Privacy Notice
Last updated 28 September 2026
This notice explains how Nexuses Sdn. Bhd. (202101033591 (1433891-A)) handles your personal data when you use nexuses.io to book a service or send an enquiry. It is issued under Malaysia's Personal Data Protection Act 2010 (PDPA), in English and Bahasa Melayu. If there is any difference between versions, the English version applies.
Our commitment
We collect only what we need to arrange your booking, and we share it only with the people who need it to deliver your service. We never sell your data.
The Chronicle app is covered by its own Privacy Policy. Chronicle encrypts your medical records on your device, and Nexuses cannot read them. This notice covers bookings and enquiries made on nexuses.io.
What we collect
Contact details
Your name, email address, and WhatsApp number.
Booking details
The services and tests you choose, your preferred date and time, your state and area, your collection method, and the facility you pick.
Health information
The tests and services you choose can reveal information about your health. The PDPA treats this as sensitive personal data, and we handle it that way.
Payment records
The amount paid, payment status, and refund requests. Card details are entered directly with our payment provider, Stripe. Nexuses never sees or stores your card number.
Enquiries
Anything you write to us in an enquiry form or by email.
Website usage
Standard technical data and advertising cookies, described under Cookies and browser storage below.
Why we use it
We use your personal data to arrange and confirm your booking, to coordinate with the partner that will carry out your test or assessment, to take payment and issue receipts and refunds, to contact you about your booking, to answer your enquiries, and to meet our legal and accounting obligations.
We do not use your health information for advertising.
Who we share it with
Licensed partners
The laboratory, facility, or physician delivering your service receives the details they need to do so — typically your name, contact details, and the tests booked.
Stripe
Processes your payment. Stripe receives your payment details and a booking reference.
Resend
Delivers our confirmation and receipt emails.
Cal.com
Used only if you schedule a call with us through our booking calendar.
Our website uses Google Ads to measure how well our advertising works. Google does not receive your booking form details.
Authorities
Only where the law requires it.
Data outside Malaysia
Some of our service providers (Stripe, Resend, Cal.com, and Google) may process data outside Malaysia. We use them only for the purposes above and rely on their contractual data-protection commitments.
Cookies and browser storage
Our booking forms save your progress in your own browser, so you can pick up where you left off. This stays on your device; you can clear it at any time through your browser settings.
Google Ads places cookies to measure advertising performance. You can block or delete cookies in your browser, or manage ad personalisation in your Google account settings.
How long we keep it
We keep booking records for as long as needed to deliver your service and handle any follow-up. Financial records, such as receipts and refunds, are kept for seven years, as Malaysian law requires. After that, we delete or anonymise your data.
How we protect it
Data is sent over encrypted connections, and card payments are handled entirely by Stripe. Within Nexuses, only authorised administrators can access booking data, through our admin inbox and our internal booking system.
If a data breach affects your personal data, we will notify you and the Personal Data Protection Commissioner as the law requires.
Your rights
Under the PDPA, you can ask to access the personal data we hold about you, correct it, withdraw your consent, or limit how we use it. To make a request, email admin@nexuses.io. We will respond within the time the law allows.
Giving us your contact and booking details is necessary to make a booking. If you would rather not provide them, or withdraw consent before your service, we may not be able to complete your booking.
Changes to this notice
We may update this notice from time to time. The date at the top shows when it last changed.
Contact
Questions or requests about your personal data: admin@nexuses.io.
Our Data Protection Officer can be reached at admin@nexuses.io.