Privacy Policy & Terms of Service
Last updated: 10 June 2026 ·
Jai Ultimate Tour · Ipoh, Perak, Malaysia ·
Compliant with Malaysia PDPA 2010 (Amended 2024)
1. Privacy Policy
Jai Ultimate Tour ("we", "us", "our") is operated by Thru Jai Ganesh A/L Thoraisingam, based in Ipoh, Perak, Malaysia. We are committed to protecting your personal data in accordance with the Malaysia Personal Data Protection Act 2010 (PDPA), as amended by the Personal Data Protection (Amendment) Act 2024.
By using our website or making a booking, you consent to the collection and use of your personal data as described in this policy.
2. What Data We Collect
When you make a booking or contact us, we may collect:
- Full name, email address, phone number and WhatsApp number
- Passport number and nationality (required for tour operations)
- Payment information (processed securely by Stripe — we do not store card numbers)
- Tour preferences, special requests and dietary requirements
- IP address and browser information (via analytics tools)
- Communications between you and Jai Ultimate Tour (WhatsApp, email)
3. How We Use Your Data
We use your personal data only for:
- Processing and confirming your tour bookings
- Communicating tour details, pickup times and itinerary information
- Sending booking confirmation emails with PDF receipts
- Driver coordination and check-in verification
- Improving our services and responding to enquiries
- Complying with legal obligations
We do not sell, rent or share your personal data with third parties for marketing purposes.
Your data is used only to fulfil your tour booking and provide you with a safe, professional experience.
4. Your Rights Under PDPA Malaysia
Under the Malaysia Personal Data Protection Act, you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of inaccurate personal data
- Withdrawal of consent — withdraw consent for data processing at any time
- Data portability — request transfer of your data (from January 2026)
- Erasure — request deletion of your data, subject to legal retention requirements
To exercise any of these rights, contact us at: thirujganesh@gmail.com or WhatsApp +60 12-566 3719. We will respond within 21 days.
5. Cookies & Analytics
Our website uses the following tracking tools:
- Google Analytics 4 — measures website traffic and visitor behaviour (anonymised)
- Microsoft Clarity — records session behaviour to improve user experience (no personal data stored)
You may disable cookies in your browser settings at any time. Disabling cookies does not affect your ability to make a booking.
6. Third Party Services
We use the following third-party services to operate our business:
- Stripe — payment processing (PCI DSS Level 1 compliant)
- Resend — email delivery for booking confirmations
- Netlify — website hosting (servers in USA — data transfer compliant with PDPA cross-border provisions)
- Google Analytics / Microsoft Clarity — anonymous usage analytics
- WhatsApp Business — customer communication
Each third-party provider has their own privacy policy and data protection standards. We only share the minimum data necessary for each service to function.
7. Data Security
We implement the following security measures to protect your personal data:
- All data transmitted via HTTPS with SSL/TLS encryption
- Payment card data processed exclusively by Stripe — never stored on our servers
- Admin panel protected by password authentication
- HTTP security headers (HSTS, CSP, X-Frame-Options) enabled
- Personal data retained only as long as necessary for legal and operational purposes
In the event of a data breach affecting your personal data, we will notify you and the Malaysia Personal Data Protection Department within the timeframe required by law.
8. Terms of Service
By making a booking with Jai Ultimate Tour, you agree to the following terms. These terms are governed by the laws of Malaysia.
8.1 Service Description
Jai Ultimate Tour provides guided day tours and multi-day tour packages in Malaysia, primarily in Cameron Highlands, Ipoh, and surrounding regions. All tours are operated by licensed guides and professional drivers.
8.2 Booking Confirmation
Your booking is confirmed only upon receipt of full payment. A booking confirmation email with PDF receipt and booking reference will be sent to your registered email address. No booking is guaranteed until payment is completed.
8.3 Accuracy of Information
You are responsible for providing accurate passenger details including full names, passport numbers and nationality. Jai Ultimate Tour is not liable for any issues arising from incorrect information provided at the time of booking.
8.4 Liability Limitation
Jai Ultimate Tour's liability is limited to the value of the tour booking. We are not liable for: loss or theft of personal belongings; travel delays caused by traffic, weather or road conditions; personal injury arising from failure to follow safety instructions; or events beyond our reasonable control (force majeure).
8.5 Governing Law
These terms are governed by Malaysian law. Any disputes shall first be communicated directly to Jai Ultimate Tour for resolution. Unresolved disputes shall be subject to the jurisdiction of Malaysian courts.
9. Booking & Cancellation Policy
- Full refund: Cancellations made more than 24 hours before the tour
- No refund: Cancellations within 24 hours of departure
- Rescheduling: Free with 24+ hours notice, subject to availability
- No show: No refund if guest does not appear at pickup location
- Operator cancellation: Full refund or free reschedule if we cancel due to safety concerns or force majeure
- Refund processing: 3–10 business days depending on payment method
For any privacy concerns, data requests or general enquiries:
This Privacy Policy was last reviewed on 10 June 2026 and is compliant with the Malaysia Personal Data Protection Act 2010, as amended by the Personal Data Protection (Amendment) Act 2024 effective January 2025.