Privacy Policy

1. Who we are

This website is operated by 2290TRAVEL (M) SDN. BHD. (formerly known as WWM TRAVEL (M) SDN. BHD.), Company Registration No. 200801035582 (836923-A), a travel company incorporated in Malaysia.

We hold a travel agency licence issued by the Ministry of Tourism, Arts and Culture Malaysia (Licence No. 5942, covering inbound, outbound and ticketing) and we are an active member of the Malaysian Association of Tour and Travel Agents (Membership No. MA3516).

We trade as 2290 Travel and 2290 Travel MICE.

In this policy, "we", "us" and "our" refer to 2290TRAVEL (M) SDN. BHD. "You" refers to any person who visits this website or submits an enquiry to us through it.

We take your privacy seriously. This policy explains what personal data we collect through this website, why we collect it, who we share it with, and what rights you have over it. It is issued in accordance with the Personal Data Protection Act 2010 of Malaysia and its subsequent amendments.

2. What this website is

This is a marketing website operated by us for our corporate travel and incentive travel services. It is not our full corporate website and it is not a booking platform. Its purpose is to let you learn about our services and request a travel proposal.

3. What personal data we collect

When you submit an enquiry form on this website, we collect:

• Your name
• Your email address
• Your phone number
• Your approximate group size
• Your indicative budget range

When you contact us through WhatsApp, phone or email using details shown on this website, we collect your name, your contact details and the content of your message.

When you browse this website, we automatically collect technical data through cookies and similar technologies, including your IP address, browser type, device type, operating system, referring source, the pages you view, the time you spend on them, and the advertisement or search term that brought you here.

If your enquiry progresses to a proposal or a confirmed booking, we will later collect further information from you such as passenger names, identity card or passport details, dates of birth, dietary requirements, medical or accessibility needs, and payment details. That collection is governed by our booking terms and by this policy.

Where your trip is confirmed, we will also request a Company Authorisation Letter from your organisation so that we can apply for group seats with the airline. This contains company details and the name and position of the authorising officer.

4. Sensitive personal data

Dietary, medical, accessibility and religious requirements are treated as sensitive personal data under Malaysian law. We only collect them when you volunteer them so that we can arrange your trip properly, and we only use them for that purpose. We will ask for your explicit consent where the law requires it.

5. Why we use your personal data

We use your personal data to:

• Respond to your enquiry and answer your questions
• Prepare and send you a customised travel proposal
• Follow up with you about that proposal
• Arrange, confirm and deliver travel services if you proceed with a booking
• Communicate with you before, during and after a trip
• Issue quotations, invoices and receipts, and process payments
• Keep records required for accounting, tax and licensing purposes
• Measure how our advertising performs, so that we know which campaigns bring genuine enquiries
• Improve this website and the services we offer
• Send you occasional information about our services, where you have agreed to receive it
• Comply with Malaysian law and respond to lawful requests from authorities

We rely on your consent, on the performance of a contract with you, and on our legitimate business interests as the basis for this processing.

6. Who we share your personal data with

We do not sell your personal data. We share it only as follows:

• Our own staff and travel consultants who handle your enquiry or your trip.
• Travel suppliers, where necessary to deliver a trip you have booked or asked us to quote. This includes airlines, hotels, ground transport operators, restaurants, activity providers, overseas destination management companies, tour leaders and guides, insurers, and visa processing agents. Some of these suppliers are located outside Malaysia.
• Service providers who support our business, including our website host, our customer relationship management and lead management systems, our messaging platforms, our accounting providers, and our advertising and analytics providers.
• Professional advisers such as our auditors and legal advisers, where required.
• Government authorities, regulators, immigration and border agencies, and law enforcement, where we are required or permitted by law to disclose.
• Any successor entity, if our business or part of it is transferred or reorganised.

We require our service providers to protect your data and to use it only for the purposes we specify.

7. Transfers outside Malaysia

Because we arrange overseas travel, your personal data will sometimes be transferred outside Malaysia. This happens when we book a hotel, a flight, a visa or a local operator in your destination country, and when we use technology providers whose servers are located abroad.

Where we make such a transfer, we take reasonable steps to ensure your data continues to be protected to a standard consistent with Malaysian law.

8. Cookies, analytics and advertising

This website uses cookies and similar technologies. Some are necessary for the site to function. Others help us understand how visitors use the site and how our advertising performs.

We currently use:

• Google Analytics, to understand how visitors find and use this website.
• Google Tag Manager, to manage the measurement tags on this website.
• Google Ads conversion tracking and remarketing tags, to measure which advertisements lead to enquiries and to show relevant advertisements to people who have visited this website.

These tools may set cookies on your device and may collect your IP address and browsing behaviour. Google processes this data as an independent provider under its own privacy terms. You can review Google's practices at policies.google.com/privacy , and you can opt out of Google Analytics measurement using the browser add on that Google provides.

You can also block or delete cookies through your browser settings. If you do, parts of this website may not work as intended.

We may add other measurement or advertising tools in future. If we do, we will update this policy.

9. Third party platforms

If you contact us through WhatsApp, your message is handled on WhatsApp's platform and is subject to WhatsApp's own privacy terms as well as this policy. The same applies to Facebook, Google and any other platform where you interact with us. We do not control how those platforms handle your data.

Videos embedded on this website are hosted by third party providers. Viewing them may cause those providers to collect technical data about your device.

10. How long we keep your personal data

If you submit an enquiry and do not proceed to a booking, we keep your enquiry data for up to three years, so that we can follow up and so that we understand our own enquiry history. You may ask us to delete it sooner.

If you proceed to a booking, we keep your booking records for at least seven years after the trip, to satisfy Malaysian accounting, tax and licensing requirements.

Technical and analytics data is retained according to the standard retention settings of the tools described in section 8.

11. Security

We apply reasonable administrative, technical and physical safeguards to protect your personal data against loss, misuse, unauthorised access, alteration and disclosure. Access is restricted to staff and providers who need it. No transmission over the internet is completely secure, so while we protect your data to a commercially reasonable standard, we cannot guarantee absolute security.

12. Your rights

Under the Personal Data Protection Act 2010, you have the right to:

• Request access to the personal data we hold about you
• Request correction of data that is inaccurate, incomplete or out of date
• Withdraw your consent to our processing, at any time
• Limit the processing of your data for direct marketing purposes
• Ask us to delete data that we no longer have a lawful reason to keep
• Ask us questions about how your data is handled

To exercise any of these rights, contact us using the details in section 16. We may ask you to verify your identity before we act, and we will respond within the period required by law. A small fee may apply to data access requests, as permitted under Malaysian law.

13. Marketing communications

If you have given us your contact details, we may send you occasional information about our corporate travel and incentive travel services. Every message will give you a way to stop receiving them. You can also tell us at any time using the contact details below, and we will stop.

Withdrawing marketing consent does not affect messages we need to send you about a trip you have booked.

14. Children

This website is directed at businesses and at adults. We do not knowingly collect personal data from anyone under 18 through this website. Where a booking includes travellers under 18, we collect their details from the organising company or from a parent or guardian.

15. Changes to this policy

We may update this policy from time to time. The current version will always be published on this page, with the date it was last updated shown at the top. Where the change is significant, we will take reasonable steps to bring it to your attention.

16. Contact us

For any question about this policy, or to exercise any of your rights: