Privacy Policy
Last updated 4 November 2026. This explains how TourMe Trails handles personal data, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
Data we collect
- Booking details: name, WhatsApp number, email, trip, date, group size and any notes you give us.
- Guest details: for each guest, full name, IC or passport number, address, mobile number and emergency contact.
- Pickup address, if you choose a pickup from your hotel or location.
- Payment records: the receipt you upload, and the payment and refund history of your booking. We do not collect card or online banking passwords.
- Waiver: the name you sign with and the date and time.
- Messages and reports: chats with your guide, and any problem you report.
- Reviews and photos you choose to submit.
- Guides: profile details, licence number, phone, email and bank details for payouts.
Why we use it
- To process your booking, confirm your trip and contact you about it.
- For safety and emergencies on the trail.
- To apply for forest or park permits where a trip requires them.
- To handle payments, refunds and guide payouts, and to keep accounting records.
- To deal with complaints and reports, and to improve our service.
- To show reviews and photos you submit, after we approve them.
Who sees your data
| Who | What they see |
|---|---|
| Your guide | Your first name, group size and notes. Your pickup address if you chose pickup. On permit trips only, each guest's name and IC or passport number. Guides do not see your phone number, home address or emergency contacts. |
| TourMe Trails | All booking and guest details. We can also read booking chats, for safety, to resolve problems and to support you. |
| Authorities | Forestry or park authorities when a permit is needed. Emergency services if needed for your safety. Others where the law requires it. |
| Service providers | Companies that run our website and messages: Supabase (database and file storage), Netlify (website hosting), Resend (email) and WhatsApp (if we message you there). Google receives page text only if you choose a language with the language button. |
Some of these providers store data outside Malaysia. We do not sell your personal data.
Booking for other people
If you enter details for other guests, you confirm that they have agreed to you doing so and know about this policy. For a child, a parent or legal guardian must provide the details or give permission.
How long we keep it
We keep personal data only as long as needed for your trip, for safety, and for our accounting and legal obligations. After that we delete it or make it anonymous.
Keeping it safe
Receipts and guest details are not public. Each booking page is reached through a private link, so please do not share your link with people who should not see your details.
Your rights
You can ask to access or correct your personal data, ask questions about how we use it, or withdraw consent. If you withdraw consent or do not provide required details, we may be unable to run your trip. Email tourmetrails@gmail.com.
Cookies and browser storage
We use your browser's storage to keep guides and admins signed in and to remember your latest booking. Choosing a language saves that choice in a cookie. We do not use advertising cookies.
Changes
We may update this policy. The date at the top shows the latest version.