General Privacy Policy
At aparhyru, we prioritize the confidentiality and integrity of personal data for all guests and site users. Our policy outlines responsible data handling practices in line with industry standards and regulatory requirements, reflecting our commitment to professional care and transparency.
Definitions
For clarity, we define key terms used throughout this policy to ensure you understand how we collect and process personal data.
- Personal data refers to any information relating to an identified or identifiable natural person, such as name, contact details or booking history.
- Processing means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.
- User means any visitor, guest or customer who interacts with aparhyru’s website or booking services.
- Service refers to our luxury apartment booking and accommodation management offered through aparhyru.club.
- Cookies are small text files placed on your device to collect information about your browsing activity and preferences.
Data Collection
We collect data directly from you, automatically via technology and from third-party sources to optimize our services and maintain compliance.
Data You Provide
When you interact with our booking system or customer support, we collect data you submit voluntarily.
- Full name, postal address and email address for booking and invoicing.
- Payment details necessary to process reservations and secure transactions.
- Identification information such as passport or ID numbers when required by regulations.
- Accommodation preferences, special requests and guest feedback.
- Communication history, including inquiries and support tickets.
- Marketing opt-in choices and consent for promotional materials.
Automatic Data Collection
We use automated tools to gather technical and usage data to enhance performance and user experience.
- Server logs capturing access times, IP addresses and user agents.
- Device characteristics such as browser type, operating system and screen resolution.
- Cookie identifiers that track session and preference settings.
- Geolocation data derived from IP address for local service customization.
- Analytics metrics like page views, bounce rates and feature engagement.
- Error reports and performance monitoring data.
Third-Party Sources
We also receive data from trusted partners to support our operations and compliance obligations.
- Analytics providers offering aggregated usage insights.
- Marketing affiliates supplying referral information.
- Social media platforms when you choose to link or share content.
Purposes of Processing
We process personal data for specific, legitimate purposes necessary to deliver our services and meet regulatory requirements.
- Provision and management of apartment booking and stay services.
- Processing payments and issuing invoices.
- Personalizing content and providing tailored recommendations.
- Communicating important updates, confirmations and promotional offers.
- Ensuring the security of our facilities and detecting suspicious activity.
- Conducting analytics to improve website performance and service quality.
- Complying with legal obligations and responding to legal requests.
- Supporting customer service inquiries and dispute resolution.
Legal Basis for Processing
We rely on the following legal grounds when processing your personal data:
- Contractual necessity to fulfill apartment booking agreements.
- Consent provided for marketing communications and preferences.
- Legitimate interests in improving services and protecting our business.
- Compliance with statutory and regulatory obligations in Malaysia.
Cookies
Cookies help us deliver enhanced functionality, analytics and targeted content.
We use session cookies, persistent cookies and third-party cookies to manage different functions.
Cookies fall into essential, performance, functional and advertising categories based on their purpose.
You can manage or disable cookies through your browser settings, though this may affect site functionality.
Cookie Policy
Data Sharing
We share personal data with select parties to fulfill operational and legal requirements.
- Trusted service providers managing hosting, payments and customer support.
- Affiliated companies for joint marketing or loyalty programs.
- Legal authorities when required by law or to protect rights.
- Marketing partners executing opt-in promotional campaigns.
- Analytics platforms processing aggregated usage statistics.
- Prospective buyers or successors in a business transfer scenario.
International Data Transfers
Your data may be stored and processed on servers located in Malaysia and other jurisdictions to support global operations.
We implement standard contractual clauses, encryption and access controls to ensure adequate protection when transferring data internationally.
Data Retention
We retain personal data only as long as necessary for legitimate business purposes and legal obligations.
Account and profile information is kept until you request deletion or we no longer need it.
Customer communications and support records are stored for up to three years for quality assurance.
Technical logs are retained for 12 months to monitor performance and diagnose issues.
Upon request or at the end of the retention period, data is securely deleted or anonymized.
Data Security
aparhyru employs robust measures to safeguard personal data against unauthorized access, alteration or loss, reflecting our professional responsibility and technical expertise.
- Encryption of data in transit and at rest using industry-standard protocols.
- Strict access control policies and multi-factor authentication for authorized personnel.
- Regular security audits, vulnerability assessments and staff training programs.
User Rights
You have specific rights regarding your personal data under Malaysian and European regulations.
- Right to access and obtain a copy of your data.
- Right to correct inaccurate or incomplete information.
- Right to request deletion of personal data.
- Right to restrict or object to certain processing activities.
- Right to data portability for eligible data sets.
- Right to withdraw consent at any time without affecting prior processing.
- Right to lodge a complaint with a supervisory authority.
- Right to be informed about automated decision-making and profiling.
Exercise Your Rights
To exercise any of your rights, please submit a request via email to [email protected] or contact our Data Protection Officer.
We aim to respond to all valid requests within 30 days, in accordance with applicable regulations.
GDPR Compliance
aparhyru is committed to GDPR principles when processing data of EU data subjects.
- Transparent processing and clear communication of data practices.
- Implementation of data protection by design and by default.
- Documentation of processing activities and breach response procedures.
- Designation of a Data Protection Officer to oversee compliance.
- Regular privacy impact assessments for high-risk processing operations.
- You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
If you believe your personal data rights have been violated, you may lodge a complaint with Malaysia’s Personal Data Protection Department or another competent supervisory authority.
Marketing Communications
With your permission, we may send newsletters, promotional offers, and updates about aparhyru’s services. You can opt in or out at any time.
To stop receiving marketing communications, click the unsubscribe link in any email or contact us at [email protected].
Children’s Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us.
Third-Party Links
Our site may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any external sites you visit.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will post the revised version with an updated effective date.