Privacy Policy

How we collect, use, and protect your personal information

Last Updated: January 30, 2026

1. Introduction

Nxwlto ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, or interact with us in any way.

This policy is compliant with the Personal Data Protection Act 2010 (PDPA) of Malaysia and outlines your rights regarding your personal information. By accessing or using our services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

  • Contact Information: Name, email address, phone number, mailing address, and company name (if applicable).
  • Project Information: Details about your landscape design needs, property information, and project preferences.
  • Communication Records: Records of your interactions with us, including emails, phone calls, and in-person meetings.
  • Payment Information: Financial information necessary to process payments for our services (handled through secure third-party payment processors).
  • Technical Information: IP address, browser type, device information, and other technical data collected when you visit our website.

2.2 Collection Methods

We collect personal information through various channels, including:

  • Contact forms on our website
  • Email and telephone communications
  • In-person consultations and site visits
  • Cookies and similar technologies (as detailed in our Cookie Policy)
  • Business partnerships and referrals

3. Purpose of Data Collection

We collect and process your personal information for the following purposes:

  • To provide landscape design and implementation services
  • To respond to your inquiries and service requests
  • To prepare project proposals and quotations
  • To manage our client relationships and project implementation
  • To process payments and maintain accounting records
  • To improve our website and services
  • To send relevant updates and communications about our services
  • To comply with legal and regulatory obligations

4. Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds:

  • Consent: You have given clear consent for us to process your personal data for specific purposes.
  • Contract Performance: Processing is necessary to fulfill our contractual obligations to you or to take steps at your request before entering into a contract.
  • Legitimate Interests: Processing is necessary for our legitimate business interests, provided these interests don't override your rights and freedoms.
  • Legal Obligation: Processing is necessary to comply with legal requirements to which we are subject.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:

  • The duration of our ongoing relationship with you
  • Legal obligations that require us to retain data
  • Statute of limitations for potential legal claims
  • Industry best practices

For clients with completed projects, we typically retain relevant personal information for 7 years after project completion to comply with tax and accounting requirements, and to provide ongoing support for installed landscapes.

6. Data Sharing and Disclosure

6.1 Third-Party Service Providers

We may share your personal information with trusted third-party service providers who assist us in operating our business and providing services to you. These providers have access to your personal information only to perform specific tasks on our behalf and are obligated to maintain its confidentiality. Such service providers include:

  • IT and cloud service providers
  • Payment processors
  • Project management software providers
  • Professional advisors (accountants, lawyers, etc.)
  • Subcontractors involved in project implementation

6.2 Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g., court or government agency).

6.3 Business Transfers

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your personal information.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of sensitive data
  • Regular security assessments
  • Access controls and authentication procedures
  • Secure network architecture
  • Staff training on data protection

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal information:

  • Right to Access: You can request access to your personal information that we hold.
  • Right to Correction: You can request correction of your personal information if it is inaccurate, incomplete, misleading, or not up-to-date.
  • Right to Withdraw Consent: You can withdraw your consent to the processing of your personal information at any time.
  • Right to Limit Processing: You can request that we limit the processing of your personal information in certain circumstances.
  • Right to Data Portability: You can request a copy of your personal information in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

9. International Data Transfers

We primarily store and process your personal information in Malaysia. However, some of our service providers may be located in other countries. When we transfer personal information outside of Malaysia, we ensure that adequate safeguards are in place to protect your information in compliance with the PDPA and other applicable data protection laws.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at:

Nxwlto
Attention: Data Protection Officer
Leisure Commerce Square, 9, Jln PJS 8/9, Pjs 8
46150 Petaling Jaya, Selangor, Malaysia
Email: [email protected]
Phone: +60374935188

We will respond to your inquiry as soon as possible and within the timeframe specified by applicable law.