Trip Diary

Privacy Policy

This policy explains what personal data Trip Diary collects, how we use and protect it, and the choices you have. We handle your data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

Last updated: 4 July 2026

1. Information we collect

  • Contact details — your name, Malaysian mobile number and email address.
  • Traveller details — for each traveller, the name and passport information needed to make a booking.
  • Booking details — the packages, dates, hotels and preferences you enquire about.
  • Technical data — limited information such as your IP address, used to keep the service secure and prevent abuse.

2. How we use your information

  • To process your enquiries and arrange your bookings.
  • To communicate with you about your trip, including over WhatsApp.
  • To operate our loyalty rewards programme.
  • To keep our service secure and prevent fraud or abuse.
  • To meet legal and accounting obligations.

3. How we protect your data

Sensitive traveller information, including passport details, is encrypted when stored and access is restricted to authorised staff. We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or misuse.

4. Sharing your information

We share your details only as needed to arrange your trip — for example with airlines, hotels and tour operators — and with trusted service providers who help us run our website and messaging. We do not sell your personal data. Some providers may process data outside Malaysia; where they do, we take steps to ensure it stays protected.

5. Data retention

We keep your personal data only for as long as necessary to provide our services and to meet legal, tax and accounting requirements, after which it is deleted or anonymised.

6. Your rights

Under the PDPA, you may request access to the personal data we hold about you, ask us to correct it if it is inaccurate, or ask us to stop using it in certain ways. To make a request, contact us using the details below.

7. Cookies & local storage

Our website uses minimal browser storage to remember preferences such as your language choice and to keep you signed in. We do not use it to track you across other websites.

8. Children

Our services are intended for adults. Where a booking includes children, their details are provided by the adult making the booking on their behalf.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated shown above.

10. Contact us

For any privacy questions or requests, email hello@tripdiary.my or message +60 18-277 2332.