Privacy Policy

We use collected information for the following purposes:

• Service Delivery: Processing tour bookings, coordinating accommodations, arranging transportation, and communicating tour details
• Customer Communication: Responding to inquiries, providing tour information, sending booking confirmations, and addressing concerns
• Service Improvement: Analyzing website usage to improve our services, understanding customer preferences, and developing new tour offerings
• Legal Compliance: Meeting regulatory requirements, maintaining business records, and responding to legal requests when necessary
• Marketing Communications: Sending information about new tours or services (only with your consent, and you may opt out at any time)

We process your personal data based on:

• Contract Performance: Processing necessary to deliver tour services you have booked
• Consent: Marketing communications and optional data collection where you have provided explicit consent
• Legitimate Interests: Website analytics, service improvement, and business operations that don't override your privacy rights
• Legal Obligations: Compliance with Malaysian data protection laws and tourism industry regulations

We share personal information only when necessary:

• Service Partners: Highland accommodations, estate contacts, and transportation providers receive necessary information to deliver your tour
• Payment Processors: Secure third-party payment services process transactions (we do not store complete payment card details)
• Analytics Providers: Website analytics services help us understand site usage (see Cookie Policy for details)
• Legal Requirements: We may disclose information when required by law or to protect our legal rights

We do not sell personal information to third parties for their marketing purposes.

We implement appropriate technical and organizational measures to protect your information:

• Encrypted data transmission using SSL/TLS protocols
• Secure storage systems with access controls
• Regular security assessments and updates
• Staff training on data protection practices
• Breach notification procedures complying with regulatory requirements

While we take reasonable precautions, no internet transmission is completely secure. We cannot guarantee absolute security of data transmitted to our website.

We retain personal information for specific periods:

• Booking Information: Retained for seven years after tour completion for accounting and legal purposes
• Marketing Consents: Retained until you withdraw consent or three years of inactivity
• Inquiry Data: Retained for two years after last contact if no booking results
• Website Analytics: Aggregated data retained indefinitely; individual data for 26 months

We delete or anonymize data when retention periods expire unless legal obligations require longer storage.

You have the following rights regarding your personal data:

• Right to Access: Request copies of personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data under certain circumstances
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, contact us at [email protected]. We will respond within one month of receiving your request.

Our website uses cookies and similar technologies. For detailed information about cookies we use, how to manage your preferences, and opt-out options, please see our Cookie Policy.

We primarily process data within Malaysia. Some service providers may store data in other countries. When data is transferred internationally, we ensure appropriate safeguards are in place through standard contractual clauses or adequacy decisions under Malaysian data protection law.

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. Parents or guardians book tours on behalf of minors and provide necessary information for tour participation. If we become aware we have collected data from a child without parental consent, we will delete it promptly.

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or services offered. We will post the updated policy on this page with a revised "Last Updated" date. For significant changes, we will provide additional notice through email to registered users or prominent website notification. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

For questions about this Privacy Policy, to exercise your data rights, or to discuss data protection concerns:

If you believe we have not addressed your data protection concerns adequately, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.