PDPA Notice

01 About this notice

Care Nest Sdn. Bhd. is the data user responsible for your personal data. We are committed to processing your data lawfully, fairly and transparently in accordance with the PDPA. This notice should be read together with our Privacy Policy.

02 Personal data we process

• Identity and contact data: name, MyKad/passport number, email, phone, address
• Sensitive personal data: health and medical information you provide to arrange care
• Booking and transaction data: services booked, schedules and payment records
• Caregiver verification data: credentials, certifications and background screening

03 Purpose of processing

We process your personal data to:

• Provide and manage caregiving services and bookings
• Match families with suitable, verified caregivers
• Process payments and maintain records
• Verify caregiver identity and credentials
• Communicate service updates and comply with legal obligations

04 Consent

By providing your personal data and using the Platform, you consent to its processing as described in this notice. For sensitive personal data, we obtain your explicit consent at the point of collection. You may withdraw consent at any time by contacting us, though this may affect our ability to provide services to you.

05 Disclosure of personal data

Your personal data may be disclosed to:

• Caregivers you book, to the extent needed to deliver care
• Licensed payment processors to complete transactions
• Service providers bound by confidentiality obligations
• Government or regulatory authorities where required by law

We do not transfer your personal data outside Malaysia unless adequate protection is ensured in accordance with the PDPA.

06 Your rights: access & correction

Under the PDPA, you have the right to request access to and correction of your personal data, to limit its processing, and to withdraw consent. You may also ask us to delete your account: we anonymise your personal details, while booking, payment and payout records are kept for 7 years as required by law, no longer identifying you.

To make a request, send an enquiry through our Contact page with the topic “Data privacy request”. We may charge a prescribed fee for access requests and will respond within 21 days.