PERSONAL DATA PROTECTION POLICY (PDPA) – CAROUSEL & CO.
1.0 INTRODUCTION
Carousel & Co. is committed to protecting the personal data of individuals in compliance with the Personal Data Protection Act 2010 of Malaysia. This policy outlines how personal data collected through the booking system and related platforms is handled.
2.0 SCOPE
This policy applies to all personal data collected by Carousel & Co. via
- the booking system
- online platforms and websites
- booking, registration or enquiry forms
- events, promotions and customer communications
3.0 DEFINITION OF PERSONAL DATA
Personal data refers to any information that identifies or can identify an individual, including but not limited to
- full name
- contact number
- email address
- booking details and preferences
- system usage information
4.0 COLLECTION OF PERSONAL DATA
Personal data is collected only where necessary for legitimate operational purposes, including
- processing and managing bookings
- customer identification and verification
- communications related to bookings or visits
- internal administration and reporting
- compliance with legal or regulatory requirements
5.0 PURPOSE OF USE
Personal data collected through the booking system will be used for
- booking confirmation, amendments and cancellations
- customer support and service or marketing communications
- internal record keeping and analytics
- operational planning and system improvements
6.0 DISCLOSURE OF PERSONAL DATA
Personal data may be disclosed only to
- authorised Carousel & Co. personnel
- appointed third party service providers for system and operational support
- legal or regulatory authorities where required by law
Carousel & Co. does not sell, trade or rent personal data to third parties.
7.0 DATA SECURITY AND RETENTION
Appropriate technical and organisational measures are implemented to safeguard personal data against unauthorised access, misuse, loss or disclosure. Personal data is retained only for as long as necessary to fulfil its intended purpose or to meet legal requirements.
8.0 ACCESS AND CORRECTION
Individuals have the right to
- request access to their personal data
- request correction of inaccurate or outdated information
Requests may be submitted via email to hello@carouselandco.com
9.0 CONSENT
By using the booking system and providing personal data, you acknowledge and consent to the processing of your personal data in accordance with this policy.
10.0 POLICY UPDATES
Carousel & Co. reserves the right to amend this policy as required to reflect changes in legal, regulatory or operational requirements. Any updates will be made available through official channels.