Privacy Policy

Aspenaa Travel & Tours Sdn. Bhd. (“we,” “our,” or “us”) values your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

1. Information We Collect

We may collect the following types of personal information from you:

Personal Identification Details: Full name, identification number, date of birth, gender, nationality.
Contact Information: Email address, phone number, mailing address.
Travel Details: Passport information, flight details, accommodation preferences, special requests.
Payment Information: Billing details, transaction records, and related financial information.
Website Usage Data: IP address, browser type, device information, pages visited, and cookies for analytics purposes.

2. How We Use Your Information

We may use your personal data for the following purposes:

To process and confirm your bookings or travel arrangements.
To communicate with you regarding inquiries, quotations, or customer support.
To send updates, promotions, and travel-related offers (only with your consent).
To comply with legal, regulatory, or contractual obligations.
To improve our website, services, and customer experience.
For internal record-keeping and administrative purposes.

3. Disclosure of Information

We may share your personal information with:

Third-party service providers such as airlines, hotels, transport companies, tour operators, or insurance providers to complete your booking.
Business partners or agents acting on our behalf.
Government authorities or law enforcement when required by law.

We will not sell, rent, or trade your personal data to any third parties.

4. Data Protection and Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration.
However, please note that no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

5. Your Rights

Under the PDPA, you have the right to:

Access and request a copy of your personal data.
Request correction or updating of inaccurate or incomplete data.
Withdraw consent to the processing of your personal data (subject to legal or contractual restrictions).
Request deletion of your personal data, where applicable.

To exercise these rights, please contact us using the details below.

6. Cookies

Our website may use cookies to enhance your browsing experience. Cookies help us analyze web traffic and improve site functionality. You may choose to disable cookies through your browser settings, but some website features may not function properly as a result.

7. Links to Other Websites

Our website may contain links to external sites. We are not responsible for the privacy practices or content of these third-party websites. You are encouraged to read their respective privacy policies.

8. Retention of Personal Data

We will retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

9. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.