Privacy Policy
How this website handles visitor information. This is a template that must be completed before publishing.
Template content – complete before publishing
- Sample document – add your real effective date before publishing.
- Every bracketed item below is a placeholder for the agency's real policy wording.
- This template has not been reviewed legally and does not claim compliance with any law.
- Malaysian agencies normally need to consider the Personal Data Protection Act 2010 – confirm requirements with a qualified adviser.
1. About this policy
This policy explains how Trip Sahabat (the "agency", "we") would handle personal information collected through this website. It applies to the website only. To complete Add the registered company name, registration number and business address here.
2. What this prototype website actually does
The version of the site you are viewing now is a frontend demonstration. It contains no database, no login, no analytics and no server-side form processing. Specifically:
- The enquiry form on the contact page is validated in your browser only and shows a demonstration message. Nothing is transmitted or stored.
- Package, destination and budget filters run inside your browser from sample data.
- No cookies are set by this site, and no third-party tracking scripts are loaded.
- Fonts are requested from Google Fonts and icons are served from this server, so the font request is visible to Google's servers.
3. Information a live site would collect
To complete For each item, state what is collected, why, and how long it is kept.
- Enquiry details: name, email address, phone or WhatsApp number, travel interest and message.
- Traveller details needed to arrange a trip: passport details, dates of birth, meal or seating requests.
- Payment-related references processed by a payment provider (never full card numbers on this site).
- Technical information such as IP address, browser type and pages visited, if analytics is enabled.
4. How information would be used
To complete Typical purposes include responding to enquiries, preparing quotations, making bookings with airlines, hotels and ground operators, meeting legal or accounting obligations, and sending updates where consent has been given.
5. Sharing information with third parties
To complete List the categories of recipients – for example airlines, hotels, ground handling agents, insurance providers, payment processors and IT service providers – and the countries involved.
6. Cookies and similar technologies
To complete Describe any cookies or local storage used, their purpose and how visitors can control them in their browser.
7. Data retention
To complete State how long enquiry records, booking files and accounting records are kept, and how they are disposed of afterwards.
8. Security
To complete Describe the technical and organisational measures used to protect personal information, and how incidents would be handled.
9. Your rights and choices
To complete Describe how a visitor can request access to, correction of, or deletion of their information, withdraw consent, or object to marketing.
10. Contact for privacy questions
To complete Add the real contact person and email address for privacy requests. The placeholder address used in this prototype is enquiry@example.com.
11. Changes to this policy
To complete State how visitors will be notified when the policy changes, and add the effective date of each revision.