We collect personal information only where necessary to provide our travel and related services. The types of information we may collect include:

• Full name

• Age or date of birth

• Nationality and residency status

• Passport or travel document details (if required for booking)

• Contact information (email address, phone number, postal address)

• Payment information (credit or debit card details)

• Dietary, health, or medical information (only when relevant for travel)

• Feedback, travel preferences, or service reviews

You may choose not to provide certain information; however, this may limit our ability to deliver the services you have requested.

Your personal data may be collected through various means, including:

• Online forms or booking submissions on our website

• Direct communication via email, phone, or social media

• Authorised third parties such as travel agents, tour partners, or representatives acting on your behalf

• Website cookies or analytics tools (see Section 9: Cookies and Tracking Technologies)

Your consent is obtained when you voluntarily provide your personal information or authorise a third party to do so on your behalf.

We collect and process personal data for purposes including but not limited to:

• Processing travel bookings, reservations, and payments

• Managing customer accounts and enquiries

• Providing travel information, confirmations, and updates

• Personalising travel experiences and improving our services

• Ensuring compliance with legal or regulatory requirements (e.g. immigration, safety, taxation)

• Sending marketing communications, newsletters, or promotions (where consented)

• Conducting administrative, statistical, and operational activities

We will not process your personal data for any other purpose without your consent unless required by law.

Your personal data may be shared with the following parties when necessary:

• Travel and service partners, such as hotels, resorts, transport providers, and tour operators (within or outside Malaysia)

• Third-party service providers, such as payment processors or IT support companies

• Government authorities or regulators, where disclosure is legally required

All third parties handling your information are contractually obligated to protect your data and use it only for the purposes specified by us.

We do not sell or rent your personal data to any external party.

In some cases, your personal data may be transferred to service providers or partners located outside Malaysia (for example, hotel or tour operators abroad). We will ensure that any such transfers are made securely and in compliance with PDPA requirements and that the recipients provide adequate levels of data protection.

We implement appropriate administrative, technical, and physical security measures to protect your personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction.

These measures include:

• Secure servers and password-protected systems

• Encryption of sensitive information during online transmission

• Limited access to authorised personnel only

While we take reasonable precautions, please note that no online platform or transmission is entirely secure, and we cannot guarantee absolute protection.

We retain personal data for as long as necessary to fulfil the purposes for which it was collected or as required by law. Once your information is no longer needed, it will be securely deleted, anonymised, or disposed of in accordance with PDPA regulations.

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you

• Request correction or updates to inaccurate information

• Withdraw consent to the processing of your data (subject to legal or contractual obligations)

• Request that your data be deleted, where permissible

To exercise any of these rights, please contact us in writing at:

Email: rsvn@saripacifica.travel Website: www.pulaubesarjohor.com

If your booking was made through a travel agent or third-party partner, please contact them directly regarding any requests or updates to your data.

Our website uses cookies and similar technologies to enhance user experience, analyse site traffic, and improve our content. Cookies do not collect personal data unless you voluntarily provide it.

You may choose to disable cookies through your browser settings, although this may affect certain website functionalities.

We may revise this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The latest version will always be available on our website, with the effective date clearly stated.

By continuing to use our website after any amendments, you are deemed to have accepted the revised terms.

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact:

Data Protection Officer

Email: rsvn@saripacifica.travel Website: www.pulaubesarjohor.com

We take privacy matters seriously and will respond to your enquiry within 30 business days. If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection (JPDP) in Malaysia.