This Privacy Policy explains how Nurha Consultancy ("we") handles your personal information when you use eFaraid ("the Service"). By using the Service, you agree to the practices described here.
1. Information we collect
- Account information: name, email address, password (stored as a hash), and profile photo if you sign in via Google.
- Calculation data: heir details, estate values and faraid cases you save. This data belongs to you and is stored so you can reopen your cases.
- Client data (for consultants): information and documents uploaded by consultants on behalf of their clients.
- Transaction information: records of purchases, consultation bookings and orders. Payments are processed by a third-party gateway (CHIP); we do not store your full card numbers.
- Technical data: IP address, browser type and session cookies to maintain your login and language preference.
2. How we use it
- To provide and maintain the Service (calculations, case storage, classes, consultations and purchases).
- To process payments and send receipts or invoices.
- To send administrative emails and notifications related to your account or bookings.
- To improve security, prevent fraud and comply with legal obligations.
3. Disclosure to third parties
We do not sell your personal information. We only share data with service providers necessary to operate the Service, namely:
- The payment gateway (CHIP) to process transactions.
- Email providers and server hosting.
- Google, if you choose to sign in using your Google account.
- Google Meet and Zoom, to generate online consultation session links where applicable.
- Artificial intelligence providers (Anthropic or OpenAI), only when you use the AI assistant feature — the questions you type are sent to these providers to generate answers and may be processed outside Malaysia. Avoid including personal information in your questions.
- Error-monitoring (Sentry) and cookieless website analytics, to maintain stability and improve the Service. This data may be processed outside Malaysia.
- Administrator notification channels (Telegram/WhatsApp), to alert us about new bookings or support messages — may contain your name and a short message excerpt.
- Authorities when required by law.
4. Storage, retention periods and security
We maintain reasonable security measures including password hashing and HTTPS connections. Data is kept for as long as your account is active or as needed for the stated purposes. However, no transmission over the internet is 100% secure.
Specific retention periods we practise:
- Bookings, orders and registrations that are never completed (unpaid) are deleted after 90 days.
- In-app notifications are deleted after 6 months (read) or 12 months (all).
- Resolved error reports and death certificate files for reviewed Sampul claims are deleted after 12 months.
- Paid transaction records are retained to meet accounting and legal obligations; personal information in old records is anonymised after the tax retention period (about 7 years).
- When you delete your account, your case data, documents and uploaded files are also deleted, and stored third-party meeting connections (Google/Zoom) are removed.
5. Your rights under the PDPA
- Access and correct your personal information via the Settings page.
- Withdraw consent or request deletion of your account.
- Limit how your data is processed for marketing purposes.
6. Cookies
We use essential cookies only to maintain your login session and language preference. We do not use third-party advertising cookies.
7. Contact us
For any privacy questions or to exercise your rights, contact us at nurhaproduction@gmail.com.
This Service is operated by Nurha Consultancy (Registration No. 202203240284 (CT0111871-H)), registered under Akta Pendaftaran Perniagaan 1956, located at Lot 3000, Kg Patek, Kadok, 16450 Ketereh, Kelantan.