Privacy Policy

1. Introduction

Mawar Residence ("we", "the house") is committed to handling personal information with care and discretion. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over it. It applies to all guests and to visitors to our website at mavalresxn.pro.

Our operations are based at 36, Jalan Yap Ah Loy, 50000 Kuala Lumpur, Wilayah Persekutuan, Malaysia, and we operate in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Questions about this policy may be directed to: [email protected]

2. Data We Collect

2.1 Information you provide

• Name and contact details (email address, telephone number)
• Correspondence relating to an enquiry or reservation
• Preferred dates and room of interest
• Any dietary or other requirements you disclose voluntarily

2.2 Information collected automatically

• Browser type and approximate location (via IP address)
• Pages visited and time spent on our website
• Cookie preferences (if you interact with the cookie consent tool)

2.3 Legal basis for processing

We process personal data on the basis of: (a) your consent, where required; (b) the performance of a contract or pre-contractual steps (i.e., to arrange your reservation); and (c) our legitimate interest in operating and improving the house's services. We do not rely on processing for marketing purposes without prior consent.

3. How We Use Your Information

• To respond to your enquiry and, where applicable, confirm a reservation
• To manage your stay at Mawar Residence
• To accommodate any requirements you have disclosed
• To send confirmations and practical information before arrival
• To maintain records required by Malaysian law
• To improve the functionality and content of our website

We do not use your personal data for direct marketing unless you have explicitly consented. We do not sell your personal data to third parties.

4. Data Sharing

We share personal data only where necessary. This may include:

• Service providers who support our website (hosting, analytics), who are bound by data processing agreements
• Malaysian government authorities where required by law

We do not transfer personal data outside Malaysia except where necessary for the above purposes and where appropriate safeguards are in place.

5. Data Retention

Enquiry correspondence is retained for 12 months. Reservation records are retained for 7 years as required by Malaysian accounting and tax regulations. Website analytics data is retained for 26 months.

When data is no longer required, it is deleted securely.

6. Data Protection

We take reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. Our website uses HTTPS encryption. Access to guest records is limited to household members who require it to perform their roles. We do not store payment card details.

7. Cookies

Our website uses cookies to remember your cookie preferences and to collect anonymous usage statistics. Please refer to our Cookie Policy for details of the cookies used and how to manage them.

8. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights:

• Access: to request a copy of the personal data we hold about you
• Correction: to request correction of inaccurate or incomplete data
• Withdrawal of consent: to withdraw consent where processing is based on consent
• Objection: to object to certain types of processing
• Erasure: to request deletion of data we are not legally required to retain

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not directed to children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us and we will take steps to delete it.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the website after changes are posted constitutes acceptance of the updated policy.