At Carousel & Co. (“C&C”, “we”, “our”, or “us”), we’re committed to respecting your privacy and protecting your personal data. This policy explains how we collect, use, and safeguard your information—whether you’re enjoying our rooftop venue, playing our games, attending an event, or engaging with our website or mobile app.
- What Personal Data We Collect
We collect personal data through a variety of interactions, including venue visits, event bookings, use of our website or app, participation in games or loyalty programs, and customer support. This may include:
- Name, email, phone number
- Booking and event details
- Payment information (securely processed by third-party providers; we do not store card details)
- Preferences and communication consents
- App usage, check-in data, and leaderboard scores
- Survey or feedback responses
- Photos and media (if shared or captured at the venue)
- Device and browsing data (IP address, browser, location, cookies)
- Data from Third Parties
We may also receive your data from:
- Someone booking or planning an event on your behalf
- Partners or platforms that connect to our booking or loyalty systems
- Public or legal authorities when required
- Why We Process Your Data
We process your personal data for the following purposes:
- To manage bookings, reservations, and event planning
- To enhance your experience with customized offers, content, or loyalty rewards
- To deliver app features like leaderboards, game data, daily missions, or check-ins
- For security and legal compliance
- To send marketing communications (only with your consent)
- To gather feedback and improve our services
- Legal Basis for Processing
Depending on the purpose, we process your data based on:
- Your consent (e.g. marketing, app tracking)
- Contractual necessity (e.g. booking or event management)
- Legitimate interests (e.g. security, service improvement)
- Legal obligations (e.g. law enforcement requests)
- Sharing Your Data
We may share your data with:
- Trusted third-party service providers (e.g. payment, email, app analytics)
- Event or marketing partners (without disclosing personal details unless consented)
- Government authorities, if legally required
- Successors in the event of a business merger, acquisition, or restructure
- Data Retention
We retain:
- Booking and payment records: 5 years
- Marketing opt-out records: indefinitely
- User profiles or loyalty data: until account deactivation
- Data related to legal claims: up to 7 years
- Data Security
We implement appropriate technical and organizational measures to secure your data. However, no system is 100% secure. Please let us know if you suspect a data breach.
- Your Rights
You may request to:
- Access or correct your data
- Delete or restrict your data
- Object to direct marketing
- Withdraw consent
- Request a copy of your data in a portable format
Contact us at [hello@carouselandco.com] to exercise any of these rights.
- Cookies and Tracking
Our website and app use cookies and tracking technologies to personalize content, analyse traffic, and offer a better user experience.
- International Data Transfers
If your data is processed outside Malaysia, we ensure appropriate safeguards are in place to protect your privacy.
- Policy Updates
We may update this policy to reflect operational or legal changes. Updated versions will be posted on our website and app.
- Contact Us
For any questions, concerns, or data requests, please reach us at: hello@carouselandco.com