Privacy Policy

The data controller responsible for your personal data is Ksheyma Holdings Sdn Bhd, a company incorporated in Malaysia (Company No. 1698520-V), with its registered office at Millennium Square, Petaling Jaya, Selangor, Malaysia.

Our subsidiaries — Ksheyma Travel & Tours, Ksheyma Vanam Resort & Spa, Raksha Kavach Insurance Services, Ksheyma Upskillr, and Ksheyma Medical Tourism — operate under the governance of Ksheyma Holdings Sdn Bhd. They are not third-party entities; they form part of the same corporate group and are bound by this policy.

We may collect the following categories of personal data: (a) Identity data — name, job title, company name; (b) Contact data — email address, telephone number, postal address; (c) Enquiry data — the content of messages or forms you submit to us; (d) Technical data — IP address, browser type, pages visited, and cookies (see Section 8); (e) Communication data — records of correspondence between you and Ksheyma.

We collect personal data directly from you when you: submit an enquiry via our contact form; email or call us; attend events or meetings involving Ksheyma or its subsidiaries; or provide your business card or contact details.

We may also collect technical data automatically through cookies and similar technologies when you browse our website.

We process your personal data for the following purposes: (a) To respond to your enquiries and provide information about our group — legal basis: legitimate interests / performance of a contract; (b) To manage our business relationships — legal basis: legitimate interests; (c) To comply with legal and regulatory obligations — legal basis: legal obligation; (d) To improve our website and services — legal basis: legitimate interests; (e) Where you have given consent, to send you updates about Ksheyma and its subsidiaries — legal basis: consent.

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, we process your data in accordance with the seven data protection principles: General, Notice & Choice, Disclosure, Security, Retention, Data Integrity, and Access.

We do not sell, rent, or trade your personal data to third parties. We may share your data within the Ksheyma group of companies (all subsidiaries listed above) for internal administrative purposes.

We may disclose your data to: (a) Service providers who assist us in operating our website and business (e.g. hosting, IT support, communications platforms), bound by confidentiality obligations; (b) Professional advisers including lawyers, auditors, and accountants; (c) Regulatory authorities, courts, or government bodies where required by law.

Where we transfer personal data outside Malaysia or the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the relevant authority, or we transfer only to countries with adequate data protection laws.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Enquiry data is generally retained for up to three (3) years. We will securely delete or anonymise your data when it is no longer required.

Our website uses cookies to improve your browsing experience and to collect analytics data. Strictly necessary cookies are always active. Analytics cookies are only placed with your consent, which you may grant or withdraw at any time via the cookie consent banner on our website.

You may also control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

Under PDPA Malaysia and, where applicable, the GDPR, you have the following rights regarding your personal data: (a) Right of access — to request a copy of the personal data we hold about you; (b) Right to correction — to request correction of inaccurate or incomplete data; (c) Right to erasure — to request deletion of your data in certain circumstances; (d) Right to restrict processing — to request that we limit how we use your data; (e) Right to data portability — to receive your data in a structured, machine-readable format; (f) Right to object — to object to processing based on legitimate interests; (g) Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 11. We will respond within thirty (30) days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

If you have any questions about this Privacy Policy, wish to exercise your rights, or wish to make a complaint, please contact:

Ksheyma Holdings Sdn Bhd (1698520-V) Millennium Square, Petaling Jaya, Selangor, Malaysia Email: [email protected] Telephone: +60 16-722 4224

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this page periodically. Continued use of our website after any changes constitutes acceptance of the updated policy.