Introduction
Universal Eden Holidays Sdn. Bhd. (SSM No. 202201026346) ("we", "our", or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information you provide to us when using our website and booking services.
This policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia. By using our services, you consent to the practices described in this policy.
Personal Data We Collect
We may collect the following categories of personal data:
- Identity data: Full name, nationality, passport number, date of birth.
- Contact data: Email address, phone number, mailing address.
- Booking data: Travel dates, destination, package selection, guest details, special requests.
- Payment data: Transaction references and payment method preferences. We do not store full card numbers.
- Technical data: IP address, browser type, and usage analytics collected via standard web server logs.
How We Use Your Personal Data
We use your personal data for the following purposes:
- Processing and confirming your travel bookings and enquiries.
- Sending booking confirmations, receipts, payment reminders, and trip reminders.
- Responding to your enquiries and providing customer support.
- Complying with legal, regulatory, and contractual obligations.
- Improving our website, services, and user experience.
- Sending promotional materials or updates where you have given consent.
Legal Basis for Processing
We process your personal data on the following legal bases: your consent, the performance of a contract (your booking), compliance with legal obligations, and our legitimate interests in operating and improving our travel services.
Sharing of Personal Data
We may share your personal data with:
- Service providers: Hotels, transport operators, tour guides, and other third-party partners required to fulfil your booking.
- Payment processors: Authorised payment gateways to process transactions securely.
- Regulatory authorities: Government agencies and law enforcement where required by law.
- IT and platform providers: Hosting, email delivery, and analytics services that support our operations.
We do not sell your personal data to any third party for marketing purposes.
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by Malaysian law. Booking records are typically retained for a minimum of seven (7) years for accounting and legal compliance purposes.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of internet transmission is completely secure, and we cannot guarantee absolute security.
Your Rights
Under the PDPA, you have the right to:
- Access the personal data we hold about you.
- Request corrections to inaccurate or incomplete data.
- Withdraw consent for direct marketing communications at any time.
- Lodge a complaint with the relevant data protection authority.
To exercise any of these rights, please contact us at uniedenholidays@gmail.com.
Cookies
Our website uses session cookies required for booking forms to function correctly. We do not use third-party tracking cookies for advertising purposes.
Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page with the effective date indicated below. We encourage you to review this page periodically.
Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Universal Eden Holidays Sdn. Bhd.SSM Registration: 202201026346
Jalan Kalansanan, Batu 6, Tuaran By Pass, 88450 Kota Kinabalu, Sabah, Malaysia
Email: uniedenholidays@gmail.com
Phone: +60 10-386 9077
Effective date: 1 January 2025. Last reviewed: June 2026.