Privacy Policy

Last Updated: 2026-01-01

Sunbriz Holidays & Events Sdn. Bhd. (“Sunbriz”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, process, disclose, retain and protect your personal data when you:

• Visit our website;
• Create an account;
• Make a tour or travel booking;
• Submit an enquiry;
• Subscribe to our newsletter;
• Contact us by telephone, email, WhatsApp or other communication channels;
• Participate in one of our tours or activities; or
• Use any other service provided by Sunbriz.

By using our website, submitting your personal data or making a booking with us, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Data We Collect

Depending on how you interact with us, we may collect the following types of personal data.

1.1 Identification information

This may include:

• Full name;
• Date of birth;
• Age;
• Gender;
• Nationality;
• Passport or identification number;
• Passport expiry date; and
• Copies of identification or travel documents where required.

1.2 Contact information

This may include:

• Email address;
• Telephone or mobile number;
• Residential or billing address;
• Emergency contact details; and
• Preferred method of communication.

1.3 Booking and travel information

This may include:

• Selected tour or travel package;
• Travel dates;
• Pickup and drop-off location;
• Accommodation details;
• Number and details of travellers;
• Package and additional service selections;
• Flight, ferry or other transportation details;
• Special requests;
• Booking history; and
• Information relating to cancellations, amendments or refunds.

1.4 Payment and transaction information

This may include:

• Billing information;
• Payment method;
• Payment status;
• Transaction reference;
• Invoice details;
• Deposit and balance information; and
• Refund records.

Payment information may also be collected and processed directly by banks, payment gateways or other payment service providers. Their handling of your information is subject to their own privacy policies and terms.

1.5 Health and special-requirement information

Where relevant to the tour or requested by you, we may collect information regarding:

• Medical conditions;
• Allergies;
• Dietary requirements;
• Disabilities or mobility limitations;
• Pregnancy;
• Medication requirements; and
• Other health or accessibility needs.

We collect this information only where reasonably necessary to arrange your requested services, support your safety or accommodate your needs.

1.6 Account information

When you register an account on our website, we may collect:

• Username;
• Email address;
• Account password in encrypted or protected form;
• Saved contact information;
• Saved booking information; and
• Account activity.

You are responsible for keeping your account login information confidential.

1.7 Website and technical information

When you use our website, certain information may be collected automatically, including:

• Internet Protocol address;
• Device type;
• Browser type;
• Operating system;
• Referring website;
• Pages visited;
• Time and date of visits;
• Website interactions;
• Cookie identifiers; and
• General location information derived from your device or IP address.

1.8 Communications

We may retain records of communications between you and Sunbriz, including:

• Emails;
• Enquiry forms;
• WhatsApp messages;
• Telephone enquiries;
• Customer-service requests;
• Feedback;
• Reviews; and
• Complaints.

2. How We Collect Personal Data

We may collect personal data:

• Directly from you when you make a booking or submit a form;
• When you register or use an account on our website;
• When you communicate with us by email, telephone, WhatsApp or social media;
• When you subscribe to our newsletter or marketing updates;
• When you participate in a tour, event or activity;
• From a person making a booking on your behalf;
• From your employer, organisation, travel agent or group representative;
• From hotels, transport companies, guides and other service providers;
• From payment gateways and financial institutions;
• From cookies, analytics and similar website technologies; and
• From publicly available sources where permitted by law.

When you provide personal data relating to another traveller, you confirm that you are authorised to provide that information and that the individual has been informed about this Privacy Policy.

3. How We Use Your Personal Data

We may use your personal data for the following purposes:

3.1 Booking and service fulfilment

• Processing and confirming reservations;
• Arranging tours, transportation, accommodation and activities;
• Preparing booking confirmations, tickets, vouchers and itineraries;
• Coordinating pickup and drop-off arrangements;
• Communicating booking updates or schedule changes;
• Processing amendments, cancellations and refunds;
• Providing customer support; and
• Handling requests made before, during or after a tour.

3.2 Traveller safety and special arrangements

• Responding to medical or accessibility needs;
• Arranging dietary or mobility assistance;
• Contacting an emergency contact where necessary;
• Managing incidents, emergencies or insurance-related matters; and
• Determining whether an activity is suitable for a traveller.

3.3 Payments and administration

• Processing deposits and balance payments;
• Verifying payment status;
• Issuing invoices and receipts;
• Maintaining accounting and transaction records;
• Preventing fraudulent or unauthorised transactions; and
• Recovering amounts owed to us.

3.4 Communication

• Responding to questions and enquiries;
• Providing customer-service assistance;
• Sending booking reminders and service notices;
• Notifying you of important changes to your booking;
• Managing feedback, complaints and disputes; and
• Sending administrative or security-related communications.

3.5 Marketing and newsletters

Where you have subscribed, consented or where otherwise permitted by law, we may use your contact details to send:

• Tour promotions;
• Special offers;
• New package announcements;
• Travel inspiration;
• Destination updates;
• Newsletters; and
• Event information.

You may unsubscribe at any time by using the unsubscribe link included in our marketing emails or by contacting us.

Unsubscribing from marketing communications will not prevent us from sending necessary communications relating to an existing booking or transaction.

3.6 Website operation and improvement

• Operating and maintaining our website;
• Creating and managing customer accounts;
• Remembering booking selections;
• Analysing website usage and performance;
• Improving website content and user experience;
• Troubleshooting technical issues;
• Maintaining website security; and
• Detecting suspicious or fraudulent activity.

3.7 Legal and regulatory purposes

• Complying with applicable laws and regulations;
• Responding to lawful requests from government authorities;
• Maintaining records required for taxation, accounting or audit purposes;
• Protecting our legal rights;
• Enforcing our Terms and Conditions; and
• Establishing, exercising or defending legal claims.

4. Sensitive Personal Data

Certain information, such as medical conditions, disabilities, allergies and other health information, may be considered sensitive personal data.

We will process sensitive personal data only where:

• You have provided the information for a specific purpose;
• It is necessary to provide or safely manage the requested service;
• You have provided the required consent;
• It is necessary to protect your vital interests; or
• The processing is otherwise permitted or required by applicable law.

Please provide only the health or special-requirement information reasonably necessary for your booking.

5. Disclosure of Personal Data

We may disclose relevant personal data to third parties where necessary to provide your requested travel services.

These parties may include:

• Tour guides;
• Drivers and transportation providers;
• Hotels and accommodation providers;
• Airlines, ferry operators and other transport companies;
• Restaurants and catering providers;
• Attraction and activity operators;
• Local travel partners and destination-management companies;
• Insurance providers;
• Banks and payment service providers;
• Information technology, website hosting and cloud-service providers;
• Email and newsletter service providers;
• Professional advisers, including accountants, auditors and lawyers;
• Government departments, immigration authorities and regulatory bodies; and
• Emergency services or healthcare providers where necessary.

We will disclose only the information reasonably required for the relevant purpose.

Third-party service providers may have their own privacy notices and data-processing practices. We encourage you to review their privacy policies where applicable.

We do not sell or rent your personal data to third parties for their independent direct-marketing purposes.

6. International and Cross-Border Data Transfers

Some tours or services may require personal data to be shared with service providers located outside Malaysia.

For example, information may need to be provided to overseas:

• Hotels;
• Tour operators;
• Transportation companies;
• Attraction operators;
• Technology providers; or
• Government and immigration authorities.

Where personal data is transferred outside Malaysia, we will take reasonable steps to ensure that the transfer is necessary, appropriately protected and handled in accordance with applicable legal requirements.

Please note that the data-protection laws of another country may differ from those of Malaysia.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate correctly and improve your browsing experience.

Cookies are small files placed on your device when you visit a website.

We may use the following types of cookies:

7.1 Essential cookies

These cookies are required for important website functions, such as:

• Maintaining website security;
• Remembering items selected for booking or checkout;
• Maintaining a login session; and
• Processing forms and transactions.

7.2 Preference cookies

These cookies help remember information such as your language, location or website preferences.

7.3 Analytics cookies

These cookies help us understand how visitors use our website, which pages are visited and how website performance can be improved.

7.4 Marketing cookies

Where used, these cookies may help measure marketing campaigns or display relevant content and advertisements.

You may control or disable cookies through your browser settings. However, disabling essential cookies may affect certain website functions, including account access, booking forms and checkout.

8. Third-Party Websites and Services

Our website may contain links to external websites, payment providers, social-media platforms or other third-party services.

We are not responsible for the privacy practices, security or content of third-party websites. When you leave our website, you should review the privacy policy of the relevant third party before providing personal data.

9. Data Security

We take reasonable administrative, technical and organisational measures to protect personal data against:

• Unauthorised access;
• Accidental loss;
• Misuse;
• Alteration;
• Unauthorised disclosure; and
• Destruction.

These measures may include access controls, password protection, encryption where appropriate, secure hosting, system monitoring and limiting personal-data access to authorised employees and service providers.

Although we take reasonable precautions, no website, internet transmission or electronic-storage system can be guaranteed to be completely secure.

You are responsible for keeping your account password and login credentials confidential. Please notify us promptly if you believe your account or personal data has been compromised.

10. Retention of Personal Data

We will retain personal data only for as long as reasonably necessary to:

• Complete and manage your booking;
• Provide the requested services;
• Maintain transaction and customer-service records;
• Meet accounting, tax, audit and legal requirements;
• Resolve complaints or disputes;
• Prevent fraud; and
• Establish, exercise or defend legal claims.

The applicable retention period may vary depending on the type of information, the nature of the transaction and legal or operational requirements.

When personal data is no longer required, we will take reasonable steps to delete, destroy or anonymise it securely.

11. Your Rights

Subject to applicable laws and any permitted exceptions, you may request to:

• Access personal data held about you;
• Correct inaccurate, incomplete or outdated personal data;
• Withdraw consent previously provided;
• Limit certain processing of your personal data;
• Stop receiving direct-marketing communications; or
• Obtain information about how your personal data has been processed.

Requests should be submitted using the contact details stated below.

We may need to verify your identity before processing a request. We may also request additional information where necessary to locate the relevant records.

Withdrawing consent may affect our ability to provide a service where the relevant personal data is necessary to process or manage your booking.

12. Children and Minor Travellers

Our tours may include travellers under the age of 18.

Personal data relating to a child or minor should be provided by, or with the knowledge and authorisation of, the child’s parent or legal guardian.

The parent, guardian or person making the booking is responsible for ensuring that the information is accurate and that the necessary permission has been obtained.

We will use information relating to minor travellers only where reasonably necessary to arrange and provide the requested travel services, manage safety or comply with legal requirements.

13. Photographs and Media

During tours or events, photographs or videos may occasionally be taken for operational, documentary or promotional purposes.

Where a traveller is clearly identifiable and the material is intended for promotional use, we will seek appropriate permission where required.

Please inform our representative if you do not wish to appear in photographs or videos taken during a tour or event.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our services;
• Changes to website functionality;
• Changes to our data-processing practices; or
• Changes to legal or regulatory requirements.

The revised Privacy Policy will be published on this website with an updated “Last Updated” date.

We encourage you to review this page periodically.

15. Contact Us

For questions about this Privacy Policy or requests relating to your personal data, please contact:

Sunbriz Holidays & Events Sdn. Bhd.

12C-A, Jalan BM1/2
Taman Bukit Mayang Emas
47301 Petaling Jaya
Selangor, Malaysia

Telephone: +603-8889 4277
Email: rsvn@sunbriz.online

Please include sufficient information for us to identify you and understand your request.

16. Governing Law

This Privacy Policy is governed by the laws of Malaysia, including the Personal Data Protection Act 2010 and any applicable amendments, regulations, standards and guidelines.