In compliance with the Personal Data Protection Act 2010 of Malaysia and, where possible, internationally recognised standards of personal data privacy protection, this Notice is issued to all our valued customers and business partners. This Notice will inform you of your rights with regards to your personal data that has been and/ or will be, collected and processed by us.

The Application of this Privacy Policy

This Privacy Policy (the “Policy”) applies to personal data and information regarding guests and other individuals with whom The Kasturi, operated by Rimbun Dahan Sdn Bhd (Company No. 20441-A) (“we”, “our”, “us”) does business with and to the management of that data and information in any form, whether electronic or written.

Description of Personal Data

The term “personal data” in this Policy refers to personal information which is capable of identifying you as an individual. You can visit our website without providing any personal data or information. The collection and processing of personal data may be obligatory for purposes of providing you with our services. The collection may also be obligatory for purposes of compliance with the Registration of Guest Act 1965 as well as compliance with other local laws and regulations. We will notify you whether the personal data requested is obligatory or voluntary.

Personal Information that we may collect from you

We may collect and process the following personal information:

• your personal details such as name, national identification number, age, sex, nationality, occupation, contact information, passport and visa information and other required information pursuant to local laws and regulations;
• guest stay information, date of arrival and departure, special requests made, observations about your service preferences, telephone numbers dialed, faxes and telephone messages received from third parties on behalf of guests/customers;
• details of transactions (including details of payment cards used);
• information that you provide by filling in forms on our website;
• if you contact us through our any form of official correspondence (general enquiry form, telephone, email and/or social media), we may keep a record of that correspondence;
• details of your visits to our website including, but not limited to, traffic data, location data, weblogs and other communication data, whether this is required for our own billing purposes or otherwise and/or the resources that you access;
• when you report a problem with our website;
• information that you provide when registering to any of our programmes/activities, including, but not limited to, registration to our website; and
• information such as videos and photographs collected through the use of closed circuit television systems and other security systems.

Use of Personal Information

We may use and disclose relevant portions of your personal data and information for the purpose of:

• providing you with our services;
• dealing with your booking, enquiries and other requests;
• administering your booking and other services;
• tailoring our services to your requirements and preferences;
• conducting market analysis, market research, customer satisfaction and quality assurance surveys;
• providing for the safety and security of guests;
• administering general record keeping;
• facilitate direct-marketing products and services, special offers and services, events, promotions and competitions, if you have consented to receive the same. Please see section “Direct Marketing” below;
• disclosing the winner of contests and lucky draw competitions conducted by us or on our behalf; and
• meeting legal and regulatory requirements.

We may contact you by telephone/email for these purposes.

Direct Marketing

We intend to use your personal information (including your name, address, telephone numbers, email and other contact details) to send you marketing communications such as direct-mail, email, telephone calls and SMS containing news, offers, promotions, events to be offered by us or by our business partners in relation but not limited to the following classes of products and services: travel, transportation, retail, food and beverage, credit cards, financial and investment services, real estate, entertainment, publications, fashion and jewellery, leisure and sports, health and wellness, non-profit and charitable activities, telecommunications, social networking, media and public relations.

Our website provides you with the opportunity to opt out of receiving written promotional and marketing information or to opt in to receiving electronic marketing information, free of charge. You can exercise your right to prevent such processing by selecting the appropriate opt in/opt out button each time you submit a form containing your personal details on our website.

Disclosures of your Personal Information

We will only disclose your personal information to our selected business partners and service providers:

• for the purpose of administrating your requests and any booking;
• for providing other services which you have requested; and
• to communicate an offer of other goods and services, with your prior consent.

We reserve the right to disclose any personal data and information we have concerning you if we are compelled to do so by a court of law or requested to do so by a governmental entity or if we determine it is necessary or desirable to comply with the law or to protect or defend our rights or property. We also reserve the right to retain information collected and to process such information to comply with accounting and tax rules and regulations.

We may share aggregated demographic information with business partners, affiliates or other entities.  This aggregate information is not linked or traceable to any personally identifiable information about you.

Except as described herein, we do not permit the sale or transfer of personally identifiable information to third parties.

Our commitment to Data Security

Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access or processing. Whilst we make every effort to protect your personal data, no security measures can guarantee that your personal data and information will not be subject to interference, misuse or hacking and we shall not be responsible for any loss, misuse or alteration arising as a result of such incidents.

Changes to our Privacy Policy

We may modify this Policy from time to time. Any changes to this Policy will be posted to our website so that you are always informed of the way we collect and use your personal data. Updated versions of our Policy will include the date of the revision at the end of this Policy so that you are able to check when the Policy was last amended.

Any changes to our Policy will become effective upon posting of the revised Policy on the website. Use of the website following such changes constitutes your acceptance of the revised Policy then in effect.

Date: July 2023