Privacy Policy

Che Wan Travel & Tour Sdn. Bhd.™
Company Registration No: 202501048836 (1650244A)

Effective Date: 20 July 2026 (Version 2.0)

1. Introduction

Che Wan Travel & Tour Sdn. Bhd.™ ("we," "us," "our," or "Che Wan Travel") is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information in compliance with the Personal Data Protection Act 2010 (PDPA), as amended by the Personal Data Protection (Amendment) Act 2024, and other applicable laws of Malaysia.

By using our services, including but not limited to flight bookings, accommodation rentals, event management, tour packages, and other travel-related services, you consent to the practices described in this Privacy Policy.

2. Scope of Policy

This Privacy Policy applies to all personal data collected through:

• Our website (chewantravel.com)
• Mobile applications (if applicable)
• Email communications, WhatsApp, and other messaging platforms
• In-person interactions at our office or through our representatives
• Third-party platforms or partners where you engage with our services

3. Definition of Personal Data

Personal data refers to any information that can identify you directly or indirectly, including but not limited to:

• Name, address, and contact details (email, phone number, WhatsApp number)
• Identification documents (e.g., NRIC, passport number)
• Payment information (e.g., credit/debit card details, bank account information)
• Travel preferences, booking history, and itinerary details
• Photographs, videos, or other media shared with us
• Information collected through cookies and tracking tools

Certain categories, such as passport and identification numbers, may be treated as sensitive personal data under the expanded definition introduced by the Amendment Act 2024, and are handled with additional safeguards accordingly.

4. Collection of Personal Data

Directly from You:

• When you make bookings or inquiries for flights, accommodations, tours, or event services.
• When you subscribe to newsletters, promotions, or loyalty programs.
• When you participate in surveys, contests, or feedback forms.
• When you contact us via email, WhatsApp, or other communication channels.

Automatically:

• Through cookies and tracking tools when you visit our website or use our services.
• Through analytics tools that collect aggregated data about user behavior.

From Third Parties:

• Travel partners, airlines, hotels, and other service providers involved in fulfilling your bookings.
• Social media platforms if you connect or interact with us through them.

5. Purposes of Collecting and Using Personal Data

We use your personal data for the following purposes:

Service Fulfillment:

• To process and manage your bookings, payments, and travel arrangements.
• To communicate regarding your reservations, itineraries, and updates.

Customer Support:

• To respond to inquiries, complaints, or feedback.
• To provide assistance during emergencies or travel disruptions.

Marketing and Promotions:

• To send promotional materials, newsletters, and special offers (with consent).
• To personalize user experience and recommend relevant services.

Legal and Regulatory Compliance:

• To comply with applicable laws and government requests.
• To prevent fraud or illegal activities.

Business Operations:

• To improve services, website functionality, and customer experience.
• To conduct market research and data analysis.

6. Disclosure of Personal Data

We may share your personal data with:

• Service Providers: Airlines, hotels, transport providers.
• Business Partners: Event organizers, tour operators.
• Authorities: When required by law.
• Affiliates: Within the Che Wan Travel group.

Cross-Border Data Transfers: Where your personal data is transferred outside Malaysia (for example, to an overseas airline, hotel, or booking platform), we will take reasonable steps to ensure the receiving party provides a comparable standard of protection, including, where required, conducting a Transfer Impact Assessment (TIA) in line with the Amendment Act 2024.

7. Data Security

We use robust measures to protect your data including:

• Encryption during transmission and storage.
• Regular system security audits.
• Restricted access based on necessity.

8. Data Breach Notification

In the event of a personal data breach that is likely to result in significant harm to affected individuals, Che Wan Travel will notify the Personal Data Protection Commissioner (PDPC) within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with the mandatory breach notification requirements introduced by the Amendment Act 2024.

9. Data Protection Officer

In line with the mandatory Data Protection Officer requirement under the Amendment Act 2024 (effective 1 June 2025), Che Wan Travel has designated a point of contact responsible for overseeing PDPA compliance. You may reach our Data Protection Officer using the contact details in Section 13 below.

10. Retention of Personal Data

Your data is retained only as long as necessary for the purposes outlined or as required by law.

11. Your Rights

• Access your personal data.
• Correction of inaccurate information.
• Withdraw consent for specific uses.
• Request deletion subject to legal obligations.
• Data portability — request that your personal data be transferred to another data controller, where technically feasible, under the right introduced by the Amendment Act 2024.

To exercise your rights, contact us at chewantraveltour@gmail.com or +6018-223 3379.

12. Cookies and Tracking Tools

We use cookies to enhance browsing experience, analyze traffic, and personalize content. You may manage cookie settings in your browser.

13. Contact Us

14. Amendments to this Policy

Che Wan Travel reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices or applicable law. The latest version will always be available on our official website.