This Privacy Policy explains how Heritage Trails handles personal data in connection with its website and reservation-based culinary and market tour services in Malaysia. It describes what we collect, why we use it, when we share it, and the choices and rights available to you.
This section introduces how personal information, user rights, and support pathways are addressed in the document below.
Subject to legal limits, you may ask to access, correct, or update your personal data, and you may object to or restrict certain processing where applicable. If you have provided information for a booking, you may also ask us to review whether it is still needed for ongoing service administration.
To make a privacy request, use the contact details in this policy and describe the data or issue concerned. We may ask for enough information to confirm your identity and locate the relevant records before responding.
Booking, payment, and service records are retained for the period needed to manage the tour, handle follow-up matters, and meet accounting or legal obligations. When data is no longer required, we delete it, anonymize it, or otherwise restrict it in accordance with our retention practices.
The updated version will apply from the date it is posted unless a different effective date is stated. If a change materially affects how we handle personal data, we will take reasonable steps to draw attention to the update.
We use personal data to respond to enquiries, manage booking requests, confirm dates and group details, review dietary information, arrange meeting-point and route logistics, process payments, communicate before and after the tour, provide local recommendations, maintain records, improve website performance, and meet legal, accounting, and security obligations.
We may share personal data with service providers that support website hosting, communications, payment processing, record management, or similar operational functions. Where a booking requires coordination with a venue or tasting partner, we may share limited details needed to confirm the reservation, dietary notes, or meeting arrangements.
We may disclose personal data to public authorities, legal advisers, or other parties when necessary to comply with applicable law, enforce our terms, protect our rights, or respond to lawful requests. We may also share information where disclosure is needed to prevent fraud, security incidents, or other misuse.
We may collect identification and contact details, booking and payment information, dietary preferences you choose to provide, group size and visit details, communication records, and technical data such as device, browser, and usage information. Where relevant to a tour request, we may also process information needed to confirm route suitability, meeting arrangements, and language preferences.
We receive personal data from website forms, email, phone calls, and other messages you send to us. We also obtain limited technical data automatically when you use the website, and we may receive booking-related information from payment or service providers involved in completing a transaction.
Our website may use essential cookies to support core functions, preference cookies to remember basic settings, and analytics cookies to understand site use and improve performance. Cookies may be session-based or persistent depending on their purpose.
You may manage cookies through your browser controls, including blocking, deleting, or restricting certain cookies. Some website features may not function properly if cookies are disabled. Where required, we may also present cookie choices through the website interface.
