Privacy Policy

Introduction

Kalevista values the privacy and security of personal information provided by safari guests and inquiry contacts. This Privacy Policy explains how we collect, use, store, and protect your personal data when you interact with our wildlife safari services, website, or communication channels.

We are committed to transparent data handling practices in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and applicable international data protection regulations including GDPR where relevant.

For questions about this policy or data handling practices, contact us at privacy@kalevis.

Information We Collect

Personal Information You Provide

We collect information you voluntarily provide when booking safaris, making inquiries, or communicating with our team:

• Name and contact details (email address, phone number)
• Booking preferences and safari selections
• Dietary requirements and mobility considerations
• Emergency contact information
• Payment information (processed through secure third-party payment processors)
• Communication content and correspondence

Information Collected Automatically

Our website uses standard web technologies to collect certain information automatically:

• Browser type and device information
• IP address and general location data
• Pages visited and interaction patterns
• Referral source and navigation paths

Cookies and Tracking Technologies

We use cookies and similar technologies to improve website functionality and user experience. See our Cookie Policy for detailed information about cookie usage and management options.

How We Use Your Information

We process your personal data for the following purposes:

Safari Services and Bookings

• Processing and confirming safari reservations
• Communicating booking details, schedules, and logistics
• Accommodating dietary requirements and mobility needs
• Managing payment processing and financial records
• Coordinating transportation and lodge arrangements

Communication and Support

• Responding to inquiries and information requests
• Providing pre-safari briefings and guidance
• Sending post-safari follow-up and feedback requests
• Addressing service issues or concerns

Legal Compliance and Safety

• Maintaining emergency contact information for safety protocols
• Complying with legal obligations under Malaysian law
• Protecting against fraud and security threats
• Enforcing our Terms & Conditions

Service Improvement

• Analyzing website usage to improve functionality
• Understanding guest preferences and feedback
• Developing new safari programs and services

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: To fulfill safari booking agreements and provide requested services
• Consent: When you voluntarily provide information or agree to receive communications
• Legitimate Interests: For business operations, service improvement, and security
• Legal Obligation: To comply with Malaysian law and regulatory requirements

Information Sharing and Disclosure

We share personal information only as necessary for service delivery and legal compliance:

Service Providers

• Lodge partners for accommodation arrangements
• Transportation providers for transfers
• Payment processors for financial transactions
• Communication platforms for email and messaging services

Legal Requirements

We may disclose information when required by law, court order, or governmental authority, or to protect safety and legal rights.

We do not sell, rent, or trade personal information to third parties for marketing purposes.

Data Security Measures

We implement security measures to protect personal information from unauthorized access, disclosure, alteration, or destruction:

• Secure data storage with access controls and encryption
• Regular security assessments and system updates
• Staff training on data protection and confidentiality
• Secure communication channels for sensitive information
• Third-party service providers vetted for security standards

While we maintain robust security practices, no internet-based system is completely immune to security risks. We encourage you to protect your own account credentials and contact us immediately if you suspect unauthorized access.

Data Retention

We retain personal information for the following periods:

• Booking records: 7 years for accounting and legal compliance
• Communication history: 3 years for service quality and dispute resolution
• Marketing consent records: Until consent is withdrawn
• Website analytics data: 24 months in aggregated form

After retention periods expire, we securely delete or anonymize personal data unless extended retention is required by law.

Your Rights and Choices

You have the following rights regarding your personal information:

Access and Correction

You may request access to the personal information we hold about you and request corrections to inaccurate or incomplete data.

Data Portability

Where applicable, you may request your personal data in a structured, machine-readable format for transfer to another service provider.

Erasure and Restriction

You may request deletion of your personal data or restriction of processing, subject to legal retention requirements and contractual obligations.

Objection

You may object to processing of your personal data for certain purposes, including marketing communications.

Withdrawal of Consent

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

Complaint

You have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia if you believe we have not handled your personal data appropriately.

To exercise these rights, contact us at privacy@kalevis. We will respond to requests within 30 days.

Third-Party Links

Our website may contain links to third-party websites, including payment processors, social media platforms, and partner organizations. We are not responsible for the privacy practices of external sites. We encourage you to review the privacy policies of any third-party services you access through our website.

Children's Privacy

Our services are directed toward adults (18 years and older). We do not knowingly collect personal information from individuals under 18 without parental consent. Safari bookings for minors must be made by a parent or legal guardian who provides necessary information on the child's behalf.

International Data Transfers

Personal data may be transferred to and processed in countries outside Malaysia when using third-party service providers (such as cloud hosting or payment processors). We ensure such transfers comply with applicable data protection laws and implement appropriate safeguards.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through website notices or direct email to active safari participants. Continued use of our services after policy updates constitutes acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data handling practices:

Data Protection Contact:

Email: privacy@kalevis

Business Name: Kalevista

Address: 27 Jalan Gaya, 88000 Kota Kinabalu, Sabah, Malaysia

Phone: +60 88-249 731