Privacy Policy

1. Introduction

tropicirkan ("we," "our," or "us") is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, engage our services, or otherwise interact with us.

By using our services or providing us with your personal information, you consent to the practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access our website or use our services.

For any questions or concerns regarding this Privacy Policy, please contact us at [email protected].

2. Information We Collect

2.1 Personal Information

We collect personal information that you voluntarily provide when:

• Submitting inquiry or booking forms through our website
• Communicating with us via email, phone, or in person
• Participating in surveys or feedback requests
• Subscribing to newsletters or promotional communications

This information may include:

• Full name and contact details (email address, phone number, mailing address)
• Passport information (for tour bookings requiring travel documentation)
• Dietary requirements or accessibility needs
• Payment information (processed through secure third-party payment processors)
• Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing behavior through cookies and similar technologies:

• IP address and browser type
• Operating system and device information
• Pages viewed and time spent on our website
• Referring website or search terms used
• Date and time of visits

For more information about our use of cookies, please refer to our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

• Processing and managing tour bookings and reservations
• Coordinating travel arrangements, accommodations, and transportation
• Providing customer support and responding to inquiries
• Accommodating special requirements or accessibility needs

3.2 Communication

• Sending booking confirmations and travel itineraries
• Providing pre-departure information and documentation
• Sharing updates about your booked tours
• Responding to questions or requests

3.3 Marketing (with consent)

• Sending promotional materials about new tours or services
• Providing information about cultural events or heritage topics
• Sharing newsletters and educational content

3.4 Business Operations

• Improving our website and services
• Analyzing usage patterns and preferences
• Preventing fraud and ensuring security
• Complying with legal obligations

4. Legal Basis for Processing

Under Malaysian Personal Data Protection Act 2010 (PDPA) and international data protection regulations, we process your personal information based on:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary to fulfill our contractual obligations to you
• Legal obligation: Processing is necessary to comply with applicable laws
• Legitimate interests: Processing is necessary for our legitimate business interests, provided these do not override your rights

5. Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information with:

5.1 Service Providers

• Hotels and accommodation providers in Cambodia
• Transportation companies and tour operators
• Payment processing services
• Travel insurance providers
• Website hosting and analytics services

5.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Enforce our terms and conditions
• Protect our rights, privacy, safety, or property
• Protect against legal liability

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Booking and travel information: Retained for 7 years for accounting and legal compliance purposes
• Marketing communications: Retained until you withdraw consent or unsubscribe
• Website analytics data: Retained for 26 months
• Correspondence and inquiries: Retained for 3 years

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure servers with restricted access
• Regular security assessments and updates
• Employee training on data protection practices
• Strict access controls and authentication procedures

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security.

8. Your Rights

Under Malaysian PDPA and applicable data protection laws, you have the following rights:

• Right to Access: Request copies of your personal information
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information under certain circumstances
• Right to Restrict Processing: Request limitation on how we use your information
• Right to Data Portability: Request transfer of your information to another service
• Right to Object: Object to processing of your information for certain purposes
• Right to Withdraw Consent: Withdraw consent for processing at any time

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. International Data Transfers

As we coordinate tours in Cambodia and work with service providers in various countries, your personal information may be transferred to and processed in jurisdictions outside Malaysia. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant authorities
• Verification that the receiving country has adequate data protection laws
• Obtaining your explicit consent where required

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

11. Third-Party Links

Our website may contain links to third-party websites, services, or resources. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending email notification for significant changes

We encourage you to review this Privacy Policy periodically.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you believe we have not addressed your concerns adequately, you have the right to lodge a complaint with the relevant data protection authority: