Privacy is
part of the journey

1. What Information We Collect

We collect personal information to provide you with our travel services. The categories of data we may collect include:

• Personal Identification: Full name, passport number, date of birth, nationality, and government-issued ID details.
• Contact Details: Email address, phone number, postal address, and emergency contact information.
• Travel Preferences: Flight bookings, hotel preferences, dietary requirements, special assistance needs, and medical conditions (if voluntarily disclosed).
• Payment Information: Credit/debit card details, billing address, and transaction history (processed through secure, PCI-compliant gateways).
• Technical Data: IP address, browser type, device information, and website usage patterns via cookies.
• Communication History: Records of your interactions with our team via email, phone, or contact forms.

We do not intentionally collect sensitive data (e.g., racial/ethnic origin, political views, religious beliefs) unless you provide it for specific travel needs.

2. How We Use Your Information

Your personal data is used for the following purposes:

• Processing and confirming travel bookings, including flights, accommodations, tours, and transfers.
• Communicating with you about your itinerary, booking confirmations, and customer support.
• Personalizing your travel experience based on your preferences and special requests.
• Complying with legal and regulatory obligations, including immigration and security requirements.
• Processing payments and preventing fraudulent transactions.
• Improving our services and website through analytics and customer feedback.
• Sending marketing communications (only with your explicit consent, which you can withdraw at any time).

3. Legal Basis for Processing

We process your data on one or more of the following legal grounds:

• Contractual Necessity: Processing is required to fulfill our contract with you (e.g., booking travel arrangements).
• Legal Compliance: Processing is necessary to comply with applicable laws (e.g., providing passenger data to authorities).
• Legitimate Interests: Processing is in our legitimate business interests (e.g., fraud prevention, IT security, service improvement), provided your rights do not override such interests.
• Consent: For marketing communications and optional data collection, we rely on your explicit consent.

4. Who We Share Your Data With

We may share your information with the following categories of recipients, only as necessary to deliver our services:

• Travel Suppliers: Airlines, hotels, cruise operators, tour guides, and transport providers involved in your itinerary.
• Government Authorities: Immigration, customs, and security agencies as required by law.
• Payment Processors: Banks and financial institutions for transaction processing.
• Professional Advisors: Legal counsel, auditors, and insurance providers.
• IT Service Providers: Cloud hosting, data storage, and email delivery services (all bound by strict confidentiality agreements).

Important: We never sell your personal data to third parties for marketing purposes. Any sharing is strictly limited to the purposes described above.

5. How We Protect Your Data

We implement robust security measures to safeguard your personal information:

• SSL/TLS encryption for data transmission between your browser and our website.
• PCI-DSS compliant payment gateways — we do not store credit card details on our servers.
• Role-based access controls and multi-factor authentication for internal systems.
• Regular security audits, vulnerability assessments, and employee training.
• Secure data centers with 24/7 monitoring and physical access controls.

While we strive to protect your data, no transmission over the internet is 100% secure. You are responsible for keeping your account credentials confidential.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Our retention periods are:

• Booking Records: 7 years from the date of travel completion (for tax, legal, and warranty purposes).
• Marketing Data: Until you unsubscribe or withdraw consent.
• Website Analytics: 26 months (anonymized where possible).
• Customer Support Records: 3 years from the last interaction.

After the retention period, your data is securely deleted or anonymized.

7. Your Rights Under PDPA

Under the Malaysian Personal Data Protection Act 2010, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Correct inaccurate or incomplete personal data.
• Withdraw Consent: Opt out of marketing communications at any time.
• Data Portability: Request transfer of your data to another provider (where technically feasible).
• Restriction: Limit how we use your data while a complaint is being investigated.
• Objection: Object to processing based on legitimate interests.
• Erasure: Request deletion of your data under certain circumstances.

To exercise any of these rights, please contact our Privacy Team using the details in Section 12. We will respond within 30 days.

8. Cookies and Tracking

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device. We use the following types:

• Essential Cookies: Required for website functionality (e.g., booking engine, security).
• Analytical Cookies: Help us understand how visitors interact with our site (Google Analytics).
• Preference Cookies: Remember your language and region settings.
• Marketing Cookies: Deliver relevant advertisements (only with your consent).

You can manage cookie preferences through your browser settings. However, disabling essential cookies may affect website functionality.

9. Third-Party Websites

Our website may contain links to third-party sites (e.g., airlines, hotels, social media). This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party websites you visit. Clear Vacation Trips is not responsible for the data practices of third parties.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. Upon verification, we will delete such information promptly.

11. International Data Transfers

As a global travel company, your personal data may be transferred to and processed in countries outside Malaysia, including destinations you are traveling to. We ensure appropriate safeguards for such transfers, including:

• EU-U.S. Data Privacy Framework certification for transfers to certified entities.
• Standard Contractual Clauses (SCCs) adopted by the European Commission.
• Binding Corporate Rules for intra-group transfers.

By booking with Clear Vacation Trips, you acknowledge that your data may be transferred internationally to facilitate your travel arrangements.

12. Contact Our Privacy Team

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact our Privacy Team:

If you have concerns regarding your data protection rights, you may contact the relevant authority in Malaysia.