Privacy Notice

Who we are

Felda Travel Sdn Bhd (Company No. 100395-K, licence KKKP 0399) is a licensed travel and Umrah operator headquartered in Kuala Lumpur, Malaysia. In this notice, “we”, “us” and “our” refer to Felda Travel Sdn Bhd, which acts as the data user in respect of the personal data described below.

This notice explains how we process personal data in accordance with the Personal Data Protection Act 2010 (PDPA) and applies to our website, our branches, our call centre and every booking made through our authorised agents.

The personal data we collect

We collect personal data directly from you when you enquire, book, register for Umrah or Hajj, subscribe to updates, or contact us on WhatsApp, email or telephone. Depending on the service, this may include:

• Identity data — full name as per passport, NRIC number, passport number and expiry, date and place of birth, gender, nationality and photograph.
• Contact data — mailing address, email address, mobile and home telephone numbers, and next-of-kin details for emergencies.
• Travel data — itineraries, flight and hotel bookings, room-sharing preferences, mahram details for female pilgrims, visa records and frequent-flyer numbers.
• Health and dietary data — mobility needs, medical conditions, vaccination records and meal requirements, collected only where a carrier, hotel or host country requires them.
• Payment data — billing name and address, payment references and receipts. Card numbers are captured by our payment gateway and are never stored on our systems.
• Technical data — IP address, browser type, device and pages viewed, collected by cookies and analytics when you use this website.

Health, religious and biometric information are classed as sensitive personal data under the PDPA. We process them only with your explicit consent, or where processing is necessary to fulfil a legal obligation or to protect your vital interests during travel.

Why we process it

• To deliver your booking — reserving flights, hotels, transport and ground handling, issuing tickets and vouchers, and processing visa and Umrah or Hajj registrations.
• To meet legal and regulatory duties — obligations owed to MOTAC, Lembaga Tabung Haji, immigration and the authorities of the countries you travel to.
• To support you — responding to enquiries and complaints, handling refunds, and reaching you or your next of kin in an emergency abroad.
• To improve our services — analysing website use and booking patterns so our packages and this site work better.
• To send you offers — news, promotions and departure reminders, sent only where you have opted in and withdrawable at any time.

Who we disclose it to

A journey cannot be arranged without sharing certain details. We disclose your personal data only as far as the booking requires, and only to:

• Airlines, hotels, transport operators, ground handlers and mutawwif or tour leaders assigned to your group.
• Embassies, consulates, immigration and health authorities in Malaysia and at your destination, including Saudi Arabian authorities for Umrah and Hajj.
• Lembaga Tabung Haji, MOTAC and other Malaysian regulators, where required by law or licence.
• Travel insurers, payment gateways, banks and professional advisers engaged in connection with your booking.
• Our IT, hosting and communications providers, who process data on our instructions under confidentiality obligations.
• Companies within the FGV group, where a shared corporate service or joint programme makes it necessary.

We do not sell your personal data, and we do not share it for third-party marketing.

Transfers outside Malaysia

Because we arrange international travel, your data will be transferred to service providers and authorities in the countries you visit — most commonly the Kingdom of Saudi Arabia for Umrah and Hajj. Those jurisdictions may not offer protection equivalent to the PDPA. We transfer data only where it is necessary to perform your booking or to comply with a legal requirement, and we ask our partners to keep it confidential and use it solely for the stated purpose.

How long we keep it

We retain personal data only for as long as the purpose requires, and thereafter for the period imposed by Malaysian tax, accounting and travel-licensing law — generally seven years from the end of the relevant financial year. Pilgrimage records may be kept longer where Tabung Haji or the Saudi authorities require it. Marketing contact details are deleted once you unsubscribe. Data no longer needed is securely destroyed or anonymised.

How we protect it

We apply organisational and technical safeguards appropriate to the sensitivity of the data: access limited to staff who need it, encrypted transmission on this website, secured booking systems, confidentiality undertakings from our staff and vendors, and physical controls over documents held at our offices. No system is absolutely secure, so we ask that you never send passport copies or payment details through unsecured public channels.

Your rights under the PDPA

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct data that is inaccurate, incomplete or out of date.
• Withdrawal of consent — withdraw consent to our processing, including marketing, at any time.
• Limitation — ask us to limit processing for a particular purpose, or object to processing likely to cause you distress.
• Enquiry — ask how your data has been used and to whom it has been disclosed.

Withdrawing consent or limiting processing may mean we can no longer confirm or maintain a booking, issue a visa application or complete an Umrah or Hajj registration on your behalf. We will tell you before that happens. A request may be subject to a prescribed fee and will be answered within 21 days.

Cookies and this website

This website uses cookies to keep the site working, remember your preferences, and measure how pages perform. Essential cookies are required for the site to function; analytics cookies help us improve it. You can block or delete cookies in your browser settings, though some parts of the site may then behave unexpectedly.

Our pages may embed content from other services, such as videos or maps. Those providers can set their own cookies and collect data about your interaction, governed by their own privacy notices rather than this one.

Children and third-party data

Bookings for children and dependants are made by a parent or guardian, who is responsible for the accuracy of the data supplied. Where you provide us with another person’s details — a travel companion, a mahram or a next of kin — you confirm that you are authorised to do so and that you have informed them of this notice.

Changes to this notice

We may update this notice as our services, systems or legal obligations change. The revised version takes effect when published on this page, and the “last updated” date above will reflect the change. Where a change materially affects how we use your data, we will notify you directly.

In the event of any inconsistency between the English and Bahasa Malaysia versions of this notice, the English version prevails.

Website design and development by Fido Design.