Privacy Policy

1. Who we are

Nusatera is operated by Jusni Iljas Al Djabbar Sdn Bhd (“Nusatera”, “we”, “us” or “our”). This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you use Nusatera, including Discover, Events, Shop, seller services, newsletters and related support channels.

2. Personal data we may collect

Depending on how you interact with Nusatera, we may collect:

• identity and account information, such as name, username and account details;
• contact information, such as email address, telephone number and delivery or billing address;
• transaction information, including orders, refunds, payment status and related records;
• seller or business information supplied for marketplace onboarding and operation;
• event registration, attendance or participation information;
• communications, support enquiries, reviews and other content you submit;
• newsletter preferences and records of marketing consent;
• technical and usage information, such as IP address, device/browser information, cookies, pages viewed and interactions with the platform.

3. How we collect personal data

We may collect personal data directly from you, automatically when you use the platform, from sellers or service providers involved in fulfilling your transaction, and from third parties where permitted by law.

4. Why we process personal data

We may process personal data to:

• create and manage accounts;
• operate the marketplace, process orders and support payments, delivery, returns and refunds;
• onboard and support sellers and other platform participants;
• manage event registrations and participation;
• provide support and respond to enquiries;
• send marketing communications where you have chosen to receive them;
• personalise and improve Nusatera, measure performance and protect the platform from misuse;
• maintain records, resolve disputes, enforce our terms and comply with legal or regulatory obligations.

5. Required and optional information

Some information is required for us to provide a service, such as fulfilment information for an order or contact information for an account. Where information is optional, you may choose not to provide it. If required information is not provided, we may be unable to provide the relevant service or complete a transaction.

6. Who we may share personal data with

Where necessary for the purposes described above, we may share relevant personal data with:

• sellers and marketplace participants involved in your transaction;
• payment, banking and fraud-prevention providers;
• delivery, logistics and fulfilment providers;
• hosting, technology, analytics, communications and customer-support providers;
• event organisers, venues and operational partners where required for an event you join;
• professional advisers, auditors, insurers, regulators, law-enforcement bodies or other authorities where permitted or required by law.

We do not sell your personal data as a standalone product.

7. Payments

Payment transactions may be processed by third-party payment providers. Nusatera may receive transaction identifiers, payment status, limited payment-related information and records needed for reconciliation, support, refunds and fraud prevention. We do not intend to store complete payment-card credentials where the payment provider processes those credentials directly.

8. Cookies and similar technologies

We may use essential cookies and, subject to applicable consent requirements, analytics or marketing technologies. More information will be available in our Cookie Notice and Manage Preferences controls.

9. Cross-border processing

Some service providers may process or store personal data outside Malaysia. Where personal data is transferred across borders, we will take steps required by applicable Malaysian law to protect the data and manage the transfer appropriately.

10. Security

We use administrative, technical and organisational safeguards intended to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction. No online service can guarantee absolute security.

11. Retention

We retain personal data for as long as reasonably necessary for the purposes for which it was collected, including transaction, accounting, dispute, security and legal requirements. When data is no longer required, we will take reasonable steps to delete, destroy or anonymise it, subject to applicable retention obligations.

12. Your choices and rights

Subject to applicable law, you may request access to personal data we hold about you, ask us to correct inaccurate or incomplete data, withdraw consent where processing relies on consent, limit certain processing, and object to or stop direct marketing communications. Additional rights may apply under Malaysian law as it develops.

Requests can be made through our Contact Us page. We may need to verify your identity before acting on a request.

13. Marketing communications

Marketing subscriptions are separate from transactional communications such as order, account, security and event-service messages. You can unsubscribe from marketing communications or update your interests through Manage Preferences when that functionality is available.

14. Data breaches and data protection governance

Where applicable, Nusatera will follow Malaysian requirements concerning personal data breach notification and the appointment or notification of a Data Protection Officer.

15. Children and minors

Nusatera is not intended to knowingly collect personal data from children in circumstances where parental or guardian involvement is legally required. Event-specific or service-specific rules may impose additional age requirements.

16. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our services, technology, business operations or applicable law. The updated version will be posted on Nusatera with a revised effective date.

17. Contact

For privacy enquiries, requests or complaints, please use the Nusatera Contact Us page. Before production launch, this section should be updated with the final privacy contact details and, where applicable, Data Protection Officer contact details.