PERSONAL DATA PROTECTION ACT 2010 NOTICE
In accordance with the personal data protection Act 2010, We, EXPLORASI CINTA TRAVEL AND TOURS SDN BHD (hereafter referred to as ‘we’ or ‘our’ or ‘us’) are issuing this Notice to all of our customers or prospective customers that we care about the privacy of your personal data. Through this Notice we hope that you will understand how your personal data is collected, used, processed, disclosed or shared with any third party, and how we always take the necessary precaution to ensure the confidentiality and security of your personal data.
1. Collection of Personal Data
Once you start dealing with us, in order to ensure that the tour packages, services or products requested by you or entered into our system can be executed smoothly and effectively, we will ask for your personal data. This can be in any manner, whether through email, web site, phone, fax, credit card payment authorization form or when you visit our premises for package booking.
2. Nature of Personal Data
The term ‘Personal Data’ refers to the information that is collected by us to identify or to distinguish our customers. This personal data includes but it not limited to information such as your name, company name, job position, age, identity card number, passport details, home address, gender, date of birth, marital status, medical report, job position, contacts, bank or credit card details, email address, race, country origin or nationality.
3. Purpose of collecting Personal Data
Your personal data is collected, used, processed, or shared by us for, amongst others, are for the following purposes:
-
To fulfil the needs of processing your bookings, room reservation, ferry ticket reservations, or for handling and arrangement of transportation;
-
To process invoices/receipts to you and payments by you either by online fund transfer or credit card;
-
To fulfil contractual obligations with our business agents or parties which are involved in the process packages and transportation arrangement;
-
For accounts and records maintained in order to meet the needs of statutory requirements;
-
For delivery of notice of any promotional package or product provided;
-
To fulfil the regulatory requirements, directives or orders from any legal body or the court.
4. The Impacts of Failure to Supply Required Personal Data
Failure to provide the required personal data may result in the following:
-
We will be unable to process the package booking or services that you have requested;
-
We will be unable to arrange the transport for the requested package;
-
We will be unable to update or inform you about the status of your booking;
-
We will be unable to deliver the notices about prices changes, promotions of our packages or other products;
-
We will be unable to contact any emergency referral in case of an emergency
5. Disclosure of Personal Data
We may disclose or share your personal to the parties involved in the process and handling the package or services requested by you. The parties are as follows:
-
Statuary bodies regulatory authorities or government where we had to or required to do so under the instructions of the law or court order, for example, the Ministry of Tourism, customs and others;
-
Professional bodies such as audit and accounting firms, lawyers, insurances providers or financial agents such as banks and credit card companies;
-
Our partners or contractual services providers of our company e.g. other travel agents, resorts, hotels, ferry companies, tourism bus providers and others.
6. User Consent
When you provide your personal data to us, you are assumed to have fully understood the contents of this Notice and have agreed to allow us to use, process and disclose your personal data to fulfil any of your requests or services that you requested us.
7. Personal Data Retention Period
We will not keep your personal data longer than necessary to fulfil the purpose of your request. Your personal data may only be retained in our system or premises in a more reasonable period of time by the requirements of legal authorities or the statutory bodies in accordance with the period specified by law.
8. Security and Protection of Personal Data Confidentiality
To ensure that your personal data is processed, used and stored securely, we strive to take appropriate and reasonable ways to ensure that only the authorized employees and agents who have demonstrated responsibility for its confidentiality can access your personal data.
9. Rights of Access and Correction of Personal Data
You have the right to access your personal data, the limitations of your personal data processed by us or correct your personal data held by us for any inaccuracy (includes incompleteness or out-of-date status).
10. In General
Generally, your personal information will not be shared or disclosed to others without your permission. We wish to inform you that we reserve the right to amend this Notice from time to time if there are any changes in accordance with the provisions of law.