Privacy Policy

English version

Last updated: 11 December 2025

1.  Introduction

1.1 Welcome to the www.jomhiking.com platform operated by JH Outdoor Venture ("we", "our", or "us"). We recognize our obligations under Malaysia’s Personal Data Protection Act 2010 (“PDPA”) and are fully committed to safeguarding your privacy.

1.2 We also recognize the importance of Personal Data you have entrusted to us and believe that it is our responsibility to properly manage, protect and process your Personal Data.

1.3 This privacy policy outlines how we collect, use, disclose, and safeguard your Personal Data when you interact with our platform, booking services, and hiking events. By accessing or using our services, you agree to the terms of this Privacy Policy.

1.4 If you do not consent to the processing of your Personal Data as described in this Privacy Policy, please do not use our services or access our platform. To the fullest extent permissible under applicable law, your continued use of our services or platform, including booking of any services, shall constitute your acknowledgment and consent to us collecting, using, disclosing and/or processing your Personal Data as described herein.

1.5 In the event of any conflict, discrepancy or inconsistencies between the English version of this Policy (or any policy resulting here from or relating hereto) and the Bahasa Malaysia version of this Policy, the English version of this Policy shall always prevail.

2.  Definition of Data Protection Terms

2.1 Data Users (also known as controller) means a person who either alone or jointly in common with other persons processes any Personal Data or has control over or authorizes the processing of any Personal Data, but does not include a Data Processor. For the purpose of this policy, the Data User is Jom Hiking.

2.2 Data Processors include any person who processes Personal Data solely on behalf of Data User and does not process the Personal Data for any of its own purposes. This definition excludes the employees of the Data User, and may include third-party service providers which handle Personal Data on behalf of the Data User, as indicated in this policy.

2.3 Personal Data means any data relating to an individual who can be identified from that data or from that data and other information to which we have or may have access to. Personal Data can be factual (such as name, address, or date or birth) and can even include a simple e-mail address. It is important that the information has the data subject as its focus and affects the individual’s privacy in some way.

2.4 Processing is any activity that involves the use of Personal Data. It includes collecting, recording, holding or storing the data, or carrying out any operation or set of operations on the Personal Data including but not limited to organizing, adapting, altering, retrieving, consulting, using, disclosing, making available, aligning, combining, correcting, erasing, or destroying the Personal Data. Processing also includes transferring Personal Data to third parties.

3.  Collection of Personal Data

3.1 We may collect and store Personal Data when you interact with our platform. Personal Data which we may collect include but are not limited to the following.

      i.         Full name, IC/passport number, residential address, and contact number (for forestry permits and bookings)     

     ii.         Email address and emergency contact details     

    iii.         Payment information (processed securely by third-party providers)     

    iv.         Feedback, inquiries, or correspondence sent to us     

     v.         Website usage data such as IP address, browser type, and device information     

3.2 We may receive information about you from third-party sources, when permitted by applicable laws including:

      i.         When our other users and/or customers provide us with your information as an alternative contact

     ii.         When you use any websites or social media platforms operated by third parties (for example, Facebook, Instagram, Twitter etc

3.3 In some situations, you may provide Personal Data of other individuals to us (such as your family members or friends or persons in you contact list). If you provide is with their Personal Data, you represent and warrant that you have obtained their consent for their Personal Data to be processed in accordance with this Policy.

3.4 You agree not to submit any information to us which is inaccurate or misleading, and you agree to inform us of any inaccuracies or changes to such information. We the right at our sole discretion to require further documentation to verify any information provided by you.

3.5 Please note that you are not required to provide any of the Personal Data that we request, nor consent to data processing for these purposes. However, your failure to do so may result in us being unable to provide you with our services.

4.  Use of Personal Data

4.1 Your Personal Data may be used for the following purposes:

      i.         To process trip bookings and issue required forestry permits and insurance     

     ii.         To manage your account and provide customer service     

    iii.         To contact you regarding trip updates, payment issues, or safety reminders   

    iv.         To improve our services, content, and website user experience   

     v.         To send you promotional updates or upcoming event notices (you may opt out anytime)   

    vi.         To comply with legal obligations and authorities (e.g., forestry departments)   

5.  Disclosure of Personal Data

5.1  We may disclose your Personal Data to:

      i.         Government or regulatory authorities (e.g., for permit registration)   

     ii.         Hiking guides and trip coordinators for operational purposes   

    iii.         Third-party service providers for payments, booking systems, analytics, or communications   

    iv.         Affiliates or partners involved in delivering part of your experience   

     v.         Other parties with your consent or when legally required   

    vi.         We will never sell or rent your Personal Data to third parties   

6.  Marketing, Events and Campaigns

6.1 For marketing purpose with your consent where we send you news, information, material and/or updates about events, marketing campaigns, sale promotion, products and/or services that we and/or business partners provide, or on our behalf.

6.2 By completing your booking, you expressly consent that JomHiking has the right to capture, use, and publish photographs or video recordings taken during the trip for promotional, marketing, and documentation purposes.

7.  Cookies and Tracking Technologies

7.1 We and advertising partners may from time-to-time use “cookies” or other features to allow us or third-parties to collect and share information in connection with your use of our services or platform. These features help us improve our platform and the services we offer, help us offer new services and features, and/or enable us and our advertising partners to service more relevant content to you, including through remarketing. “Cookies” are identifiers that are stored on your computer or mobile device that record data about the computer or mobile device, how and when the services or platform are used or visited, by how many people and other activity within our platform.

7.2 We may link cookie information to personal data. This information is used to keep track of your shopping activity to deliver content specific to your interests, to enable our third-party advertising partners to serve advertisements on sites across the internet, and to conduct data analysis and to monitor usage of the services.

7.3 You may refuse the use of cookies by selecting the appropriate settings on your browser or device. However, please note that if you do this you may not be able to use the full functionality of our platform and services.

8.  Third-Party Links

8.1 Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before submitting Personal Data.

9.  Protection of Personal Data

9.1 We take reasonable steps to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. User Personal Data is contained behind secured networks and is only accessible by a limited number of employees who have special access rights to such system. However, no method of internet transmission is 100% secure. While we strive to use industry-standard protections, we cannot guarantee absolute security.

10.  Retention of Personal Data

10.1 We will retain your Personal Data for as long as necessary to fulfil the purposes outlined in this Privacy Policy or to comply with legal requirements. You may request deletion of your Personal Data, subject to legal and operational obligations.

11.  Your Rights

11.1 Subject to the requirements of PDPA, you have the right to:

      i.         Access and review the Personal Data we hold about you       

     ii.         Request correction or deletion of your information       

    iii.         Withdraw your consent or restrict certain uses of your data       

    iv.         File a complaint with a data protection authority if you believe your rights have been violated       

     v.         To exercise these rights, please contact our Data Protection Officer (DPO).

12.  Complaint Process

12.1 If you have any complaint or grievance regarding how we are handling your Personal Data or about how we are complying with PDPA, we welcome you to contact us with your complaint or grievance by writing to our Data Protection Officer (DPO).

13.  Changes to This Policy

13.1 We may update this Privacy Policy from time to time. All changes will be posted on this page with an updated "Last updated" date. Continued use of our services constitutes acceptance of the revised policy.

14.  Contact Us

14.1 If you have any questions or concerns about this Privacy Policy or how your data is handled, we welcome you to visit www.jomhiking.com or contact us at support@jomhiking.com.