Privacy Policy
Last updated: 6 September 2026
NexFlowsTech ("we", "our", or "us") is committed to handling personal information responsibly and in line with Malaysia's Personal Data Protection Act 2010 (PDPA). This operational policy explains what we handle on this website and when delivering the Paid Lead-to-Booking System or 30-Day Enquiry & Quote Recovery.
1. Information we may receive
- Contact details and business context that you choose to share by email or during a fit call.
- Scheduling information you provide directly to Cal.com when you choose to book a call. Cal.com handles that interaction under its own terms and privacy policy.
- Campaign, funnel, appointment, sales-process, and recovery information that a client gives NexFlowsTech access to for agreed delivery. This may include source, stage, owner, appointment status, proposal status, contact eligibility, follow-up status, and won or lost outcome.
- Basic website usage information from analytics tools configured for the site, such as page path, event location, service-interest label, non-personal destination labels, and campaign parameters.
2. The readiness check
The Paid Lead-to-Booking Readiness Check calculates a result in your browser. It does not send or store your answers, names, email address, phone number, company name, or free text. If analytics is available, the site may send only the allowed result band: pilot_ready, needs_foundation, or not_suitable, together with safe page and event context.
3. How we use information
- Respond to enquiries and arrange a fit call when you request one.
- Assess, scope, and deliver agreed campaign, qualification, booking, pipeline, reporting, training, handover, and recovery work.
- Keep client-controlled account, campaign, appointment, sales-process, and approved recovery information organised for the agreed delivery.
- Understand website engagement and improve the clarity and reliability of the site.
- Meet legal, security, accounting, and contractual obligations.
4. Vendors and analytics
The website links to Cal.com for optional scheduling. We use Cloudflare Web Analytics where configured to understand basic traffic and performance trends. Google Analytics 4 is not enabled by default in this static handoff; if it is enabled later, the measurement, consent, and vendor details will be updated before collection begins.
Analytics must not receive names, email addresses, phone numbers, company names, diagnostic answers, form values, free text, full URLs, booking details, or customer-record content. The site may send a fixed service-interest label such as paid_booking or recovery. UTM values are used only for the current page event and are not placed in local storage or cookies by the site.
5. Client-controlled delivery data
For delivery, the client remains responsible for its CRM, advertising, calendar, messaging, and other third-party accounts unless the agreed scope states otherwise. The client decides what customer data is collected, has the lawful basis and notices required for its use, and controls access and retention inside those accounts. NexFlowsTech uses accessed information only for the agreed work and does not use recovery records for unrelated outreach.
6. Sharing and retention
We do not sell personal information. We share information only with service providers or professional advisers needed for the requested scheduling, delivery, security, or legal obligation. We retain information only as long as necessary for the purpose, the contract, legitimate operational records, or applicable law. Client account and customer records remain subject to the client-controlled system's retention settings.
7. Your rights
Subject to applicable law, you may ask to access, correct, or withdraw consent for personal information we hold about you. Contact customer@nexflowstech.com. You may also contact Malaysia's Personal Data Protection Commissioner where appropriate.
8. Contact
Questions about this policy or the website? Email customer@nexflowstech.com.