Personal Data Protection Notice
Your details, handled with care.
This notice explains what personal data we collect on nurafifah.com, why we collect it, who helps us look after it, and the choices you have. It is written under Malaysia’s Personal Data Protection Act 2010, as amended in 2024.
Notis ini juga tersedia dalam Bahasa Melayu.
In short
- We collect only what you type into a form or send us by email, plus basic technical details that our hosting provider records.
- We use it to reply to you, register you and send what you asked for.
- We send news only if you joined the monthly letter or ticked the box for news.
- We never sell your details, and we never ask about your religion, health or ethnicity.
- You can ask to see, correct or delete your details at any time.
On this page
Who is responsible for your data
nurafifah.com and the Myself + AI-Self movement are run by Nur Afifah Samsuddin (Nura). Nura is the data controller. This means she decides how your personal data is used, and she is responsible for it under the law.
To ask anything about your data, write to us through the contact page or reply to any email from us. See How to contact us.
What we collect
We collect only what you choose to type into a form or send to us by email. Each form asks for different things:
Letters from Nura (monthly email)
Your first name and email address.
Ebook download or waiting list
Your first name and email address. If you choose, where you are right now (for example, just started or growing).
Event or webinar registration
Your full name and email address. If you choose: your phone or WhatsApp number, your business or work, where you are right now, how you heard about us, and a short note.
Connection session request
The session you would like, your full name, email address, your first choice of time, and what you would like to talk about. If you choose: your phone or WhatsApp number, a second choice of time, your business, how you would like to meet, and how you heard about us.
Contact form
Your full name, email address, the topic and your message.
Emails you send us
Your email address, your name as it appears in your email, and what you write.
With every form we also keep the language you used, the page you sent it from, the event or ebook it was for, your agreement to this notice, and, where the form has one, whether you ticked the box for news.
Technical details. Netlify, our hosting provider, automatically records basic details when you visit or send a form: your internet (IP) address, your browser type, the page you asked for or came from, and the time. These details help keep the website working and stop spam.
We never ask about your religion, health, ethnicity or family. Please do not put such details in your messages. All the personal data we hold comes from you and your visit to this website.
Why we use it
- To reply to your message or your session request, and to agree a time with you.
- To register you for an event or webinar, and to send you the details and reminders. For webinars, this includes the joining link and the replay.
- To send you the ebook you asked for, or to tell you when it is ready.
- To send you Letters from Nura and news of future events and resources, only if you signed up for the letter or ticked the box for news.
- To plan better programmes. We look at totals, such as how many people heard about us on Instagram, never at one person.
- To keep the website safe and to stop spam and misuse.
- To meet our duties under the law.
We do not sell, rent or trade your personal data. We do not use it for advertising.
This website is separate from the companies Nura leads, Prima Nexus and Neo Nexon. Your details here are kept apart from their customer records and are not passed to them.
Do you have to give us your details?
No one has to use our forms. If you do, the fields marked with a star (*) are required, and you need to tick the box to agree to this notice. Without them, we cannot reply to you, register you or send what you asked for, so the form will not send while one is missing.
Every other field is optional. Leaving it empty changes nothing about the help you get.
The box for news is always optional, and it is never ticked for you.
Who helps us handle your data
We use a small number of services to run this website. They handle your data only for us, and only to do the job below:
Netlify
Hosts this website, receives and stores the forms you send, records the technical details above, and checks form entries for spam.
Resend
Sends our emails to you (confirmations, reminders, ebooks and letters), and passes the emails you send us on to Nura.
Nura’s email inbox
A copy of each form reaches Nura so she can reply. People who help her run events and sessions may see it when they need to.
Online meeting service
Runs our webinars. You will see which service it is in your joining link.
AI helpers
We may use AI tools to help sort messages or draft replies. A person always reads and approves an AI draft before it is sent to you.
Data outside Malaysia. Netlify and Resend are companies based in the United States. Your data may be stored and handled outside Malaysia, on their systems. We use them only to run this website, for the purposes in this notice. When you tick the box to agree to this notice, you agree to this.
We may also share personal data when the law requires it, for example when a court or a government authority with the legal power asks for it.
Events, webinars and photos
- At our in-person events, no photos are taken of you without your consent.
- In our webinars, cameras are optional. A webinar may be recorded so that people who registered can watch the replay. If you speak or write in the chat, that may be in the recording.
- We never publish your photo, your words or a recording of you on this website or in our posts without asking you first.
How long we keep it
We keep personal data only as long as we need it for the reason you gave it:
- Letters from Nura and news
- Until you unsubscribe. After that, we keep only your email address on our “do not email” list, so you are never added again by mistake.
- Event and webinar registrations
- Up to 2 years after the event or webinar.
- Session requests, contact messages and emails
- Up to 2 years after our last conversation with you.
- Ebook requests
- Up to 2 years after your request.
- Technical details
- Only for the short time our hosting provider keeps its records.
After that, we delete the details or remove anything that shows who you are. If the law requires us to keep something for longer, we keep only what is required.
How we keep it safe
- This website uses a secure, encrypted connection (https), so what you type in a form is protected on its way to us.
- Only Nura, and the people who help her when they need to, can open your details.
- If a leak of personal data could cause you significant harm, we will tell the Personal Data Protection Commissioner and you, as the law requires.
No website can promise perfect security, but we take every reasonable step to protect your details.
Cookies
Cookies are small files that a website can save in your browser. This website does not use cookies, and our pages load no tracking or advertising tools.
If we ever add them, we will update this notice first and ask for your agreement where the law requires it.
Your rights and choices
Under the law, you can ask us at any time to:
See your data
Ask what personal data we hold about you, and get a copy. If you wish, we can send it in a common file format.
Correct it
Ask us to fix anything that is wrong, out of date or incomplete.
Withdraw your consent
Change your mind about something you agreed to. This stops future use. It does not undo what was done before.
Unsubscribe
Stop our letters and news at any time. Reply “unsubscribe” to any email from us, or tell us through the contact page.
Limit or stop use
Ask us to stop using your data for news, or in any way that causes you harm or distress.
Delete it
Ask us to delete your details. We will, unless the law requires us to keep something.
We reply to a request to see or correct your data within 21 days, as the law requires. To protect your details, we may first ask you to confirm who you are. If we cannot do what you ask, we will tell you why.
If you are not satisfied with our answer, you may complain to the Personal Data Protection Commissioner through the Personal Data Protection Department.
Children
This website and our forms are meant for adults aged 18 and over. If you are under 18, please ask a parent or guardian to contact us for you. If we learn that we hold a child’s details without a parent’s agreement, we will delete them.
Changes to this notice
We may update this notice when our services or the law change. The date at the top shows when it last changed. If a change affects how we use details you have already given us, we will tell you by email before it applies.
How to contact us
For any question, request or complaint about your personal data, write to Nura through the contact page and say that your message is about your personal data. You can also reply to any email you have received from us.
Questions about your data?
Nura reads every message. Write to us and we will reply, usually within two working days.