Personal Data Policy Bukit Merah Laketown Resort, Perak MALAYSIA.
Personal Data Protection Policy
This Personal Data Protection Policy (“PDPA Policy”) explains the manner in which your personal information collected from or provided by you is processed, disclosed and safeguarded by Bukit Merah Laketown Resort (wholly-owned managed by Bukit Merah Resort Sdn. Bhd.) (THE COMPANY).
THE COMPANY is committed to ensuring your personal information is protected. THE COMPANY understands and appreciates you are concerned about your privacy and about the confidentiality and security of information we may collect about you. We pledge to fully comply with the requirements of the Personal Data Protection Act 2010 (“PDPA”) WHICH CAME INTO EFFECT ON 15TH November 2013. The following discloses our information and gathering and dissemination practices.
1. The Application of this PDPA Policy
This PDPA applies to personal data and information in any form, whether electronic or written, regarding guests and other individuals who enters into transaction with us. This PDPA Policy conveys our commitment to protect your personal information and has been adopted by all the hotels owned, managed and/or operated by THE COMPANY or its affiliated or associated companies. References to Bukit Merah Laketown Resort or Bukit Merah Resort Sdn. Bhd, “we”, “our” and “us” hereinafter, depending on the context, collectively refer to THE COMPANY or its affiliated or associated companies.
2. Our collection of Personal Information
The term “personal data” in this PDPA Policy refers to personal information which is capable of identifying you as an individual. You can visit our website without providing any personal data or information. When we need to collect personal data from you to provide you with a particular service, we will ask you to voluntarily supply us with the information we need. Personal data may be collected for purposes including but not limited to:
(i) Fulfilling reservations or requests for information or services,
(ii) Accommodating your personal preferences,
(iii) Purchasing our products or services,
(iv) Registering for our program memberships,
(v) Submitting job applications; and/or
(vi) Facilitating communications (“the Purpose”)
3. Types of Personal Information we collect
The types of personal data that we process include but not limited to:
• Your name and address, contact information, Identity Card/Passport and Visa information;
• Guest stay information, including the hotels where you have stayed, date of arrival and departure, good and services purchased, special requests made, observations about your service preferences, telephone numbers, dialled and faxes and telephone messages received;
• Your credit card details, CVC number, bank account details, email address, profile or password details and any frequent flyer or travel partner programmed affiliation;
• Any information necessary to fulfil special requests (for example; leisure, travel and guest preferences);
• Your reviews and opinions about our services;
• Information shared with third party social media websites and services through our site (such as Facebook/Twitter/Instagram) will be governed by their privacy policies. You may also be able to modify your privacy settings with these third party social media web sites;
• Information that is gathered through registration that you specifically give THE COMPANY;
• CCTV recording of you in our premises.
4. Our commitment to Data Security
To maintain the accuracy of your personal data, as well as preventing unauthorized access to and ensuring the correct use of your personal data, we have carried out appropriate physical, electronic and managerial measures to safeguard and secure the personal data we collect. These measures are subject to on-going review and monitoring. Whilst we make every effort to protect your personal data, no security measures can guarantee that your personal data and information will not be subject to interference, misuse or hacking and we shall not be responsible for any loss, misuse or alteration arising as a result of such incidents.
5. How we use your information and whom we may disclose it to;
The information that we collect about you is used to help you access the services or acquire the goods that THE COMPANY provides more easily. THE COMPANY will use reasonable endeavours to keep the information we collect from you confidential. We do not sell, rent, loan, trade or lease your personal data stored in our database to any third parties. We may disclose the personal information, other information or data we collect from you if:
• Disclosure of information to our service providers, agents or business partners and affiliates that we work with in connection with our business;
• In circumstances where we believe that disclosure is required under the law, to cooperate with regulators or law enforcement authorities; or to enforce our Terms of Use or other agreements; or to protect our rights, property or safety of THE COMPANY, our customers or others. The foregoing includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk protection;
• In the event that THE COMPANY or substantially all of its assets are required by or merged
with another, your personal information may become subject to a different privacy policy;
• THE COMPANY may contract with third party who do analysis and development on our behalf. We may share your information with such a third party provided that such third party uses the information only to perform services as requested by THE COMPANY and agrees to maintain the information as strictly confidential.
• We may also use your information to send you promotional material, which you may find of interest. If you do not wish to receive any such material you may simply choose to “unsubscribe” from our mailing lists to inform Our Personal Data Protection Officer in writing and no further material will be sent to you.
6. Rights of access and correction
You have the right to request to access and correct your Personal Data in our records (subject to exemptions provided under the PDPA or other laws.) we will make every endeavour to ensure that your personal information is accurate and up to date but you are responsible for informing us about changes in your Personal Data and for ensuring that such information is accurate and current.
You have right to:
• Request access and access to your Personal Data in our records for verification purposes;
• Request the correction of your Personal Data in our records in the event the information is inaccurate, misleading, out-of-date or incomplete upon validation and verification of the new information;
• Request that your Personal Data shall only be kept for the fulfilment of the purpose of the collection of such information;
• Communicate to us your objection to the use of your Personal Data for marketing purposes; and
• Withdraw, in full or in part, you given consent, subject to any applicable legal restrictions, contractual conditions and a reasonable time;
You may request for access to a correction of your Personal Data or limit the processing thereof by submitting your written request to us via:
Personal Data Protection Officer
Bukit Merah Laketown Resort,
Jalan Bukit Merah,
34400 Semanggol,
Perak Darul Ridzuan.
Tel : +605 - 890 8888
Fax : +605 – 890 8000
Email : hrd@bukitmerahresort.com.my
We reserve the right to impose a reasonable administrative fee for access of your Personal Data by you as permitted under the Personal Data Protection Act.
In respect of your right to access and/or correct your Personal Data, we have the right to refuse the request to access and/or make any correction to your Personal Data for the reasons permitted under the law, such as where the expense of providing access to you is disproportionate to the risk to your or another person’s privacy.
7. Storage of data
Any personal information that we collect about customers including email addresses will be kept in a database of THE COMPANY. THE COMPANY will take all steps reasonably necessary to ensure that the database is treated securely and in accordance with this Privacy Policy Statement, and to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of data.
8. Choices to Limit Processing of Personal Data
The provision of your personal data to us is voluntary. If you do not provide your personal data to us, we may not be able to provide you the services which you require, may not be able to accomplish the Purpose and may not be able to communicate with you.
You are given notice that the Products and/or Services will be only be made available to you accepting and expressly consenting to the terms of this Privacy Policy, where such express acceptance and consent shall be evidenced by you clicking or checking or indicating accordingly on the relevant consent portion of the registration form or such other documents as may be furnished to you, as the case may be.
You have the right to limit in part or wholly any other processes of your personal data other that the Purpose it was initially given. If you wish to limit, kindly inform us immediately your request and the details on how the processing of your personal data is to be limited.
You may at any time withdraw or amend, in full or in part, your processing consent given subject always to any applicable legal restrictions, contractual conditions by contacting us at the details provided in section 6 above. Kindly inform us immediately your request for withdrawal or amendment.
Your visit to our public website may be recorded for analysis on the number of visitors to the site and general usage patterns.
9. Links to Third party Website
The Websites may contain links to third parties’ websites. Please note that THE COMPANY is not responsible for the collection, use, maintenance, sharing or disclosure of data and information by such third parties. If you provide information directly to such sites, the privacy policy and terms of service on those sites are applicable and we are not responsible for the information processing practices or privacy policies of such sites.
10. Consequences of Refusal / Failure to Provide Personal Data
The Personal Data provided to us are wholly voluntary in nature. However should your refusal of failure to provide the Personal Data results in the following, we shall not be held liable for any of the consequences arising therefrom:
a. The inability of parties to formalize and/or carry out the relevant agreement or transaction in relation to our product and/or services;
b. The inability for us to provide you with the information, notices, services and/or products requested;
c. The inability for us to update you with the latest promotion, product and/or services and obtaining your feedbacks on our products and/or services;
d. The inability of the relevant third parties to provide product and/or services to you on our behalf.
11. Inconsistency
In the event of any inconsistency between the English language version of the Personal Data Protection Notice and Policy and their corresponding Bahasa Malaysia language version, the terms in the English language version shall prevail.
12. Third party consent
In the event you have provided personal data of third parties (e.g. your emergency contact person, authorized representatives) to us, we rely on you to and deem that you have sufficiently obtained the prior consent of such third parties to allow us to process their personal data in relation in the Purpose and you have advised them to read our Personal Data Protection Notice and Policy.
Changes to our Personal Data Protection Policy
We may, from time to time, without prior notice to you, be required to change our Personal Data Protection Policy to comply with or consistent with changes in the applicable law and regulations as well as our business operations or policies. As such, we encourage you to check our Personal Data Protection Policy at our website from time to time.
Privacy Policy
Disclaimer
We try ensure that all information published is correct and is subject to change without prior notice. Bukit Merah Laketown Resort, or Bukit Merah Resort Sdn. Bhd. accepts no liability for any loss or damage arising from any use, misuse, inaccuracy or omission of information or other contents published in this website. This website serve as a convenient reference on Bukit Merah Laketown Resort only and as such, Bukit Merah Laketown Resort, is not liable for the contents of any off-site webpages or websites linked or linking to this website.