ExtraBrainHub Nexus Logo
ExtraBrainHub Nexus
Corporate Finance Analytics

Privacy Policy

Your data protection and privacy rights matter to us

Last Updated: March 15, 2025
This policy governs how ExtraBrainHubNexus collects, uses, and protects your personal information

Information We Collect

When you interact with our financial education platform, we gather various types of information to provide personalized learning experiences and maintain our services. This includes personal details you provide directly when creating an account or enrolling in our corporate finance programs.

  • Personal identification information including name, email address, and phone number
  • Professional background details such as current role, company, and experience level
  • Learning preferences and course completion data to track your educational progress
  • Payment information processed securely through encrypted third-party payment processors
  • Technical data including IP address, browser type, device information, and usage patterns
  • Communication records when you contact our support team or participate in discussions

We also collect information automatically through cookies and similar tracking technologies. This helps us understand how you navigate our platform and which resources prove most valuable for your learning journey.

How We Use Your Information

Your personal information serves specific purposes related to delivering educational services and maintaining platform functionality. We don't sell your data to third parties or use it for purposes unrelated to your learning experience.

Primary Uses: Course delivery, progress tracking, personalized recommendations, and communication about your enrollment status or important platform updates.

We analyze learning patterns to improve our curriculum and identify areas where students might need additional support. This analysis helps us develop better resources for corporate finance education while maintaining individual privacy.

Marketing communications only occur if you've explicitly opted in, and you can withdraw consent at any time. We believe in earned attention rather than unwanted interruptions.

Data Sharing and Third Parties

We work with carefully selected service providers who help us deliver educational content and maintain platform security. These partners operate under strict confidentiality agreements and can only use your data for specified purposes.

  • Payment processors handle transaction data using industry-standard encryption
  • Email service providers manage course notifications and important updates
  • Analytics tools help us understand platform usage while anonymizing personal identifiers
  • Cloud storage providers maintain secure backups of educational content and user progress
  • Security services monitor for potential threats and unauthorized access attempts

If regulatory authorities in Malaysia require disclosure for legal compliance, we'll provide only the minimum necessary information. We'll notify affected users unless legally prohibited from doing so.

Your Rights and Control

Malaysian privacy laws grant you significant control over your personal information. You can exercise these rights by contacting us directly, and we'll respond within reasonable timeframes.

Access Rights: Request copies of all personal data we hold about you, including learning progress, communications, and account details.

You can correct inaccurate information, delete your account entirely, or restrict how we process specific data types. For students who've completed courses, we may retain certain records for certification purposes even after account deletion.

Data portability means you can request your information in machine-readable formats if you decide to transfer to another educational platform. We'll provide course completion certificates and learning transcripts upon request.

Security Measures

Protecting your information requires multiple layers of security. We employ both technical and administrative safeguards to prevent unauthorized access, alteration, or disclosure of personal data.

All data transmission occurs over encrypted connections, and we regularly update security protocols to address emerging threats. Our staff receives ongoing training about privacy best practices and data handling procedures.

  • End-to-end encryption for sensitive communications and payment processing
  • Regular security audits conducted by independent cybersecurity professionals
  • Multi-factor authentication options for account access protection
  • Automated monitoring systems that detect unusual access patterns
  • Secure data centers with physical access controls and environmental protections

Data Retention and Deletion

We retain personal information only as long as necessary for educational purposes or as required by Malaysian law. Different types of data have different retention periods based on their purpose and legal requirements.

Course enrollment data remains active during your learning period and for two years afterward to support certificate verification. Financial records follow Malaysian accounting standards and are kept for seven years from the transaction date.

Automatic Deletion: Inactive accounts without course enrollments are automatically reviewed after 18 months, with users notified before any data removal.

When you request account deletion, we remove personal identifiers while maintaining anonymized learning statistics for educational research. This helps us improve future courses without compromising individual privacy.

Cookies and Tracking

Our platform uses cookies to enhance your learning experience and remember your preferences. You can control cookie settings through your browser, though some functionality may be limited if essential cookies are disabled.

Analytics cookies help us understand which course materials are most effective and where students might struggle. This information guides curriculum improvements and helps us create better educational resources.

We don't use tracking cookies for advertising purposes or share cookie data with marketing networks. Our focus remains on educational improvement rather than commercial targeting.

International Data Transfers

While our primary operations are based in Malaysia, some service providers operate internationally. We ensure adequate protection levels through contractual safeguards and compliance with Malaysian data protection requirements.

Cloud storage and backup services may process data outside Malaysia, but only with providers who demonstrate equivalent privacy protections. We regularly review international transfer arrangements to maintain compliance with evolving regulations.

Changes to This Policy

Privacy practices evolve as technology advances and regulations change. We'll notify users of significant policy modifications through email announcements and prominent platform notices.

Minor clarifications or administrative updates may occur without individual notification, but the effective date will always reflect the most recent changes. We encourage periodic review of this policy to stay informed about your privacy rights.

Major Changes: Any modifications affecting how we collect, use, or share personal information will include 30 days advance notice to all active users.

Privacy Questions or Concerns?

ExtraBrainHubNexus Privacy Team
5, Jalan Udang Harimau 1, Segambut Bahagia
51200 Kuala Lumpur, Wilayah Persekutuan Kuala Lumpur, Malaysia

Email: [email protected]
Phone: +60 19-387 0705

We aim to respond to privacy inquiries within 5 business days