We are Travel Recommends Sdn. Bhd. (“TR” or “we”, “us”, our”).
The protection of your personal data is important to us and this privacy policy (the “Policy”) describes how TR collects, uses or otherwise Processes your Personal Data. This Policy also sets out how we protect your Personal Data. By using our services, you warrant that you have read, understood and agreed to this Policy.
For the purposes of this Policy:
“Personal Data” means data, whether true or not, about an individual who can be identified from that data or from that data and other information to which the organisation has or is likely to have access.
“Process”, “Processes”, “Processed” and “Processing” means the carrying out of any operation or set of operations in relation to Personal Data and includes recording, holding, organization, adaptation or alteration, retrieval, combination, transmission, erasure or destruction.
“TR Group” refers to TR and its related corporations (as defined in the Companies Act 2016).
This Policy applies to all Personal Data Processed by TR (regardless of how such Personal Data is collected). TR may collect such Personal Data through various social media sites, websites, applications, domains or other platforms (“collectively, the “Platforms”), which include, but are not limited to the following:
|
Platforms |
Website |
Contact for specific enquiries |
|
Travel Recommends
|
https://www.travelrecommends.com/my/
|
my.hello@travelrecommends.com |
TR will collect your Personal Data from you, and/or from other members of the TR Group when considers it reasonably necessary for the relevant purposes underlying such Processing as detailed in this Privacy Policy. If you do not provide or are unable to provide such Personal Data, TR may not be able to provide the products and/or services requested by you.
Examples of your Personal Data which may be collected by us include the following:
* Identity and Contact Data, such as your name, address, telephone number, date of birth, email address, country of nationality or residence, national identification number, passport number, employment history, educational background, professional qualifications, job title and function, biometric data;
* Financial and Payment Data, such as your bank account, credit/debit card numbers, and other related billing or payment information;
* Business Information, such as information provided in the course of our contractual relationship with you or your organization, including Identity and Contact Data;
* Claims Information, including any Personal Data such as photographs, statements or voice recordings provided in the course of any investigations that TR may need to undertake;
* Profile, Usage and Technical Data, such as passwords to the Platforms, your preference in receiving marketing communications from the TR Group (or any one of its members), your communication preferences, information about how you use the Platforms, IP address, login data, browser type and version and device type and any other Personal Data concerning your preferences which may be relevant to the products and/or services that the TR Group (or any one of its members) provides. To learn more about our use of cookies or similar technology, please see our Cookies Policy;
* Physical Access Data such as information provided when you visit our premises or captured on our closed-circuit television (“CCTV”) devices; and
* Immigration related information such as the Personal Data contained on your passport, boarding pass, your flight details and your photo image.
TR collects Personal Data about you in a number of ways, including the following:
* Direct interactions. You may give us your Personal Data by filling in forms or through your use of our customer interface touchpoints (such as our manned booth counters and stores) or when you correspond with us by post, phone, email, chatbot or otherwise.
We may also directly collect Personal Data in other ways, including when:
* You apply for any products or services offered by any member of the TR Group;
* You create an account on our Platforms;
* You subscribe to any of the communications or publications offered by any member of the TR Group;
* You request marketing to be sent to you by any member of the TR Group;
* You enter a competition, promotion or survey offered by any member of the TR Group;
* You give us feedback;
* You connect to WiFi at our premises;
* You use mobile or web applications developed by or for any member of the TR Group; or
* Your image (including video recordings) is recorded by our installed cameras or videos or official photographers/videographers at our TR
booths, venues, events and programmes (“Premises”).
* Automated technologies or interactions. As you interact with Platforms, we may automatically collect technical data about your
equipment, browsing actions and patterns. We collect this data by using cookies, server logs and other similar technologies. The foregoing
technologies are required to allow certain functions on the Platforms (where applicable) to function. Please refer to our Cookies Policy for
further details. If you prefer not to allow certain cookies, you can manage them in accordance with our Cookies Policy.
* Third parties or publicly available sources. We may receive Personal Data about you from various third parties (including any member of
the TR Group, our agents or from your organisation) and publicly available sources, including financial and transaction data from providers of
technical, payment and delivery services.
* CCTV systems or other surveillance devices. TR or our authorised third parties have installed CCTV systems and other surveillance
devices at our Premises which may record your image for the purposes of: (i) monitoring the security and safety of persons; (ii) assisting in
investigations of crime and other incidents; and (iii) managing the services provided at our Premises.
Members of the TR Group strive to optimise their operations and the products and/or services offered to you through different channels (including the Platforms) such as providing relevant and personalised content designed to make your user experience smoother and more enjoyable. To effectively understand and meet your needs, TR Group (or any one of its members) may Process your Personal Data for purposes directly related to their functions and:
* To provide you with services and to help us develop, improve, manage and administer the services the TR Group (or any one of its members)
provides to you, including services provided on—and through—our Platforms and WiFi services;
* To help us verify your identity for the purposes of processing and administering any membership application, registration or services;
* To handle requests and enquiries (including processing of payments and refunds, waiver of penalties and filing of insurance and its claims);
* To send you notifications and marketing messages in relation to the promotional events, offers, opportunities, products, benefits and programmes
offered by any member of the TR Group;
* To conduct marketing activities including market research, customer profiling, customer insights and targeted marketing activities;
* To carry out profiling and statistical analysis to improve the services provided to you, including matching and aggregating the information you provide
through different channels to understand how TR Group (or any one of its members) can serve you better;
* To inform you of changes to TR Group’s (or any one of its members) programmes, policies, terms and conditions, Platforms updates and other
administrative information;
* To administer and conduct programmes, promotions, events and games organised by any member of the TR Group;
* To prevent, detect and investigate security incidents or breaches, crime, including fraud, and analysing and managing other risks;
* To customise the Platforms and their content to your particular preferences;
* To conduct surveys, questionnaires and requests for feedback;
* To respond to your queries, requests, feedback and complaints;
* For promotional and publicity purposes, including to record or take photographs of participants at events or functions organised, hosted or
participated in by any member of the TR Group;
* To meet the requirements of any applicable laws/regulations, enforceable governmental request or court order;
* To administer any contract that you or your organisation has with TR;
* To detect, prevent or otherwise address security or technical issues in connection with services provided through the Platforms; and/or
* To fulfil such other purpose as may be specified in a data protection and privacy notice given to you at the time that your Personal Data is collected.
In carrying out one or more of the purposes set out in section 5 above of this Policy, we may need to disclose your Personal Data to one or more of the following third parties:
* Our agents;
* Our authorised service providers such as marketing partners and web analysis companies, and their business partners;
* Our auditors and professional advisors;
* Our business partners;
* Our underwriters and insurers;
* Law enforcement agencies;
* Any person to whom disclosure is permitted—or required by—any applicable laws/regulations, enforceable governmental request or court order; and/or
* Any member of the TR Group.
To facilitate our interaction with you, we may need to transfer your Personal Data outside of Malaysia. We will only do so when measures are in place to provide the same level of protection provided under the Personal Data Protection Act 2010.
By continuing to use our products and/or services, you signify that you have read and understood this Policy and you provide your consent to us collecting, using and disclosing your Personal Data in accordance with this Policy.
Unless the applicable laws or regulations allow otherwise, we will obtain express written consent from you for the Processing of your Personal Data by methods or means such as making you sign a form or check a box. When you do so, you represent that you are over 18 years of age and can give valid consent. Where you provide information to us about any individual other than yourself (eg, an employee or child), you represent that you have valid authority and consent to do so and you must ensure that the other individual(s) consent to this Policy and understand how their information will be used. You can withdraw such consent at any time by contacting our data protection officer at the contact details set out in this Policy.
Depending on the extent to which you withdraw consent, such withdrawal of consent may result in our inability to provide the relevant services to you and may be considered as a termination by you of any agreement between TR and you. TR’s legal rights and remedies are expressly reserved in such an event
Minors: If an individual under 18 years of age has provided us with Personal Data without parental or guardian consent, the parent or guardian should contact us at the contact details set out in this Policy to remove the relevant Personal Data. If we become aware that Personal Data has been collected from an individual under the age of 18 without parental or guardian consent, we will delete this Personal Data and any account that the individual may have with us.
We may provide links to third-party websites on the Platforms. Your use of such third-party websites will be subject to their privacy policies and we do not accept any responsibility or liability for these policies. We encourage you to read the privacy policies on the other websites you visit. Once you have left the Platforms, you should check the applicable privacy policy of such third parties at their respective websites to determine how they will Process any information they collect from you. As we cannot control or be responsible for the policies of other websites we may link to, or the use of any data you may share with them, you access these third-party websites at your own risk.
We have put in reasonable technical and procedural measures to safeguard your Personal Data, for example by:
* ensuring that access to any personal account you have with us is controlled by password and username which are unique to you;
* storing your Personal Data on secured servers; and
* restricting access to Personal Data on a ‘need to know’ basis.
Please note that the use of the internet and/or our Platforms cannot be made entirely secure and we therefore are unable to guarantee the security or integrity of any Personal Data which is transferred from you or to you via the Platforms. You undertake to bear the risks of any transfer.
The accuracy of our data collection begins with you – you undertake that you will provide true, accurate and complete Personal Data, and update such Personal Data with us from time to time. Before providing your Personal Data to us, you should carefully check that the information that you have provided us is true, complete and accurate.
You may request access to and/or correction of your Personal Data held by us by contacting us at the contact details set out in this Policy. All requests for access and/or correction will be processed within a reasonable time except where we refuse such requests in accordance with any applicable laws or regulations. In some situations, you may be able to access and correct your Personal Data directly through the Platforms. For requests other than through self-service function on the Platforms, we may need to verify your identity before proceeding with your request. For verification purposes, we may require you to provide supporting information or documentation.
For all requests other than through self-service functions on the Platforms, we may charge you a reasonable fee for the handling and processing of your request.
TR is a company incorporated in Malaysia. We do not have an establishment in the EU.
However, if you are a data subject in the EU, and you believe that the General Data Protection Regulation (EU 2016/679) (“GDPR”) applies to the Personal Data you have provided us, you may contact us to exercise the following further rights:
* request for the erasure of your Personal Data;
* request for the restriction of processing of your Personal Data;
* object to the processing of your Personal Data; and/or
* request to transfer your Personal Data to you or a third-party.
We may ask to verify your identity and claim before proceeding with your request.
In the event that the GDPR applies, you also have the right to lodge a complaint with the relevant EU supervisory authority if we have contravened any applicable laws or regulations.
All requests made to us in exercising the rights above will be processed within a reasonable time except where we refuse such requests in accordance with any applicable laws or regulations.
12. Data Retention
We will cease to retain your Personal Data when the purposes for which we collected your Personal Data have ceased and/or when we are no longer required to continue retaining your Personal Data for any legal or business purposes.
Where you have provided us with unsolicited Personal Data, for example in unsolicited emails or public posts on message boards, you will be regarded as having given TR consent to use the unsolicited Personal Data as we see fit, on a non-confidential basis, and TR shall be free to use, disclose, distribute and exploit such unsolicited Personal Data without limitation or attribution. TR will strive to take reasonable steps to destroy or de-identify unsolicited Personal Data that TR has no purpose for, but it cannot guarantee that all unsolicited Personal Data will be disposed of given system and operational limitations. You bear responsibility for not providing TR with Personal Data beyond what we have requested from you, should you not consent to how we intend to treat unsolicited Personal Data provided by yourself.
We may amend this Policy (including the Cookies Policy) from time to time to reflect any changes to the way in which we process your Personal Data or changing legal requirements. Any changes we may make to our Policy in the future will be posted on this page. We may provide notice to you on the Platforms or other communication channels including via email notification where appropriate. By using our services, you undertake to check the relevant websites or sections of the Platforms regularly for any updates.
We welcome your feedback, comments and any questions that you may have.
For specific queries on any of the Platforms, you can contact us via the email/portals listed in section 2 above.
For matters related to this Policy or personal data related matters, please reach out to our Data Protection Officer, referencing “Privacy Policy” at dataprotection@travelrecommends.com.
This Privacy Policy was last updated on 12 October 2023.
Copyright © 2019 Travel Recommends. All rights reserved.
