Privacy Policy

This Privacy Notice for Steven Nagendran ("I," "me," or "my") describes how and why I might access, collect, store, use, and/or share ("process") your personal information when you use my services ("Services"), including when you:

• Visit my website at https://www.steven.com.my, or any of its associated domains (steven.my, stevelinux.com, stevennagendran.com and stevennagen.com) that link to this Privacy Notice
• Contact me about training, consulting, speaking or collaboration, or engage with me in other related ways

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. I am responsible for making decisions about how your personal information is processed. If you do not agree with these practices, please do not use the Services. If you still have any questions or concerns, please contact me at [email protected].

1. What information do I collect?

In short: I collect the personal information that you provide to me, plus limited technical data needed to run the website.

Personal information you disclose to me. I collect personal information that you voluntarily provide when you express an interest in my services, use the contact form, or otherwise contact me. This may include:

• Names
• Email addresses
• Phone numbers
• Organisation or company name
• Enquiry type and the content of your message
• Contact preferences

Sensitive information. I do not process sensitive information. All personal information that you provide must be true, complete and accurate, and you should let me know of any changes.

Information automatically collected. Like most websites, the servers hosting this site automatically record limited technical information when you visit, such as your IP address, browser type, operating system, referring URL, pages requested and date/time stamps. This information does not reveal your identity and is used only to keep the website secure and running. This website does not use analytics, advertising or tracking cookies.

Web fonts. This website loads fonts from Google Fonts. To deliver them, your browser connects to Google's servers, which receive your IP address and browser information. See the Google Privacy Policy.

Information collected from other sources. I do not obtain personal information about you from data brokers, marketing partners or public databases. If you contact me through a third-party platform such as LinkedIn or WhatsApp, that platform's own privacy policy also applies.

2. How do I process your information?

In short: I process your information to respond to you, deliver the services you ask for, keep the website secure and comply with the law.

I process your personal information for the following purposes:

• To respond to enquiries and offer support. To reply to your message and answer questions about training, consulting, speaking or collaboration.
• To deliver the services you request. To prepare proposals and quotations, and to plan and deliver agreed engagements.
• To send administrative information. To send you details related to an engagement, such as schedules, materials or changes to these terms.
• To protect the website. To keep the Services safe and secure, including detecting and preventing abuse and spam.
• To comply with legal obligations. Such as keeping business and tax records.
• To save or protect an individual's vital interest. Where necessary to prevent harm.

I do not use your information for targeted advertising, and I will not send you marketing messages unless you have asked to receive them.

3. What legal bases do I rely on to process your information?

In short: I only process your personal information when I have a valid legal reason to do so under applicable law.

If you are in Malaysia, your personal information is processed with your consent, which you give when you submit an enquiry, and in line with the Personal Data Protection Act 2010. See the PDPA Notice.

If you are in the EU or UK, the GDPR and UK GDPR require me to explain the legal bases I rely on:

• Consent. Where you have given permission for a specific purpose. You can withdraw your consent at any time.
• Performance of a contract. Where processing is needed to deliver an engagement, or to take steps at your request before entering into one.
• Legitimate interests. Where processing is reasonably necessary to respond to professional enquiries and keep the website secure, and those interests do not override your rights and freedoms.
• Legal obligations. Where processing is needed to comply with the law, such as tax record-keeping or a lawful request from an authority.
• Vital interests. Where processing is needed to protect your vital interests or those of another person.

More detail is available in the GDPR Notice.

4. When and with whom do I share your personal information?

In short: Only with the service providers needed to run this website and deliver your message, with partners you agree to, or where the law requires it.

I may share your personal information in the following situations:

• Service providers. The website hosting provider, the service that forwards contact form submissions to my inbox, and my email provider. They process data only on my behalf to provide their service.
• Engagement partners. Where you request training or consulting that is delivered with a training centre or partner organisation, I will share only the details needed to arrange it, and only with your agreement.
• Legal requirements. Where disclosure is required by law, regulation, court order or a lawful request from a public authority.

I do not sell, rent or trade your personal information.

5. Do I use cookies and other tracking technologies?

In short: No. This website does not use analytics, advertising or tracking cookies.

This website does not set its own cookies and does not use tracking technologies such as web beacons, pixels or analytics tools. Details, including third-party content such as web fonts, are set out in the Cookie Policy.

6. How long do I keep your information?

In short: I keep your information only as long as necessary for the purposes in this notice, unless the law requires otherwise.

I will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax or accounting requirements).

• Enquiries that do not lead to an engagement are kept for no longer than 2 years.
• Records related to an engagement, such as proposals and invoices, are kept for up to 7 years to meet Malaysian tax and accounting requirements.

When there is no ongoing need to process your personal information, I will delete or anonymise it. If this is not possible (for example, because it is stored in backup archives), I will securely store it and isolate it from any further processing until deletion is possible.

7. How do I keep your information safe?

In short: I protect your personal information through organisational and technical security measures.

I have implemented appropriate and reasonable technical and organisational measures to protect the personal information I process, including encrypted connections (HTTPS) and restricted access to enquiry data. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so I cannot promise that unauthorised third parties will never be able to defeat these safeguards. Although I will do my best to protect your personal information, transmission of personal information to and from the Services is at your own risk.

8. Do I collect information from minors?

In short: I do not knowingly collect data from children under 18 years of age.

I do not knowingly collect or solicit personal information from children under 18 years of age, or the equivalent age specified by law in your jurisdiction. If I learn that personal information from a minor has been collected, I will take reasonable measures to promptly delete it. If you become aware of any such data, please contact me at [email protected].

9. What are your privacy rights?

In short: Depending on where you are located, you have rights that give you greater access to and control over your personal information.

Depending on applicable law, these may include the right to:

• Request access to, and a copy of, your personal information
• Request correction of inaccurate or incomplete information
• Request erasure of your personal information
• Restrict or object to processing
• Data portability, where applicable
• Withdraw your consent at any time

Malaysia: your rights under the PDPA are described in the PDPA Notice. You may also complain to the Personal Data Protection Department (JPDP).

EU / UK: your rights under the GDPR are described in the GDPR Notice. You may also complain to your local data protection authority.

Withdrawing your consent: you can withdraw your consent at any time by contacting me using the details in How can you contact me about this notice?. This will not affect the lawfulness of processing carried out before you withdrew it.

Cookies and similar technologies: most web browsers accept cookies by default. You can usually set your browser to remove or reject cookies. See the Cookie Policy.

10. Controls for Do-Not-Track features

Most web browsers include a Do-Not-Track ("DNT") setting that signals your preference not to have your online browsing activities monitored. This website does not track visitors across websites or build browsing profiles, so there is no tracking for a DNT signal to switch off. If this changes in the future, I will update this Privacy Notice.

11. Do I make updates to this notice?

In short: Yes, I will update this notice as needed to stay compliant with relevant laws.

I may update this Privacy Notice from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. If I make material changes, I may notify you by posting a prominent notice on this website. I encourage you to review this Privacy Notice regularly.

12. How can you contact me about this notice?

If you have questions or comments about this notice, email me at [email protected], call or WhatsApp +60126049973, or use the contact page. I am based in Kuala Lumpur, Malaysia.

13. How can you review, update, or delete the data I collect from you?

Depending on the laws of your country, you may have the right to request access to the personal information I hold about you, details of how I have processed it, correction of inaccuracies, or deletion of your personal information. You may also withdraw your consent to processing. To make a request, email me at [email protected].