(In compliance with the Personal Data Protection Act 2010 of Malaysia)

This Personal Data Protection Notice ("Notice") is issued pursuant to the Personal Data Protection Act 2010 of Malaysia ("PDPA").

Hayyat Travel Solutions Sdn Bhd (Company No. 1310332-V), together with its business brands Hayyat Rent MY Car and Hayyat TravelScape (hereinafter referred to as "Hayyat", "we", "our" or "us"), recognises the confidentiality of personal data and is committed to ensuring that all personal data provided to us is collected, processed, stored and disclosed in strict compliance with the PDPA.

By engaging our services, entering into agreements with us, or by accessing our platforms (including our website and booking system), you hereby consent to the processing of your personal data in accordance with the terms of this Notice.

1. Collection of Personal Data

In the course of providing our services, we may collect and process personal data, including but not limited to:

1. Full name, identification number, passport details, nationality, gender, and date of birth;
2. Contact details such as phone number, email address, correspondence address, and emergency contact;
3. Company or employment details (for corporate clients);
4. Payment information, billing records, bank account details and transaction data;
5. Booking details, rental agreements, travel itineraries, service history and preferences;
6. Any additional information voluntarily provided to us to facilitate the delivery of our services.

2. Purposes of Processing Personal Data

Your personal data may be collected and processed for the following purposes, which include but are not limited to:

1. Administering and processing reservations, car rentals, chauffeur services, transfers, travel packages, and related arrangements;
2. Preparing, issuing and maintaining agreements, contracts, invoices, receipts and payment records;
3. Verifying identity and preventing fraud, misuse or unauthorised transactions;
4. Complying with all applicable legal, regulatory and governmental requirements;
5. Communicating with you regarding bookings, services, support, promotions or updates;
6. Conducting internal management, audits, reporting and record-keeping;
7. Sharing information with authorised third-party service providers (e.g. hotels, insurers, transportation partners) strictly for purposes connected to the services provided.

3. Disclosure of Personal Data

We will not disclose your personal data except in accordance with the PDPA and this Notice. Personal data may be disclosed to:

1. Relevant government authorities, regulators, enforcement agencies or courts of law, where legally required;
2. Banks, financial institutions, auditors, professional advisers or insurers engaged by Hayyat;
3. Business partners, affiliates or third-party service providers strictly for the purposes stated above.

We do not sell, rent, or trade your personal data to any third parties under any circumstances.

4. Security and Retention of Data

We adopt strict technical and organisational measures to protect personal data against loss, theft, misuse, unauthorised access, disclosure, alteration or destruction.

Personal data shall be retained only for as long as it is necessary to fulfil the purpose for which it was collected, or as otherwise required under applicable laws and regulations.

5. Rights of Data Subjects

In accordance with the PDPA, you have the right to:

1. Request access to your personal data held by us;
2. Request correction or updating of inaccurate or incomplete data;
3. Withdraw consent to the processing of your personal data (subject to legal and contractual limitations).

All requests shall be made in writing to us at the contact details provided below. Please note that withdrawal of consent may affect our ability to continue providing you with certain services.

6. Consequences of Non-Provision of Personal Data

Failure to provide the required personal data may result in us being unable to:

1. Process or confirm your bookings and reservations;
2. Enter into or perform agreements with you;
3. Comply with our legal or regulatory obligations;
4. Deliver the quality of service expected by our clients.

7. Amendments to this Notice

Hayyat reserves the right to update, amend or revise this Notice at any time. Any changes will be published on our website and shall take effect immediately upon posting. Clients are encouraged to review this Notice periodically.

8. Contact Information

For questions, concerns, or to exercise your rights under this Notice, please contact us.