction (for EU residents).