Privacy Policy

Alive Travel & Tours Sdn Bhd • Effective Date: May 20, 2026

📋 PDPA Statutory Compliance Statement: This Privacy Notice is explicitly engineered to fulfill our transparency obligations under the Personal Data Protection Act 2010 (PDPA) of Malaysia. By interacting with our booking platforms, submitting documentation, or using our agency services, you acknowledge that you have read, understood, and consented to the processing of your personal data according to these structural terms.

1. Introduction

Alive Travel & Tours Sdn Bhd (“we,” “us,” “our,” or “the Company”) is fundamentally committed to protecting the privacy, security, and integrity of your personal data. Whether you are reserving flight logistics, checking into managed short/long-term accommodation rentals, organizing corporate event management (MICE), or executing curated inbound/outbound travel itineraries, we handle your personal information with strict security protocols.

2. Scope of Policy

This Privacy Policy governs personal data processing across all accessible operational interaction points managed by the Company, including:

Our official digital domains and websites (alivetraveltours.com).
Direct messaging facilities, business email workflows, and verified corporate WhatsApp environments.
Physical customer processing interactions handled at our corporate branches or field offices.
Authorized data pipelines established with commercial travel operators, aggregators, or global supply networks.

3. Categories of Personal Data Collected

To safely execute travel bookings and fulfill compliance measures, we collect the following data types:

Identity Verification Data: Full legal name, gender, date of birth, copy of MyKAD/NRIC, passport numbers, visa statuses, or corporate registration records.
Contact Information: Active phone numbers, home/billing addresses, primary email contacts, and digital messaging IDs.
Financial Tracking: Verified bank account credentials, online transfer slip records, and partial transactional meta-data.
Logistics Preferences: Frequent flyer allocations, specialized dietary parameters, medical/accessibility needs, booking history, and customized tour schedules.
Digital footprint data: IP addresses, geographic tracking data, cookie profiles, and browser configuration analytics.

4. Methods of Data Collection

We compile user information using transparent methodologies:

Direct Data Submissions: Form fields executed by you when securing packages, checking property availability, requesting corporate quotations, or subscribing to loyalty programs.
Automated Digital Captures: Cookies, tracking scripts, and browser analytics logging standard engagement behaviors across our platforms.
Authorized Third-Party Flows: Strategic data sharing from commercial airlines, specialized ground transport lines, regional tour groups, or financial verification clearings required to conclude your reservation.

5. Purposes of Processing Personal Data

Your information is processed exclusively to support clear business use cases:

Operational Fulfillment: Finalizing flight tickets, validating accommodation rental leases, executing corporate event spaces, and securing e-tickets.
Communication Channels: Discharging urgent flight updates, schedule changes, billing receipts, and emergency support during travel disruptions.
Targeted Marketing: Forwarding customized promotional offerings, early-bird incentives, and client loyalty updates (strictly subject to your opt-out control).
Legal Enforcement: Safeguarding against digital payment fraud, complying with national security mandates, and adhering to financial audit rules.

6. Sharing & Disclosure of Personal Data

We do not lease or monetize your information. Data is disclosed only to critical entities:

Primary Service Partners: Commercial airlines, partner hotels, local logistics units, and attraction operations directly handling your itinerary.
Regulatory Institutions: Malaysian Immigration offices, civil aviation groups, or legal authorities when explicitly demanded by law or court order.
Internal Corporate Frameworks: Internal compliance divisions, auditors, or corporate subsidiaries within the Alive Travel & Tours Sdn Bhd framework for administrative tracking.

7. International Cross-Border Transfers

In accordance with Section 129 of the PDPA, when fulfilling international tour itineraries, cross-border accommodations, or global flight bookings, your personal data will naturally be transferred to destination operators outside Malaysia. We take all reasonable measures to ensure these third-party operators process your data with an equivalent standard of protection.

8. Data Security Protocols

We deploy robust organizational boundaries to prevent information leakage, unauthorized alterations, or breaches:

Encrypted digital processing channels for sensitive client paperwork and billing data.
System firewalls and restricted access privileges configured entirely on a strictly "need-to-know" corporate basis.
Periodic system optimization reviews to address potential system vulnerabilities.

Notice: While we utilize top-tier defense layers, no online digital transmission or electronic server infrastructure is completely immune to risks. Users submit information recognizing these baseline digital landscape factors.

9. Data Retention Parameters

We retain personal data exclusively for the duration necessary to satisfy the primary booking objectives, protect legal corporate standing, or maintain alignment with institutional tax or financial record auditing laws in Malaysia. When no longer required, data is permanently scrubbed, completely overwritten, or anonymized.

10. Your Statutory Rights Under the PDPA

As a registered data subject in Malaysia, you possess explicit legal rights regarding your personal records:

Right to Access: Demand a formal record overview of all your personal data held within our active platforms.
Right to Correction: Mandate the immediate update or correction of obsolete or inaccurate personal information.
Right to Withdraw Consent: Revoke processing clearance regarding auxiliary marketing updates at any time.
Right to Erasure: Request the deletion of records when the primary service execution has completely concluded, subject to active legal retention rules.

11. Cookies and Tracking Tools

Our digital platforms deploy structural cookies to optimize user experience, remember system language choices, and aggregate marketing flow statistics. Users retain absolute authority to limit, block, or delete cookies at any time through their personal web browser settings.

12. Privacy Adjustments & Policy Updates

We reserve the direct corporate authority to adjust, update, or rewrite this Privacy Policy framework to keep pace with modern digital environments or updates to Malaysian data protection laws. Revised adjustments seamlessly take effect upon publication to the main web domain.