E
Elden Contact Us
Legal

Privacy Policy

Last Updated: 28 March 2026 Malaysia

Elden ("we", "us", or "our") is committed to handling personal data with care and transparency. This Privacy Policy describes how we collect, use, store, and protect personal information in the course of operating our AI services business. It applies to all individuals who visit our website at myfluxnest.site or engage with our services.

This policy is prepared in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

1. Data Controller

The data controller responsible for your personal data is:

  • Business Name: Elden
  • Address: 52 Jalan Tun Perak, 50050 Kuala Lumpur, Malaysia
  • Email: [email protected]
  • Phone: +60 3-2617 4385

2. Information We Collect

We collect personal data only when you provide it to us directly or when it is generated through your use of our website. This may include:

2.1 Information You Provide

  • Full name
  • Email address
  • Phone number (optional)
  • Organisation or job title (optional)
  • Message content submitted through contact forms

2.2 Automatically Collected Information

  • IP address and approximate location
  • Browser type and operating system
  • Pages visited and time spent on each
  • Referring URLs
  • Cookie and tracking data (see our Cookie Policy)

2.3 Information from Third Parties

We may receive information about you from analytics services or advertising platforms where you have previously consented to share data with them.

3. Legal Basis for Processing

Under the PDPA, we process personal data on the following bases:

  • Consent: Where you have given explicit consent, such as when submitting a contact form or accepting optional cookies.
  • Contractual necessity: Where processing is needed to fulfil an engagement or respond to a service enquiry.
  • Legitimate interests: Where we have a genuine business reason, provided this does not override your rights — for example, analysing website usage to improve our service.
  • Legal obligation: Where we are required by Malaysian law to retain or share data.

4. How We Use Your Information

We use the personal data we collect for the following purposes:

  • Responding to enquiries submitted through our contact form
  • Managing client engagements and service delivery
  • Sending relevant communications about our services where you have consented
  • Improving our website based on usage patterns
  • Meeting legal and regulatory requirements
  • Preventing fraud and ensuring website security

We do not use your personal data for automated decision-making that produces legal effects without human review.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:

  • Contact form submissions: Retained for up to 24 months from last interaction
  • Client engagement records: Retained for 7 years from completion of engagement, as required for financial and contractual records
  • Analytics data: Aggregated and retained for up to 26 months; raw data is deleted at 14 months
  • Cookie consent records: Retained for 12 months

6. Data Sharing

We do not sell your personal data. We may share it with the following categories of third parties where necessary:

  • Service providers: Cloud hosting, email delivery, and analytics platforms acting on our instructions
  • Professional advisers: Legal, accounting, or audit firms under confidentiality obligations
  • Regulatory bodies: Where required by Malaysian law or court order

Any third party receiving personal data on our behalf is required to handle it in accordance with this policy and applicable data protection law.

7. Data Protection Measures

We take the security of personal data seriously and have implemented the following measures:

  • Data transmitted to and from our website is encrypted using TLS/HTTPS
  • Access to personal data is restricted to authorised personnel on a need-to-know basis
  • Internal data handling procedures are reviewed periodically
  • We maintain a process for identifying and responding to data security incidents

While we take reasonable precautions, no online system can be considered entirely secure. We encourage you to use strong, unique credentials if you have any account with us.

8. Cookies

We use cookies and similar tracking technologies on our website. These are described in detail in our Cookie Policy. You can manage your cookie preferences at any time through that page.

9. Your Rights Under PDPA

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

  • Right of access: You may request a copy of the personal data we hold about you.
  • Right of correction: You may request correction of inaccurate or incomplete personal data.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. This does not affect processing carried out before withdrawal.
  • Right to object: You may object to processing for direct marketing purposes.
  • Right to limit processing: In certain circumstances, you may request that we restrict how we use your data.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. We may need to verify your identity before acting on a request.

If you are dissatisfied with how we handle your data or respond to a request, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

10. Third-Party Links

Our website may contain links to external websites operated by third parties. This Privacy Policy applies only to Elden's website and services. We are not responsible for the privacy practices of third-party sites, and we encourage you to review their policies independently.

11. Children's Privacy

Our services are intended for organisations and professionals. We do not knowingly collect personal data from individuals under 18 years of age. If you believe we have inadvertently collected such data, please contact us at [email protected] so we can take appropriate action.

12. International Data Transfers

Our primary operations are based in Malaysia. Where we use third-party services that process data outside Malaysia, we take steps to ensure that appropriate protections are in place, consistent with the PDPA and applicable guidance from the Malaysian regulator.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the "Last Updated" date at the top of this page. Material changes will be communicated where we have your contact details. Continued use of our website after an update constitutes acknowledgement of the revised policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle personal data, please reach out:

  • Email: [email protected]
  • Phone: +60 3-2617 4385
  • Address: 52 Jalan Tun Perak, 50050 Kuala Lumpur, Malaysia