Privacy Policy

What cuti.com.my collects when you visit, why we collect it, and how to ask us to stop.

On this page
  1. Who we are
  2. What we collect
  3. How we use it
  4. Cookies and analytics
  5. Third parties
  6. Retention and security
  7. Your rights
  8. Changes to this policy

Who we are

cuti.com.my is an editorial travel guide to Malaysia, published at cuti.com.my. In this policy, “we”, “us” and “our” refer to the operator of this site, and “you” refers to anyone visiting it.

We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA). Where you are in a jurisdiction with additional protections, such as the UK or the European Economic Area, we apply those standards to your data as well.

What we collect

We keep collection to what the site actually needs to work.

Information you give us

  • Your name and email address, if you contact us or subscribe to updates.
  • Anything you choose to include in a message to us.

Information collected automatically

  • Your IP address, browser type and version, operating system and device type.
  • Pages viewed, time spent, and the referring page that sent you here.
  • General location at city or country level, derived from your IP address. We do not collect precise GPS location.

We do not knowingly collect data from children under 13, and we do not ask for or store payment card details — this site sells nothing directly.

How we use it

We use personal data only for these purposes:

  1. To run and improve the site — understanding which guides are read, where pages break, and how to make them better.
  2. To reply to you — if you have written to us, we use your address to answer.
  3. To send updates — only if you have asked for them, and only until you unsubscribe.
  4. To keep the site secure — detecting abuse, spam and automated attacks.
  5. To meet legal obligations — where we are required to retain or disclose information by law.

We do not sell personal data. We do not share it with third parties for their own marketing.

Cookies and analytics

Cookies are small files stored by your browser. This site uses two kinds:

  • Essential cookies — needed for the site to function, such as remembering that you have dismissed a notice. These cannot be switched off.
  • Analytics cookies — anonymous or pseudonymous measurement that tells us how many people read a guide and how they arrived. These are optional.

You can block or delete cookies through your browser settings at any time. Blocking analytics cookies will not affect your ability to read anything here. Note that most browsers also offer a “Do Not Track” signal; where a supported signal is received, we treat it as a request to disable optional analytics.

Third parties

A small number of external services process data on our behalf, each under its own privacy terms:

  • Hosting and content delivery — to serve pages and images quickly.
  • Web fonts — typefaces are loaded from Google Fonts, which receives your IP address as part of the request.
  • Analytics — aggregate traffic measurement.

Some of these providers operate servers outside Malaysia. Where personal data is transferred abroad, we take reasonable steps to ensure it receives a comparable level of protection.

Our guides link to external sites — operators, ferry companies, tourism boards. Once you follow a link, this policy no longer applies. Read theirs.

Retention and security

We keep personal data only as long as it serves the purpose it was collected for. Correspondence is generally kept for up to 24 months. Aggregate analytics that cannot identify you may be kept indefinitely.

We protect data with encrypted connections (HTTPS), restricted access, and reasonable technical and organisational safeguards. No system is perfectly secure, and we cannot guarantee absolute security — but if a breach affects you, we will tell you.

Your rights

Under the PDPA you have the right to:

  • Access the personal data we hold about you.
  • Correct data that is inaccurate, incomplete or out of date.
  • Withdraw consent to processing, including unsubscribing from any update we send.
  • Limit processing for direct marketing purposes.
  • Ask us to delete data we no longer have a lawful reason to keep.

To exercise any of these, write to us at the address below. We will respond within 21 days as required by the PDPA. There is no charge for a reasonable request.

Contact

Privacy enquiries: privacy@cuti.com.my

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Changes to this policy

We may update this policy as the site changes or as the law does. The date at the top of this page always reflects the current version. Material changes will be flagged on the homepage for at least 30 days.

Continuing to use the site after a change takes effect means you accept the updated policy.