Privacy Policy

Introduction

Orivane is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, share, and protect your data when you interact with our heritage tour services.

By using our services, you consent to the collection and use of information in accordance with this policy. If you have questions about our privacy practices, please contact us at [email protected].

Information We Collect

Personal Data You Provide

When you book a tour or contact us, we collect:

• Full name and contact information (email address, phone number)
• Mailing address for booking confirmations
• Payment information processed through secure third-party payment processors
• Dietary restrictions, accessibility needs, or special requests
• Emergency contact information for tour safety

Automatically Collected Information

When you visit our website, we automatically collect:

• Device information (browser type, operating system)
• IP address and general location data
• Pages visited, time spent on site, and navigation patterns
• Referral source (how you found our website)

How We Use Your Information

We use collected data for the following purposes:

• Service Delivery: Processing bookings, coordinating tours, and providing customer support
• Communication: Sending booking confirmations, tour updates, and responding to inquiries
• Safety: Maintaining emergency contact information and accommodating special needs
• Improvement: Analyzing website usage to enhance user experience and tour offerings
• Marketing: Sending newsletters and promotional materials with your consent (you may opt out anytime)
• Legal Compliance: Meeting regulatory requirements and protecting our legal rights

Legal Basis for Processing

Under Malaysian Personal Data Protection Act 2010 and international data protection laws, we process your data based on:

• Consent: You have explicitly agreed to data collection for specific purposes
• Contract Performance: Processing is necessary to fulfill tour booking agreements
• Legitimate Interests: We have valid business reasons that do not override your rights
• Legal Obligations: We must comply with Malaysian and international legal requirements

Data Sharing and Disclosure

We share your information only in the following circumstances:

• Service Providers: Third parties who assist with payment processing, email communications, and website analytics (all bound by confidentiality agreements)
• Tour Partners: Local guides, accommodation providers, and transportation services necessary for tour delivery
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In the event of merger, acquisition, or sale of assets (with advance notice to you)

We do not sell or rent your personal information to third parties for marketing purposes.

Data Retention

We retain your personal information for different periods depending on the purpose:

• Booking Records: 7 years for financial and legal compliance
• Marketing Communications: Until you unsubscribe or request deletion
• Website Analytics: Aggregated and anonymized data retained indefinitely
• Customer Service Records: 3 years after last interaction

When data is no longer needed, we securely delete or anonymize it.

Data Security

We implement appropriate technical and organizational measures to protect your data:

• SSL encryption for all data transmitted through our website
• Secure servers with restricted access and regular security audits
• Staff training on data protection and confidentiality
• Regular backups and disaster recovery procedures
• Compliance with PCI DSS standards for payment card data

While we take security seriously, no internet transmission is completely secure. Please protect your own account credentials.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. Types of cookies we use:

• Essential Cookies: Necessary for website functionality (cannot be disabled)
• Analytics Cookies: Help us understand how visitors use our site
• Marketing Cookies: Track your browsing to show relevant advertisements

You can control cookie preferences through your browser settings or our Cookie Policy page. For more information, visit our Cookie Policy.

Your Privacy Rights

Under applicable data protection laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Portability: Receive your data in a structured, commonly used format
• Objection: Object to processing based on legitimate interests or for marketing purposes
• Restriction: Request that we limit how we use your data
• Withdraw Consent: Revoke previously given consent at any time

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

International Data Transfers

Your information may be transferred to and processed in countries outside Malaysia. When we transfer data internationally, we ensure appropriate safeguards are in place through:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions recognizing equivalent data protection standards
• Certification schemes demonstrating compliance with international standards

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected data from a child, please contact us immediately at [email protected], and we will delete the information.

Third-Party Links

Our website may contain links to external sites not operated by us. We are not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any site you visit.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a revised "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

Email: [email protected]

Phone: +60 4-826 7491

Mail: Orivane, 28 Lebuh Farquhar, George Town, 10200 Penang, Malaysia

You also have the right to lodge a complaint with the Personal Data Protection Department of Malaysia if you believe we have not handled your data appropriately.