Privacy Policy and Personal Data Protection Notice
 

Bahasa Malaysia
 

Metamorph Nexus, operated by METAMORPH NEXUS GLOBAL (Registration No. 202503085681 (KT0588536-A)), Kuala Lumpur, Malaysia. Effective date: 18-10-2026. Website: www.metamorphnexus.com
 

This notice is issued in English and Bahasa Malaysia under section 7(3) of the Personal Data Protection Act 2010. Both versions are intended to say the same thing. If you notice a difference between them, please tell us and we'll correct it.
 
The short version
 

We collect what you put in our Growth Diagnosis form and basic information about how people use this website. We use it to reply to you, decide whether a session makes sense and keep the site working.
 

We don't sell your information, and contacting us never adds you to a mailing list. Some of our tools, including Wix, Google and the AI assistants we use, may store or process it outside Malaysia. You can ask to see, correct or delete what we hold by emailing info@metamorphnexus.com.
 
1. Who we are
 

Metamorph Nexus is operated by METAMORPH NEXUS GLOBAL, a business name registered in Malaysia in 2025 under Registration No. 202503085681 (KT0588536-A). Renewal of this registration is pending. Under the Personal Data Protection Act 2010, we are the data controller responsible for the personal data we collect through www.metamorphnexus.com and in the course of our work.
 

Rick Bawa, our founder, is accountable for how we handle personal data. Any question about this notice reaches him at info@metamorphnexus.com.
 
2. What we collect
 

When you request a Growth Diagnosis. The form asks for your name, email address, company or organisation name and your answers to two questions: what is getting in the way in your business and what you would most like to improve. Your phone or WhatsApp number and your website address are optional. Sending the form doesn't subscribe you to any mailing list.
 

If we go on to speak, we keep relevant notes from our emails, meetings and any work we agree. We only record or transcribe a session, including with an AI note-taker, if we ask you first and you agree.
 

When you use the website. Our website platform and any analytics tools we use record technical information such as your IP address, approximate location, browser and device, the pages you visit, how you arrived and how you use links and forms. Section 7 explains how cookies are used on our website.
 

When you email us. We keep your contact details and our correspondence so we can reply and follow up.
 

Please don't send passwords, identity card or passport numbers, bank or card details, health information or other sensitive personal data through our forms. Leave out confidential information about other people unless you're authorised to share it.
 
3. Where it comes from
 

Almost everything we hold comes directly from you. Technical information comes from our website platform. If you give us information about someone else, such as a colleague, please make sure you're entitled to share it.
 
4. What we use it for
 

We use your information to:
 

• read and assess your Growth Diagnosis request
• arrange and run your 60-minute online session if we offer one
• reply to you and follow up on an enquiry, session or engagement you've started
• send our newsletter once it launches, but only if you've chosen to subscribe
• understand how the website is used and improve it, using aggregated figures wherever we can
• keep the business, accounting and tax records Malaysian law requires

 

We won't use your information for an unrelated purpose without telling you first and, where the law requires it, asking for your consent.
 
5. What you must provide
 

To review a Growth Diagnosis request, we need your name, email address, company or organisation name and your answers to the two questions. Without them we can't assess your request or reply to it. Everything else on the form is optional.
 

Sending a request doesn't guarantee a session. A person reads every request and, if a session makes sense, sends you a private link to book a time.
 
6. Marketing emails
 

We're planning a weekly newsletter with practical business advice, insights, guides and occasional news about our services. It isn't running yet. When it launches, you'll be able to subscribe through a sign-up form on our website or an optional box, unticked by default, on our Growth Diagnosis form, and we'll ask new subscribers to confirm their subscription. We'll only send it to people who have chosen to receive it. Contacting us or booking a session never subscribes you.
 

Every newsletter will include an unsubscribe link, and you can also email us to stop. Unsubscribing has no effect on your enquiry or any work with us. We never sell personal data or share it with others for their own marketing.
 
7. Cookies and analytics
 

Cookies are small files your browser stores so a website can work, remember your choices and measure visits. When you first visit our website, a cookie banner lets you accept or reject non-essential cookies, and you can change your choice at any time using the privacy settings button on the page. At present, our website uses only the essential cookies set by our website platform, Wix, and by Usercentrics, the provider of our cookie banner, which records your consent choice. The banner's standard wording is set by its provider; this notice describes what our website actually uses. Before we add any non-essential cookies, such as analytics or advertising cookies from other providers, we'll update this notice first.
 

Essential cookies keep the site secure and working. They can't be switched off.
 

We use Wix's built-in site statistics to see which pages people visit, how they found us and where the site could work better. We don't currently use Google Analytics, Google Tag Manager or any other third-party measurement tool. If we add one, we'll update this notice first.
 

We don't use advertising or retargeting cookies or pixels. If we ever add them, we'll update this notice and ask for your consent first. You can also block or delete cookies in your browser, though some parts of the site may then not work as expected.
 
8. Who we share it with
 

We share personal data only with the following classes of third parties, and only as much as each needs:
 

• Website platform: Wix hosts our website, forms and form submissions and provides Wix Analytics
• Consent management: Usercentrics, which provides our cookie banner and records your consent choices
• Business email, scheduling and meetings: Google Workspace, including Gmail, Google Calendar and Google Meet
• AI assistant providers: as described in section 9
• Professional advisers such as accountants or lawyers, where needed to run the business
• Government, regulatory or law enforcement authorities, where the law requires it

 
9. How we use AI
 

AI is part of how we work, so we'll be specific about it. We use AI assistants to help organise information, draft notes and prepare for sessions. Where it helps, that can include what you submit in a Growth Diagnosis request and notes from our conversations. We do this ourselves, case by case. Our enquiry form doesn't send submissions to any AI service automatically.
 

These rules apply:
 

• A person reads every Growth Diagnosis request and makes every decision about whether to offer a session. No decision about you is made by automated means alone.
• Some AI services may use what you enter to improve their models unless that setting is switched off. We're reviewing the settings of each AI service we use and intend to switch model training off wherever that option is available.
• Our working principle is to share only what a task needs and to leave out names, contact details and other identifiers where they aren't needed.
• Before we put a client's confidential business information or personal data into an external AI service, we'll ask for the client's approval. We're building this step into our client onboarding and delivery procedures.

 
10. Transfers outside Malaysia
 

Wix, Google, Usercentrics and our AI assistant providers operate internationally, so your information may be stored or processed outside Malaysia, including in the United States. We only transfer personal data in ways the Personal Data Protection Act 2010 permits, and we choose providers that apply recognised security and data protection standards.
 
11. Keeping it secure
 

We use established providers, such as Wix and Google, that run their own security programmes. Only our founder currently has administrative access to our website. We're reviewing the security settings on each of our business and AI accounts, including two-step verification. No website, email service or storage system is completely secure.
 

If a personal data breach is likely to cause you significant harm, we'll tell you without unnecessary delay and notify the Personal Data Protection Commissioner as the law requires. If you think information you shared with us has been misused, email info@metamorphnexus.com.
 
12. How long we keep it
 

Growth Diagnosis requests that don't go ahead
Kept only as long as reasonably necessary to deal with your request and any follow-up, then deleted
 

Client records and correspondence
For the engagement and only as long afterwards as reasonably necessary, unless you ask us to keep them or we need them for a legal claim. Invoices and contracts are kept as business records.
 

Business, accounting and tax records
At least seven years, as Malaysian tax law requires
 

Newsletter subscription (once launched)
Until you unsubscribe; we then keep only your email address on a do-not-contact list
 

Website analytics
Held by Wix under its standard settings; we don't currently use any other analytics tool
 

We're putting documented retention and deletion procedures in place and will update this notice when they're adopted. Copies may remain briefly in our providers' backups before they're overwritten.
 
13. Your rights
 

You can ask us to:
 

• tell you what personal data we hold about you and give you a copy
• correct information that is inaccurate, incomplete or out of date
• stop or limit processing that is causing, or is likely to cause, substantial and unwarranted damage or distress to you or someone else
• withdraw your consent where we rely on it, such as for our newsletter once it launches
• stop sending you marketing at any time
• send your personal data directly to another organisation you choose, where this is technically feasible and the data format is compatible
• delete your information, unless we need to keep it to meet a legal obligation or deal with a legal claim

 

Email info@metamorphnexus.com to make a request. We may ask you to confirm your identity first. We'll respond to requests to access or correct your data within 21 days of receiving them. If we need more time, we'll tell you in writing before that period ends and complete the request within a further 14 days. We don't normally charge for requests. If we ever need to charge the fee the law allows for a copy of your data, we'll tell you before we proceed. In some cases the law allows us to refuse a request, for example if meeting it would reveal personal data about someone else. If that happens, we'll explain why in writing.
 

If you're not satisfied with our response, you can complain to the Personal Data Protection Commissioner through www.pdp.gov.my.
 
14. Links to other websites
 

Our website links to LinkedIn and other external sites. They collect information under their own privacy policies, which we don't control, so check those before sharing personal details.
 
15. Children
 

Our website and services are for businesses and working professionals. They aren't directed at anyone under 18, and we don't knowingly collect their personal data. If you believe a child has sent us information, contact us and we'll delete it.
 
16. Changes to this notice
 

We'll update this notice when our practices, tools or legal obligations change, and publish the new version here with a new effective date. If a change materially affects how we use your information, we'll give you any further notice or choice the law requires.
 
17. Contact us
 

Metamorph Nexus, operated by METAMORPH NEXUS GLOBAL
 

Registration No. 202503085681 (KT0588536-A)
 

Kuala Lumpur, Malaysia
 

Email: info@metamorphnexus.com
 

Website: www.metamorphnexus.com