Privacy Policy
Last Updated: January 15, 2025
At NexaGen Portal, we understand that trust matters when you're sharing personal information. This policy explains how we collect, use, and protect your data when you use our financial modeling platform and educational services.
Information We Collect
We collect different types of information depending on how you interact with our platform. Some you provide directly, while other data is collected automatically as you use our services.
Personal Information You Provide:
- Full name, email address, and phone number when you register for courses or contact us
- Professional details including job title, company name, and industry sector for tailored content delivery
- Payment information processed through secure third-party providers (we never store complete card details)
- Educational background and experience level to customize your learning path
- Communication preferences and feedback submitted through our platform
Automatically Collected Data:
- Device information including IP address, browser type, operating system, and screen resolution
- Usage patterns like pages visited, time spent on sections, and features accessed
- Login times, course progress, and completion rates for educational materials
- Technical data about how you interact with our financial modeling tools
How We Use Your Information
We're not in the business of selling your data. Everything we collect serves specific purposes related to improving your experience and delivering better educational content.
Purpose | Data Used | Legal Basis |
---|---|---|
Course delivery and platform access | Account details, login credentials | Contract performance |
Payment processing and invoicing | Financial information, billing address | Contract performance |
Content personalization | Professional background, usage patterns | Legitimate interest |
Technical improvements | Device data, browsing behavior | Legitimate interest |
Communications and support | Contact information, support inquiries | Consent and legitimate interest |
We also use aggregated, anonymized data to understand trends and improve our financial modeling curriculum. This data cannot be traced back to individual users.
Data Sharing and Third Parties
We work with carefully selected service providers who help us run the platform. These companies can only use your information for specific tasks we assign them.
- Payment Processors: Stripe and similar providers handle transactions securely under strict data protection standards
- Email Services: Our email platform manages course notifications and updates you've opted into
- Analytics Tools: We use privacy-focused analytics to understand how people use our platform (no personal identification)
- Cloud Infrastructure: Data is stored on secure servers with encryption and regular backups
- Educational Partners: Some course materials involve collaboration with industry experts who may access limited student data
Important Note on Data Transfers
While NexaGen Portal operates in Malaysia, some of our service providers maintain servers in other countries. We ensure all international transfers comply with Malaysia's Personal Data Protection Act 2010 and use appropriate safeguards like standard contractual clauses.
Your Rights Under Malaysian Law
The Personal Data Protection Act 2010 gives you specific rights regarding your personal information. Here's what you can do and how to exercise these rights:
- Access Your Data: Request a copy of all personal information we hold about you. We'll provide this within 21 days in a readable format.
- Correction Rights: Ask us to fix inaccurate or incomplete information. You can update most details directly in your account settings.
- Withdraw Consent: If you've opted into marketing communications, you can unsubscribe anytime through email links or your account preferences.
- Data Portability: Request your course progress, completed materials, and account data in a structured format for transfer elsewhere.
- Erasure Requests: Ask us to delete your personal data, though we may need to retain some information for legal or contractual obligations.
- Processing Restrictions: Limit how we use your data in specific circumstances, such as during disputes about accuracy.
To exercise any of these rights, contact our Data Protection Officer at help@nexagenportal.com. We'll respond within 14 business days and may ask you to verify your identity before processing requests.
Data Security Measures
Protecting your information isn't just about compliance. We've implemented multiple security layers because financial data deserves serious protection.
- Industry-standard encryption for data in transit (TLS 1.3) and at rest (AES-256)
- Regular security audits and penetration testing by independent third parties
- Access controls limiting staff exposure to personal data on a need-to-know basis
- Two-factor authentication available for all user accounts
- Automated backup systems with secure off-site storage
- Incident response procedures for potential data breaches
Despite our precautions, no online platform can guarantee absolute security. If we detect a breach affecting your data, we'll notify you within 72 hours and explain what happened and what steps we're taking.
Cookies and Tracking Technologies
Our platform uses cookies and similar technologies to remember your preferences and improve your experience. You have control over most of these.
Types of Cookies We Use:
- Essential Cookies: Required for login, security, and basic platform functions. These can't be disabled.
- Functional Cookies: Remember your preferences, language settings, and course progress.
- Analytics Cookies: Help us understand usage patterns without identifying individual users.
- Performance Cookies: Track loading times and technical issues to improve platform stability.
You can manage cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may affect platform functionality.
Data Retention Periods
We don't keep your information longer than necessary. Different types of data have different retention schedules based on legal requirements and practical needs.
Data Type | Retention Period | Reason |
---|---|---|
Active account information | Duration of account plus 12 months | Service provision and support |
Payment records | 7 years after transaction | Tax and accounting requirements |
Course completion data | Duration of account plus 3 years | Certificate verification and records |
Marketing communications | Until consent withdrawn plus 30 days | Compliance with opt-out requests |
Support correspondence | 2 years after resolution | Quality assurance and disputes |
When retention periods expire, we securely delete or anonymize your data. Anonymized data may be kept indefinitely for statistical analysis.
Children's Privacy
NexaGen Portal is designed for professional analysts and individuals pursuing financial modeling careers. Our services are not intended for anyone under 18 years old.
We don't knowingly collect personal information from minors. If you believe a child under 18 has provided us with personal data, contact us immediately at help@nexagenportal.com, and we'll delete it promptly.
Changes to This Policy
Privacy practices evolve with technology and regulations. We may update this policy to reflect changes in our services or legal requirements.
When we make significant changes, we'll notify you through email and display a prominent notice on the platform for at least 30 days. Continued use of our services after changes take effect constitutes acceptance of the updated policy.
Previous versions of this policy are archived and available upon request. The current version is always accessible from our website footer.
Questions About Privacy?
If you have concerns about how we handle your data or
want to exercise your rights, reach out to our team:
Email: help@nexagenportal.com
Phone: +60 9 788
4209
Address: BLK L 0504, Jalan Gaya 11, Taman
Gaya,
81800 Ulu Tiram, Johor, Malaysia
We aim to respond to all privacy inquiries within 14 business days.