Last Updated: 12 May 2025

EcotourMalaysia.com (“we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or make a booking through our website, https://ecotourmalaysia.com (“Site”).

By accessing this Site and using our services, you consent to the practices described in this policy.

1. Who We Are

Milas Travel & Tours Sdn Bhd
Company Registration No: 1337378-W. MOTAC No: KPK/LN: 10094
Registered Address: Jln Lintas, Luyang, 88300 Kota Kinabalu, Sabah
Email: admin@ecotourmalaysia.com

We are a licensed travel agency based in Malaysia offering eco-tourism packages and travel-related services.

2. Information We Collect

We may collect and process the following types of personal data from you:

2.1 Information You Provide Voluntarily

When you:

Make a booking
Fill out a contact form
Subscribe to our newsletter
Participate in surveys, reviews, or promotions

This may include:

Full Name
Email Address
Phone Number
Nationality
Passport or ID number (for booking purposes)
Billing Address
Special Requests (e.g. dietary, medical)
Payment Information (processed securely via third-party providers such as Stripe/PayPal)

2.2 Automatically Collected Information

When you visit our Site, we may automatically collect:

IP Address
Browser type and version
Device type
Pages visited
Time spent on site
Referral source

This information is collected via cookies, analytics tools (e.g. Google Analytics), and server logs.

3. How We Use Your Information

We use the information collected for the following purposes:

Booking Management: To process your reservations, payments, and communications.
Customer Service: To respond to your inquiries and provide assistance.
Marketing: To send you travel inspiration, updates, and offers (only with your consent).
Legal Compliance: To comply with government and immigration requirements (if applicable).
Website Improvement: To analyze user behavior and improve functionality and content.

4. Legal Basis for Processing (for EU/UK Users)

If you are located in the European Economic Area (EEA) or the UK, we process your data based on:

Your consent
The necessity of performing a contract
Legal obligations
Legitimate interests (e.g. improving our services)

5. Disclosure of Your Information

We may share your personal data with:

Tour Operators, Hotels, and Transportation Providers: Only the necessary information to facilitate your booking.
Payment Gateways: Stripe, PayPal, or other secure payment processors.
Third-Party Service Providers: IT support, marketing platforms, email systems (e.g. Brevo), and analytics tools.
Government Authorities: If required by law, such as for immigration or security reasons.

We will never sell your data to third parties.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including legal, accounting, or reporting obligations.
Booking-related data may be stored for up to 7 years as required by Malaysian tax laws.
You may request deletion of your data at any time (see Section 9).

7. Data Security

We take appropriate technical and organizational measures to protect your personal data, including:

SSL encryption for website traffic
Access controls and role-based permissions
Secure cloud storage
Regular malware and security scans

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute data security.

8. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to:

Recognize repeat visitors
Store user preferences
Analyze website traffic

You can manage your cookie preferences through your browser settings.

9. Your Rights (PDPA + GDPR)

You have the right to:

Access your personal data
Correct inaccurate or outdated information
Request deletion of your data (subject to legal exceptions)
Withdraw consent at any time (for marketing)
Restrict processing or object to data use in certain circumstances

To exercise your rights, email admin@ecotourmalaysia.com with the subject line: “Privacy Request.”

10. Email Marketing

With your explicit consent, we may send you promotional content. You can unsubscribe at any time by:

Clicking the Unsubscribe link in any marketing email
Contacting us at admin@ecotourmalaysia.com

We use Brevo (formerly Sendinblue) for email marketing. Your email may be stored on servers located outside Malaysia but in compliance with relevant data protection laws.

11. Children’s Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us, and we will take steps to delete it.

12. External Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. Please read their privacy policies before submitting any personal data.

13. International Transfers

If you are accessing our Site from outside Malaysia, be aware that your data may be transferred to and stored in servers located in Malaysia or other jurisdictions, depending on our service providers. We take reasonable measures to ensure your data remains protected.

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. All changes will be posted on this page with a revised “Last Updated” date. We encourage you to review this page regularly.

15. Contact Us

If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your data, please contact:

Milas Travel & Tours Sdn Bhd
Email: admin@ecotourmalaysia.com
Phone: +6014-3258271
Business Address: Jln Lintas, Luyang, 88300 Kota Kinabalu, Sabah

Privacy Policy