How we collect, use, and safeguard your information when you use our services.
Quick facts
Effective Date
November 27, 2025
Owner
Ikhlas Hotel Management (Sole Proprietorship)
Address
NO. 7, 8 DAN 9, BLOCK 7, DANGA BAY, JALAN SKUDAI, 80200 JOHOR BAHRU, JOHOR
Registration Number
201703181207 (JM0808723-P)
Collection of Personal Data
We collect personal data when you interact with The Ardens Hotel - Taman Sentosa. The type of data depends on how you use the Service.
Identity Data: Name, email address, phone number, and details provided during registration.
Contact Data: Email address and phone number for communication.
Technical Data: IP address, browser type, device details, operating system, and platform.
Usage Data: How you use our Service, including interactions with features and rewards.
Transaction Data: Records of virtual points earned and redeemed (no real currency involved).
Location Data: General location (e.g., country or city) based on IP address to enhance your experience.
Marketing and Communications Data: Preferences for receiving marketing communications from us and partners.
How We Collect Your Personal Data
We collect information in these ways:
Direct Interactions: Creating an account, updating your profile, contacting support, or completing surveys.
Automated Technologies or Interactions: Technical and Usage Data collected via cookies and similar technologies. See our Cookie Policy for details.
Third-Party Merchants: Confirmation from merchants when you complete a transaction to earn or redeem points.
Purposes for Processing Your Personal Data
We process personal data to:
Provide, operate, and maintain the Service
Manage your account, including registration and authentication
Process and record virtual point transactions
Respond to inquiries and provide customer support
Improve and personalize features and user experience
Analyze usage and trends to enhance the platform
Send relevant marketing communications where permitted by law
Ensure the security of the Service and prevent fraudulent activities
Comply with legal and regulatory obligations in Malaysia
Disclosure of Your Personal Data
We may share data with these parties when necessary:
Affiliates: Related companies for purposes consistent with this Privacy Policy.
Service Providers: Third-party vendors (e.g., hosting, data analysis, customer support) bound by confidentiality obligations.
Merchants: Information necessary to validate transactions for booking hotel rooms.
Analytics Providers: Services like Google Analytics to understand usage and improve the Service.
Legal Authorities: When required by law, court order, or legal process to protect rights or safety.
Business Transfers: In connection with corporate transactions such as a merger or asset sale.
Security of Your Personal Data
We implement reasonable technical and organizational measures (including access controls and encryption) to protect your data. No internet transmission or electronic storage is 100% secure, so absolute security cannot be guaranteed.
Retention of Your Personal Data
We retain personal data only as long as necessary for the purposes collected and to meet legal, accounting, or reporting requirements. When no longer needed, we will delete or anonymize the data.
Your Rights Under the PDPA
Under the PDPA, you have control over your personal data. To exercise these rights, contact us; we may need to verify your identity.
Right to Access: Request access to the personal data we hold about you.
Right to Correction: Request corrections to inaccurate or incomplete data.
Right to Limit Processing: Ask us to limit how we process your data.
Right to Withdraw Consent: Withdraw consent for processing where consent is the basis.
Cross-Border Transfer of Personal Data
Your data may be transferred to and processed in countries outside Malaysia where our service providers operate. We take appropriate steps to protect it in accordance with Malaysian law.
Links to Other Websites
Our Service may contain links to websites or services operated by third-party merchants. Their privacy practices are their own; please review their policies before providing data.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time and will post significant changes with an updated “Effective Date.” Continued use of the Service after changes means you accept the updated policy.