GLOBAL PRIVACY POLICY
GLOBAL PRIVACY POLICY
GLOBAL DATA PRIVACY POLICY(GDPP)
Holiday Villa Hotels & Resorts Sdn. Bhd. (“Holiday Villa”, “Holiday Villa Group”, ‘the group”, “we”, “our” or “us”) respects your privacy and is committed to protecting the personal information entrusted to us by our guests, customers, business partners, website visitors, members, employees, suppliers and other individuals with whom we interact.
This Global Data Privacy Policy (“GDPP”) explains how we collect, use, store, process, protect and disclose your personal information when you visit our hotels, restaurants, resorts, residences, villas, serviced apartments, websites, booking platforms, loyalty programmes, mobile services, social media channels, customer service platforms and other digital or offline services operated by the Holiday Villa Group.
For the purpose of this GDPP, the Holiday Villa Group refers collectively to Holiday Villa Hotels & Resorts Sdn. Bhd., its subsidiaries, associated companies, owned, managed, licensed and franchised hotels, together with its hospitality brands, including:
• Holiday Villa Hotels & Resorts
• ViVilla by Holiday Villa
• CitiVilla
• D-Villa
• Future hospitality brands, lifestyle concepts, residences, serviced apartments, villas or accommodation products introduced by the Holiday Villa Group.
This Policy also applies to our official websites, booking platforms, Villa Gold Loyalty Programme, digital marketing platforms and customer relationship management systems.
From time to time, Holiday Villa Group may feature affiliated hotels or strategic partners on its websites or booking platforms. Unless expressly stated otherwise, such affiliated hotels remain independently owned and operated and may publish their own privacy policies.
By accessing our websites, making reservations, enrolling in our loyalty programmes, staying at one of our properties and/or otherwise interacting with the Holiday Villa Group, you acknowledge and consent that your personal information may be collected and processed in accordance with this Global Data Privacy Policy and applicable data protection laws.
APPLICABLE LAW
This Global Data Privacy Policy is governed by the laws of Malaysia and has been developed in accordance with the Personal Data Protection Act 2010 (PDPA) and other applicable Malaysian legislation.
As the Holiday Villa Hotels & Resorts Group operates internationally, certain hotels, business operations, digital services, or affiliated entities may also be subject to additional privacy, data protection, or consumer protection laws in the jurisdictions in which they operate.
Where local legislation imposes higher standards or additional obligations relating to the collection, use, storage or disclosure of personal data, the Group will endeavour to comply with such applicable legal requirements in addition to this Global Data Privacy Policy.
Nothing in this Policy is intended to limit or exclude any rights or obligations provided under applicable laws.
SCOPE
This Global Data Privacy Policy applies to the collection, processing, storage, disclosure and protection of personal information obtained through:
• Official Holiday Villa Group websites
• Hotel websites operated under the Holiday Villa Group
• Online booking engines and reservation platforms
• Villa Gold Loyalty Programme
• Mobile websites and future mobile applications
• Customer service centres
• Hotel reservations
• Front Office registration and check-in
• Restaurants, spas, recreation facilities and hotel services
• Sales offices
• Marketing campaigns and promotions
• Corporate events, meetings and conferences
• Surveys and guest feedback
• Social media interactions
• Digital communications
• Customer relationship management (CRM) systems
• Artificial Intelligence (AI) assisted customer services
• Other products and services provided by the Holiday Villa Group.
This GDPP does not apply to third-party websites, booking channels, payment providers or independent businesses whose privacy practices are governed by their own privacy policies.
DEFINITIONS
For the purpose of this Policy:
a) Personal Information/Personal Data means any information that identifies, relates to or can reasonably identify an individual, either directly or indirectly, including personal data such as your name, national identity card number (NRIC No.), passport number, contact number, address, email address, designation, company name and sensitive personal data as defined in the PDPA.
b) Processing means any operation performed on personal information, including collecting, recording, organising, storing, using, analysing, sharing, transferring, updating and/or deleting information.
c) Digital Services include our websites, booking engines, loyalty programmes, mobile services, customer portals, online communications and future digital platforms.
d) Cookies are small text files stored on your device that assist in providing website functionality, remembering preferences, improving performance and analysing website usage.
e) Artificial Intelligence (AI) refers to automated technologies, machine learning tools, chatbots, translation services and intelligent systems used to enhance customer experience, operational efficiency and service delivery.
f) Affiliated Hotel refers to an independently owned and operated hotel participating within the Holiday Villa Group network under a strategic partnership, marketing collaboration and/or other commercial arrangement.
WEBSITE & TECHNICAL INFORMATION
When you interact with our websites, online booking platforms or digital services, the Group may automatically collect certain technical information including Internet Protocol (IP) addresses, browser type and version, operating system, device information, website usage. Such information may include website pages visited, date and time of access, clickstream activity, referring websites, search terms, browser type and version, device type, operating system, Internet Protocol (IP) address, language settings, session identifiers, approximate geographic location, cookie preferences and other technical information generated through your interaction with our digital platforms.
The Group uses cookies and similar technologies to collect this information in order to:
• operate and maintain our websites;
• improve website functionality, security and performance;
• enhance user experience;
• understand website usage and booking behaviour;
• measure the effectiveness and the implementation of marketing campaigns;
• support website analytics and business reporting; and
• improve our hospitality products and services.
The Group may also collect aggregated, statistical or anonymised information that does not identify any individual. Such information may be used for business analysis, operational planning, marketing activities, service improvement, website optimisation and other legitimate business purposes.
Where website usage or technical information is combined with personal data in a manner that identifies an individual, the combined information will be treated as personal data and managed in accordance with this Global Data Privacy Policy.
COOKIES & DIGITAL TECHNOLOGIES
The Group uses cookies and similar technologies to improve the functionality, security and performance of our websites and digital services, personalise user experiences and better understand how visitors interact with our online platforms.
Cookies are small text files stored on your computer, mobile device or other internet-enabled device when you visit our websites. They enable websites to remember your preferences and recognise your device during future visits.
The Group may use the following categories of cookies and similar technologies:
a) Essential Cookies
These cookies are necessary for the operation of our websites and online booking platforms. They enable core functions such as website navigation, secure login, booking transactions, fraud prevention and website security. Without these cookies, certain website functions may not operate correctly.
b) Functional Cookies
These cookies remember your preferences, such as language selection, region, previously viewed pages and other settings that improve your browsing experience.
c) Analytics Cookies
Analytics cookies help us understand how visitors use our websites by collecting aggregated and anonymised information relating to website traffic, visitor behaviour, page performance and user engagement. This information assists us in improving website design, content, functionality and overall guest experience.
d) Marketing Cookies
Marketing cookies help us understand the effectiveness of our advertising campaigns and may be used to display relevant promotions, personalised offers and marketing communications through our own websites or authorised advertising platforms.
Where required by applicable law, these cookies will only be used with your consent.
e) Website Analytics
The Group may use website analytics, performance monitoring and reporting tools to better understand website usage, visitor trends and booking behaviour.
Such technologies may collect information including:
• Browser type
• Device type
• Operating system
• Approximate geographic location
• Referring website
• Pages viewed
• Time spent on pages
• Clickstream activity
• Website performance metrics
• Booking conversion information
This information is generally used in an aggregated or statistical format and is not intended to personally identify individual visitors unless necessary for security, fraud prevention or legal compliance.
f) Digital Marketing Technologies
The Group may use digital marketing technologies to measure campaign performance, improve website relevance, deliver personalised content, support loyalty programmes and better understand customer interests.
These technologies may support:
• Search engine marketing
• Online advertising
• Display advertising
• Retargeting and remarketing
• Conversion measurement
• Customer relationship management
• Loyalty programme engagement
• Website optimisation
• Campaign performance reporting
g) Managing Cookies
Most internet browsers allow you to manage or disable cookies through your browser settings. Please note that restricting or disabling certain cookies may affect the functionality of our websites, online booking platforms and other digital services.
By continuing to use our websites, you acknowledge and agree that cookies and similar technologies may be used in accordance with this Global Data Privacy Policy, subject to your browser settings and applicable legal requirements.
ARTIFICIAL INTELLIGENCE & AUTOMATED TECHNOLOGIES
The Group may utilise Artificial Intelligence ("AI") and other automated technologies to enhance operational efficiency, improve guest experiences and support the delivery of our hospitality services.
AI-assisted technologies may be used for purposes including:
• Customer enquiries and virtual assistance
• Reservation support
• Guest communications
• Language translation
• Website search and navigation
• Personalised recommendations
• Marketing analysis
• Customer relationship management
• Business intelligence and reporting
• Fraud prevention
• Cybersecurity monitoring
• Operational efficiency
Where AI technologies are used, the Group remains committed to responsible, transparent and ethical use of such technologies.
The Group does not rely solely on automated decision-making where such decisions may have a legal or similarly significant impact on an individual. Appropriate human oversight will be maintained where required.
As technology continues to evolve, the Group may introduce new digital services and AI-assisted tools to improve guest experiences and business operations. Such technologies will be implemented in accordance with applicable privacy legislation and this Global Data Privacy Policy.
PERSONAL DATA
The Group respects the confidentiality of your personal data and does not sell or rent the personal data to third parties.
Where necessary to operate our business and to provide our hospitality services, personal data may be shared with carefully selected third parties acting on our behalf or as required by applicable law.
Where reasonably necessary to provide hospitality services or comply with applicable legal requirements, the Group may collect limited categories of sensitive personal data voluntarily provided by you, including dietary requirements, food allergies, accessibility requirements, medical information relevant to your stay, emergency assistance information or religious requirements associated with hospitality services. Such information will only be processed where necessary and protected in accordance with applicable law.
We do collect other personal information, such as:
1. Arrivals/Check In
Local laws and legislation require that we collect personal information such as guests' passports or local identity cards during registration/check-in at our properties. We may also use closed-circuit television and other security measures at our properties that may capture or record images of guests and visitors in public areas, and information related to your location while on our properties, via keycards and other technologies. We may also use other technologies that record sound or video to protect our staff. In addition, we may collect personal information in connection with on-property services, such as concierge services, health/recreational clubs, spas, activities, child care services, and equipment rental.
2. Guest Services
To enhance the guest experience, the Group may also utilise digital technologies such as online pre-arrival registration, digital check-in and check-out, electronic key access, guest Wi-Fi authentication, mobile communications and other digital guest services where available. Personal data collected through these services will be processed in accordance with this Global Data Privacy Policy and applicable laws.
3. Villa Gold Card :
When you enrol in the Villa Gold loyalty programme, you will be required to confirm that you are at least 18 years of age. The Group will create a unique Villa Gold membership account for you, which includes your membership number and secure account credentials.
When managing your Villa Gold profile through the web application or other authorised digital services, you may update or provide additional personal data, including your contact details, room preferences, language preferences, communication preferences and other information relevant to your membership and guest experience. Additional information may be requested when you make reservations, redeem rewards, purchase promotional offers, participate in membership campaigns and/or use other Villa Gold services. Such information will be collected and processed in accordance with this Global Data Privacy Policy.
Villa Gold members are responsible for maintaining the confidentiality of their account credentials and should take reasonable steps to protect their accounts from unauthorised access. Where available, members are encouraged to use strong passwords and multi-factor authentication to enhance account security.
4. Campaigns/Surveys
We may request demographic data or other personal information in customer surveys.
a. If you submit an online “pre-application” for prescribed survey/campaign- or if you submit a reservation or information request online, or participate in an online “click-to-chat” type feature, we may ask you to provide your demographic and/or other information relevant to the campaign, promotion, survey or reservation information.
b. If you attend a Holiday Villa event, or preview tour, or enter a lucky draw, we may ask you to provide information about your family composition, travel preferences, frequency of travel and other vacation history information.
c. Information collected through surveys, competitions, promotions or guest feedback programmes may be used to improve the Group's products, services, guest experience, marketing effectiveness and overall business operations
5. Meetings, Events & Group Bookings
When you organise or participate in a meeting, conference, banquet, wedding, exhibition or any other event at a Holiday Villa Hotels & Resorts Group property, we may collect personal data necessary to plan, administer and deliver the event. This may include event details, dates, venue requirements, the number of attendees, guest room allocations, billing information and, where applicable, company or organisation details.
Where reservations or event arrangements are made through an organiser, employer, travel manager or other authorised representative, relevant personal data relating to attendees may be provided to the Group for the purpose of managing the event, accommodation and associated hospitality services.
Where appropriate and necessary for the administration of the event, the Group may share relevant personal data with authorised event organisers, meeting planners or participating organisations. If you are the event organiser, the Group may also share relevant information with authorised service providers engaged to support the delivery of your event, such as audiovisual, decoration, entertainment, transportation and/or other event-related services.
Where permitted by applicable law or with your consent, the Group may communicate with you regarding future hospitality products, services or event-related opportunities that may be of interest to you.
6. Online Accounts:
When you register an online account, you are to select a username and password.
Users are responsible for maintaining the confidentiality of their usernames, passwords and other account credentials. The Group recommends selecting strong passwords and changing them periodically to help protect account security.
7. Social Media, Digital Communities & Content SHARING
If you choose to participate in Holiday Villa -sponsored social media activities or offerings, we may collect certain information from your social media account
consistent with your settings within the social media service, such as location, check-ins, activities, interests, photos, status updates and friend list. You should understand that you may be subject to the terms and conditions and any privacy policies of the social media site and that Holiday Villa is not responsible for your activities on social media sites. This may include participation through blogs, online communities, video-sharing platforms, messaging platforms and other digital communication channels operated by or associated with the Group.
8. Sharing Promotions & Digital Content
From time to time, the Group may provide digital content that enables you to share promotional offers, hotel packages, event information, competitions, campaigns, booking links, digital brochures, videos and/or other marketing materials with family members, friends and/or colleagues through social media platforms, messaging applications, email and/or other digital communication channels.
The Group may also publish and distribute promotional materials, digital assets, photographs, videos and/or other marketing content featuring guests, event participants, influencers, brand ambassadors, third-party collaborators and/or business partners where the necessary permissions, consents, licences and/or contractual authorisations have been obtained, where required. Such content may be shared through the Group's official websites, social media platforms, digital marketing channels, messaging applications and/or other authorised communication platforms in accordance with applicable laws and the relevant agreements.
• Promotional flyer
• Campaign artwork
• Hotel offers
• QR codes
• Booking links
• Digital brochures
• Telegram
• TikTok
• LINE
• Xiaohongshu
• Youtube
• X
• Video & reels
• Social media posts
• WhatsApp messages
• Messenger
• Competition entries
• Other messaging & social media platforms
If you choose to share such content with another individual, you should ensure that you have the appropriate permission to provide any personal information, such as their name, email address and/or contact number, where required.
Any personal data provided for the purpose of sharing promotional and/or marketing content will be used solely to facilitate that communication and will not be retained or used for unrelated marketing purposes unless consent has been obtained or otherwise permitted by applicable law.
9. Employment Applications:
If you choose to apply online for employment with Holiday Villa, please read the terms of employment. Recruitment activities may also be conducted through online recruitment platforms or authorised recruitment agencies. Personal data relating to employment applications will be processed in accordance with the Group's Recruitment Privacy Policy or applicable employment procedures.
PERSONAL INFORMATION WE COLLECT FROM THIRD PARTIES
In addition to the personal data that you provide directly to us, the Group may also obtain personal data from authorised third parties where permitted by law and where reasonably necessary to provide our hospitality services, fulfil contractual obligations and/or support our business operations and marketing activities.
Such third parties may include travel agents, Online Travel Agencies (OTAs), Global Distribution Systems (GDS), corporate travel managers, event organisers, airlines, tourism partners, payment service providers, loyalty programme partners, authorised marketing partners, publicly available sources, social media platforms (subject to your privacy settings), government authorities, and other authorised business partners.
Where appropriate, the Group may combine personal data obtained from third parties with information already held by us to improve guest services, personalise customer experiences, administer reservations and loyalty programmes, enhance operational efficiency, and support legitimate business activities.
The Group will only collect, use and share such personal data in accordance with this Global Data Privacy Policy and applicable laws.
USE OF PERSONAL INFORMATION COLLECTED ABOUT YOU
The Group uses your personal data to provide and manage hospitality services, process reservations and payments, administer loyalty programmes, communicate with guests and customers, enhance guest experiences, improve our products and services, support business operations, and comply with applicable legal and regulatory obligations.
The Group may communicate with you through email, telephone, SMS, MMS or messaging applications, mobile notification and other electronic communication services, social media, postal mail or other electronic communication channels that you have authorised or that are otherwise permitted by applicable law.
Where appropriate and in accordance with applicable law, the Group may use your personal data to:
• administer reservations, check-in, check-out, guest services and hospitality experiences;
• personalise your stay, recognise your preferences and enhance customer service;
• administer Villa Gold and other loyalty, membership or promotional programmes;
• communicate with you regarding reservations, enquiries, customer support, promotions and other authorised marketing communications where permitted by law or with your consent;
• process payments, billing and other financial transactions;
• manage meetings, conferences, events and other hospitality-related services;
• conduct surveys, competitions, promotional campaigns and customer engagement activities;
• improve the functionality, performance, security and user experience of our websites, booking platforms and digital services;
• analyse business performance, booking trends, website usage and customer engagement to improve our products, services and operations;
• protect the safety, security and integrity of our guests, employees, properties and business operations, including fraud prevention and cybersecurity; and
• comply with applicable legal, regulatory and contractual obligations.
HOW WE SHARE PERSONAL INFORMATION
As an international hospitality company, the Holiday Villa Hotels & Resorts Group is committed to delivering a consistent standard of service across its hotels, brands and business operations. To provide our hospitality services and support our business activities, we may share your personal data with affiliated entities, authorised service providers and other third parties where necessary and in accordance with this Global Data Privacy Policy and applicable laws.
Where personal data is transferred to another country, the Group will take reasonable steps to ensure that appropriate safeguards are in place to protect your personal data, even where the data protection laws of that jurisdiction may differ from those of your country.
Personal data may be shared in the following circumstances:
a. Holiday Villa Hotels & Resorts Group – Owned, Joint Venture, Licensed and Managed Properties
We may share personal data among hotels, resorts, residences and other hospitality businesses that are owned, jointly owned, managed, licensed and/or operated under the Holiday Villa Hotels & Resorts Group where reasonably necessary to administer reservations, provide hospitality services, recognise guest preferences, support loyalty programmes, improve operational efficiency and deliver a consistent guest experience.
b. Affiliated Hotels & Strategic Partnerships
Where applicable, personal data may be shared with affiliated hotels, strategic partners or co-branded hospitality businesses participating within the Holiday Villa Hotels & Resorts network solely for the purpose of facilitating reservations, providing hospitality services, administering joint programmes or fulfilling contractual obligations.
c. Payment Processing & Billing
To facilitate reservations, deposits, billing and payment transactions, the Group may collect, process and share relevant payment and billing information with authorised financial institutions, payment gateways, payment service providers, banks, credit or debit card issuers, payment processors, corporate clients or employers (where applicable), and other authorised third parties involved in processing or verifying payments.
This may include payments made through online booking platforms, payment gateway links, electronic bank transfers, point-of-sale (POS) systems, payment terminals, digital wallets, corporate billing arrangements and other authorised payment methods. Personal data will be processed solely for payment processing, billing, verification, fraud prevention, reconciliation and related financial or legal purposes in accordance with applicable laws.
d. Meetings, Conferences, Banquets & Events
Where you attend or organise meetings, conferences, weddings, banquets, exhibitions or other events hosted by the Group, personal data may be shared with authorised event organisers, meeting planners or participating organisations where reasonably necessary for event administration, guest services, security, billing and operational purposes.
e. Business Partners & Hospitality Services
The Group may work with authorised business partners to provide products and services that enhance your guest experience, including transportation, tourism, leisure activities, travel services, loyalty programmes and other hospitality-related services. Personal data will only be shared where necessary to provide the requested products or services or administer programme benefits.
f. Joint Marketing, Promotions & Competitions
The Group may collaborate with business partners, tourism organisations, sponsors and/or other authorised organisations in connection with joint promotions, competitions, prize draws, campaigns and/or marketing activities. Where participation requires the sharing of personal data, such information will only be shared for the purposes of administering the promotion, fulfilling prizes or providing the relevant products or services, and in accordance with applicable laws.
g. On-Property Services
To provide services during your stay, personal data may be shared with authorised providers of on-property services, including restaurants, bars, spas, wellness facilities, recreational activities, concierge services, transportation providers and other guest services offered at or through the hotel.
h. Service Providers
The Group engages carefully selected service providers to support the delivery of hospitality services and business operations. These may include providers of reservation systems, customer relationship management (CRM) systems, information technology services, cloud hosting, cybersecurity, payment processing, website management, booking platforms, loyalty programme administration, digital marketing, communications, business analytics, accounting, auditing, legal services, insurance administration, customer surveys and other professional or operational services.
Such service providers are authorised to process personal data only for the purposes specified by the Group and are required to maintain appropriate safeguards to protect that information.
i. Business Transactions
As the Group continues to grow, it may acquire, dispose of, merge, restructure or reorganise hotels, businesses or assets. In such circumstances, personal data may be transferred to the relevant parties as part of the transaction, subject to appropriate confidentiality obligations and applicable legal requirements
j. Marketing Communications
Where permitted by applicable law or where you have provided your consent, the Group may communicate with you regarding reservations, guest services, promotions, loyalty programme benefits, surveys, competitions, events, hotel news and other products or services that may be of interest to you.
Such communications may be delivered through various communication channels, including email, telephone, SMS, chat apps and other messaging applications, mobile phone and notifications, social media platforms and messaging services, online advertising, postal mail and/or any other digital communication channels authorised by you.
You may update your communication preferences or opt out of receiving marketing communications at any time, except where communications are necessary to administer reservations, memberships, transactions or other contractual obligations.
LEGAL & REGULATORY REQUIREMENTS
The Group may disclose personal data where required or permitted by applicable law, including to:
• comply with legal or regulatory obligations;
• respond to requests from government authorities, regulators or law enforcement agencies;
• comply with court orders or other lawful processes;
• protect the rights, property, safety or security of the Group, its guests, employees or the public;
• investigate suspected fraud, criminal activity or security incidents;
• enforce the Group's terms and conditions or other contractual rights; and/or
• respond to emergencies where disclosure is necessary to protect life, health or property.
ACCESS BY MINORS
Holiday Villa’s websites, online booking platforms and digital services are intended for use by individuals aged 18 years and above. A minor using the website must be supervised by a parent, legal guardian, or other responsible adult.
Personal data relating to individuals under the age of 18 will only be collected where reasonably necessary to facilitate a reservation, provide hospitality services, comply with applicable legal requirements, or with the consent of a parent or legal guardian where required.
If a parent or legal guardian believes that personal data relating to a minor has been submitted inappropriately through the Group's websites or digital services, please contact us. Upon verification, the Group will review the information and, where applicable, remove or update the relevant personal data in accordance with applicable law.
MOBILE APPLICATIONS & LOCATION-BASED SERVICES
The Group's websites, online booking platforms, mobile applications and other digital services are designed to enhance your guest experience and may require you to provide certain personal data when making reservations, accessing your account, managing bookings, participating in loyalty programmes or using other online services.
To access certain features, you may be required to sign in to your account or provide your reservation confirmation number together with other information to verify your identity.
Where the Group provides mobile applications or other digital services, such applications may collect personal data and technical information necessary to support their functionality, improve user experience and deliver hospitality services. Any personal data collected through these applications will be processed in accordance with this Global Data Privacy Policy.
With your permission and subject to your device settings, the Group's mobile applications or digital services may use location-based technologies, including Global Positioning System (GPS) or other location services, to assist you in locating nearby hotels, provide relevant local information, personalise your experience or support other location-based features.
Where location information is shared with authorised service providers to facilitate these services, such information will be processed only for the intended purpose and in accordance with this Global Data Privacy Policy and applicable laws.
You may enable, restrict or disable location services at any time through your device settings. Where location data is linked to your personal data, it will be treated as personal data and protected in accordance with this Global Data Privacy Policy.
LINKS TO THIRD-PARTY WEBSITES
The Group's websites, online booking platforms, mobile applications and digital services may contain links to third-party websites, booking platforms, applications or other online services for your convenience or to facilitate reservations, travel arrangements, payments or other hospitality-related services.
These may include, but are not limited to:
• Online Travel Agencies (OTAs);
• Global Distribution Systems (GDS);
• Payment gateways and financial institutions;
• Travel, tourism and transportation partners;
• Social media platforms;
• Blogs, forums and online communities;
• Video sharing and streaming platforms;
• Search engines and mapping services;
• Artificial Intelligence (AI) services;
• Customer communication platforms;
• Affiliated hotels and strategic partners; and
• Other third-party websites or digital services.
Where you choose to access or provide personal data through any third-party website or digital service, the collection, use, storage and disclosure of your personal data will be governed by the respective privacy policies and terms of use of those third parties.
The Holiday Villa Hotels & Resorts Group does not own, control or accept responsibility for the privacy practices, content, availability or security of third-party websites or digital services. We encourage you to review the applicable privacy policies before providing any personal data.
PROTECTING PERSONAL DATA
The Holiday Villa Hotels & Resorts Group is committed to protecting the confidentiality, integrity and security of the personal data entrusted to us.
The Group implements appropriate administrative, organisational, physical and technical safeguards designed to protect personal data against unauthorised access, disclosure, alteration, misuse, loss or destruction.
These measures may include:
• information security policies and procedures;
• controlled access to personal data and information systems;
• employee confidentiality obligations and privacy awareness training;
• secure networks, firewalls and cybersecurity monitoring;
• encryption and secure transmission of personal data where appropriate;
• secure cloud hosting and information technology infrastructure;
• payment security measures, including compliance with applicable payment industry standards where required;
• system monitoring, auditing and regular maintenance; and
• other reasonable security measures appropriate to the nature of the personal data processed.
The Group also requires its subsidiaries, affiliated entities, authorised business partners and service providers who process personal data on its behalf to maintain appropriate safeguards to protect such information.
While the Group continually reviews and enhances its security practices, guests and users of our digital services also play an important role in protecting their personal information. We encourage you to maintain the confidentiality of your account credentials, use strong passwords, enable multi-factor authentication where available, and ensure that the devices used to access the Group's digital services remain secure.
For your own protection, please do not send credit card details, passwords or other confidential personal information via email or unsecured communication channels unless specifically requested through an authorised and secure process.
The Group will never ask you to disclose your account passwords or login credentials by email, SMS, messaging applications or social media. If you receive any communication claiming to be from the Group requesting such information, you should not respond and are encouraged to notify us immediately at:
customer-privacy@holidayvilla.com.my
ACCESSING & UPDATING YOUR PERSONAL DATA FOR
VILLA GOLD CARD (VGC) MEMBERS
Holiday Villa’s Group is committed to maintaining accurate, complete and up-to-date personal data. If you are a Villa Gold member, you may access, review and update certain personal information through your Villa Gold account or other authorised online services, where available.
You may also request access to, correction or updating of your personal data held by the Group. Requests may be submitted in writing or through other authorised communication channels using the contact details provided below. We will take reasonable steps to verify your identity before providing assistance or making any changes to your personal data.
In accordance with applicable law, you may also request access to the personal data held by the Group or request the correction of inaccurate or incomplete personal data. The Group will respond to such requests within the timeframe prescribed by applicable law. Where permitted by law, a reasonable administrative fee may apply to certain requests.
Please note that this Global Data Privacy Policy relates solely to the collection, use and protection of your personal data.
The Villa Gold Membership Terms & Conditions, including programme benefits, eligibility, points earning and redemption, rewards, membership privileges and other programme rules, are available through the Villa Gold web application or may be obtained by contacting the Group using the contact details provided in this Policy.
Privacy requests or enquiries should be directed to:
Holiday Villa Hotels & Resorts Sdn. Bhd.
Level M, Holiday Villa Hotel Suites Kuala Lumpur
(formerly Crown Regency Serviced Suites)
12 Jalan P. Ramlee
50250 Kuala Lumpur, Malaysia
Email: customer-privacy@holidayvilla.com.my
DATA RETENTION
The Group retains personal data only for as long as it may be necessary to fulfil the purposes for which it was collected, including providing hospitality services, administering reservations and loyalty programmes, the Groups marketing activities, maintaining guest records, complying with legal, accounting, taxation and regulatory obligations, resolving disputes, protecting the Group's legitimate business interests and enforcing contractual rights.
When personal data is no longer required, it will be securely deleted, anonymised, destroyed or otherwise disposed of in accordance with the Group's internal retention procedures and applicable legal requirements.
YOUR PRIVACY RIGHTS
Subject to applicable laws, you may have the right to:
• request access to your personal data;
• request correction or updating of inaccurate or incomplete personal data;
• withdraw consent where processing is based on consent;
• request restriction of certain processing activities where permitted by law;
• request deletion of personal data where legally applicable;
• object to certain marketing communications;
• lodge a complaint with the appropriate regulatory authority where applicable.
To protect your privacy, the Group may request sufficient information to verify your identity before responding to any request.
Certain requests may be subject to legal, contractual or operational limitations permitted under applicable law.
CHANGES TO THIS GLOBAL DATA PRIVACY POLICY
The Group may review and update this Global Data Privacy Policy from time to time to reflect changes in applicable laws, business operations, technology or hospitality services.
The most current version will always be published on Holiday Villa Hotels & Resorts official website at :
https://www.holidayvillahotels.com/global-privacy-policy/
Where appropriate, significant changes may be communicated through our websites, digital platforms or other suitable communication channels.
Continued use of the Group's products, services, loyalty programmes and/or websites following the publication of any revised Policy and your consent to the Groups continued collection, storage and processing of your data including sensitive personal data.
COMMUNICATIONS
If you have any questions about this Global Data Privacy Policy or how Holiday Villa processes your personal information, please contact:
Holiday Villa Hotels & Resorts Sdn. Bhd.
Level M, Holiday Villa Hotel Suites Kuala Lumpur
(formerly Crown Regency Serviced Suites)
12 Jalan P. Ramlee
50250 Kuala Lumpur, Malaysia
Email: customer-privacy@holidayvilla.com.my
DISCLAIMER:
The information contained on the Holiday Villa Hotels & Resorts Group's official websites, online booking platforms and digital services is provided in good faith for general information and hospitality service purposes.
Nothing contained in this Global Data Privacy Policy shall limit or exclude any rights, obligations or remedies available under applicable laws, contractual agreements or the specific terms and conditions governing individual products, services or reservations.
Where any provision of this Global Data Privacy Policy is inconsistent with or conflicts with applicable legislation, the applicable legislation shall prevail to the extent of such inconsistency.
© Holiday Villa Hotels & Resorts Sdn. Bhd. All Rights Reserved.
|
|