PDPA Notice
PDPA Notice
- Data Controller & Scope
This notice is issued by Cooltrip Holiday Sdn Bhd in accordance with the Personal Data Protection Act 2010 (PDPA) and its related regulations. - Collection of Personal Data
We collect personal data you provide directly (e.g., booking forms, enquiries, correspondence) and automatically (e.g., website cookies where applicable).
Personal data may include:
- Full name
- NRIC / Passport number
- Contact details
- Payment information
- Travel preferences
- Sensitive data (e.g., health or dietary information) where necessary for tour arrangements
- Purposes of Processing
Your personal data is processed for:
- Contractual necessity: Processing bookings, payments, and arranging travel services with suppliers
- Legitimate interests: Customer service, account management, internal record-keeping, and fraud prevention
- Consent-based purposes: Sending marketing communications and promotional offers (you may opt out at any time)
- Legal obligations: Compliance with laws, regulations, and government requests
- Disclosure & Transfer of Personal Data
- Personal data may be shared with airlines, hotels, tour operators, transport providers, insurers, and IT/cloud service providers strictly to fulfill your travel arrangements
- We require these third parties to implement reasonable data protection measures
- Data may be transferred outside Malaysia, and we will ensure it is protected according to PDPA standards
- Rights of Data Subjects
You have the right to:
- Access your personal data held by us
- Correct inaccurate or incomplete data
- Withdraw consent for marketing communications
- Withdraw consent for personal data processing in general, subject to legal or contractual restrictions
- Security, Retention & Updates
- We implement appropriate technical and organizational measures to protect your personal data
- Personal data is retained only as long as necessary to fulfill the stated purposes or as required by law
- This notice may be updated from time to time; the latest version will be published on our website
- Consent
By submitting your personal information, making a booking, or using our services, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your personal data in accordance with this PDPA Notice.