PERSONAL DATA PROTECTION ACT
This Privacy Notice sets out how Sama-Sama Hotels Digital Membership App, will handle personal information in accordance with the Personal Data Protection Act 2010 (“PDPA”) and the laws of Malaysia.
COLLECTION OF PERSONAL DATA
We may collect the following types of personal data from you when you use our digital membership app:
Personal identification information (Name, email address, phone number, etc.)
Demographic information (age, gender, etc.)
Payment information (credit card details, billing address, etc.)
Transaction details (membership purchases, renewals, etc.)
Technical data (IP address, browser type, operating system, etc.)
Usage data (preferences, app interactions, etc.)
USE OF PERSONAL DATA
We use the personal data collected for the following purposes:
To provide and improve our services
To process your membership and payments
To communicate with you regarding your membership and our services
To send you promotional materials and updates (with your consent)
To comply with legal obligations
DISCLOSURE OF YOUR PERSONAL INFORMATION
Companies and/or organisations that act as our agents, service providers and/or professional advisers;
Companies and/or organisations that assist us in processing and/or otherwise fulfilling transactions that you have requested;
Our business associates and other parties for purposes that are directly related to the purpose of collecting your personal information;
Other parties in respect of whom you have given your express or implied consent;
PROTECTION OF PERSONAL DATA
We implement a variety of security measures to ensure the safety of your personal data, including:
Encryption of data during transmission
Secure storage of data with restricted access
Regular security assessments and updates
Staff training on data protection practices
RETENTION OF PERSONAL DATA
We retain your personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Once the data is no longer needed, we will securely delete or anonymize it.
DIRECT MARKETING
In certain instances, we may disclose your relevant personal information to our preferred merchants and strategic partners where your prior consent has been obtained and subject at all times to any laws (including regulations, guidelines and/or obligations) applicable to us. We take reasonable steps to make sure that our agreements with service providers include appropriate privacy and confidentiality obligations.
If you do not wish your personal information to be utilised for the purposes of marketing or should you change your mind in relation to your previous decision, please contact us at the address detail as per stated at the end of this Privacy Notice. We will abide by your latest written instructions to us. Where indicated (for example in registration forms), it is obligatory to provide your personal information to us to enable us to process your application for our services and/or products. Should you decline to provide such obligatory personal information, we may not be able to process your application or provide you with our services or products.
We can assist you to access and correct your personal information hold by us.
WHAT IF THE PERSONAL INFORMATION PROVIDED BY YOU IS INCOMPLETE? YOUR RIGHTS TO ACCESS AND CORRECT YOUR PERSONAL INFORMATION
Where you wish to have access to your personal information in our possession, or where you are of the opinion that such personal information hold by us is inaccurate, incomplete, misleading or where relevant, not up-to-date, you may make a request to us via our Data Access Request Form or Data Correction Request Form respectively. These forms are available at our office.
We will use reasonable efforts to comply with your request to access or correct your personal information within 21 days of receiving your duly completed Data Access Request Form/Data Correction Request Form and the relevant processing fee (if any).
Please note that we may have to withhold access to your personal information in certain situations, for example when we are unable to confirm your identity or when the information requested is of a confidential commercial nature or in the event we receive repeated requests for the same information.
LINKS TO THE THIRD PARTY WEBSITES
Please be informed that this Privacy Notice applies solely to our Website and does not apply to any third-party websites that you may access/link from our Website. To determine how these third-party websites (e.g. Twitter, Facebook, YouTube) deal with your Personal Information, you should ensure that you have read their respective privacy policies.
We may amend this Privacy Notice from time to time. Please check our website on an ongoing basis for information on our most up-to-date practices. Should you have any queries, concerns or complaints in relation to this Privacy Notice, kindly contact us during office hours (between 9.00 am to 6.00 pm – Monday to Friday) at the following contact points:
UPDATES TO OUR PRIVACY NOTICE OUR CONTACT DETAILS
Designation: General Manager
Telephone: +603 8778 0094
Fax No.: +603 8787 5555
E-mail: sundra.kulendra@samasamahotels.com
Address: Sama-Sama Hotel, KL International Airport, Jalan CTA 4 B, 64000, Sepang, Selangor Darul Ehsan, Malaysia