About This Privacy Policy
This Privacy Policy explains how Elaf Shahidah Travel Sdn Bhd (“Elaf Shahidah”, “we”, “us” or “our”) may collect, use, disclose, store and otherwise process personal data when you visit kembaraelaf.com, contact us, submit an enquiry or otherwise interact with our travel services.
We are committed to handling personal data responsibly and in accordance with applicable Malaysian personal data protection requirements, including the Personal Data Protection Act 2010 and applicable amendments, regulations and requirements.
By providing personal information to us, you acknowledge that it may be processed as described in this Privacy Policy, subject to applicable law.
Information You Share With Us
The personal data we collect depends on how you interact with us. This may include information that you provide directly when contacting us or submitting an enquiry.
Contact information such as your name, telephone or WhatsApp number and email address.
Enquiry information including the journey you are interested in and information included in messages you send to us.
Travel information that may be required if you proceed with a travel enquiry or booking.
Technical information such as IP address, browser or device information and website usage data where collected by our website or permitted technologies.
Additional information may be required when arranging or providing travel services. Where appropriate, we will explain why that information is required.
Why We Process Your Information
We may process personal data where reasonably necessary to manage your relationship with Elaf Shahidah and provide our services.
- Respond to enquiries and communicate with you.
- Provide information about journeys and travel services you request.
- Process and administer travel arrangements or bookings where applicable.
- Provide customer service and operational assistance.
- Maintain and improve our website, services and user experience.
- Protect our website, systems, customers and business from misuse or security risks.
- Meet applicable legal, regulatory, accounting or administrative obligations.
Where required by applicable law, we will obtain appropriate consent before using personal data for a purpose that requires it.
How Our Website Works
Our website may use cookies and similar technologies that help the website function, remember preferences, maintain security, understand website performance or improve visitors' experience.
Depending on the technologies enabled on the website, certain third-party services may also place or access cookies or similar identifiers.
Where required, visitors will be given appropriate information or choices relating to non-essential cookies. You may also be able to control cookies through your browser settings.
This section should be updated if analytics, advertising pixels or other tracking technologies are activated on the website.
When Information May Be Shared
We do not disclose personal data unnecessarily. Where required for legitimate business or travel purposes, information may be disclosed to appropriate third parties.
- Service providers that support our website, hosting, communications or business systems.
- Travel-related suppliers or partners where necessary to arrange or provide requested travel services.
- Professional advisers where reasonably necessary.
- Government, regulatory, law-enforcement or other authorities where disclosure is required or permitted by applicable law.
We expect parties handling personal data on our behalf to process it appropriately and only for relevant purposes.
Protecting Your Information
We take reasonable administrative, technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure.
How Long We Keep Information
Personal data will be retained only for as long as reasonably necessary for the purposes for which it was collected, to manage our relationship with you, or to meet applicable legal, regulatory, accounting or operational requirements.
Processing Across Borders
Travel services can involve organisations located outside Malaysia. Where necessary for requested services, personal data may therefore be processed or transferred outside Malaysia, subject to applicable personal data protection requirements.
We will take reasonable steps appropriate to the circumstances when personal data is transferred or made available across borders.
Your Personal Data Choices
Subject to applicable Malaysian law and any permitted limitations or exceptions, you may have rights concerning personal data processed by us.
Request access to personal data held about you where applicable.
Ask us to correct inaccurate or incomplete personal data.
Withdraw consent where processing depends upon that consent, subject to applicable limitations.
Ask us to stop using your personal data for direct marketing.
Other rights or restrictions may apply depending on the circumstances and applicable personal data protection law.
Links Beyond Our Website
Our website may contain links to external websites or services, including communication, map, social media or travel-related services. Those services may have their own privacy practices and policies.
We encourage you to review the privacy information provided by a third party before submitting personal information directly to that service.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, website practices or applicable requirements.
When the policy is updated, the revised version will be published on this page and the “Last updated” date will be changed accordingly.
Contact Us
If you have a question about this Privacy Policy or wish to make an enquiry regarding personal data held by us, please contact Elaf Shahidah Travel Sdn Bhd.
30-1 Jalan Ilmu 3,
Dataran Universiti, Putra Nilai,
71800 Nilai, Negeri Sembilan,
Malaysia.