Privacy Policy

Introduction

Lumivane ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or participate in our food tours and culinary experiences. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

Information We Collect

Personal Data

We may collect personally identifiable information that you voluntarily provide when you:

• Book a tour or culinary experience
• Contact us through our website forms
• Subscribe to our newsletter or communications
• Participate in surveys or promotions

This information may include: name, email address, phone number, dietary requirements, payment information, and any other details you choose to provide.

Automatically Collected Information

When you visit our website, certain information about your device and browsing actions may be automatically collected, including: IP address, browser type, operating system, referring URLs, pages viewed, and time spent on pages. This information is collected through cookies and similar technologies.

How We Use Your Information

We use the information we collect to:

• Process and confirm your tour bookings and reservations
• Communicate with you about your bookings, including confirmations and updates
• Accommodate dietary requirements and special requests
• Respond to your inquiries and provide customer support
• Send you marketing communications (with your consent)
• Improve our website, services, and customer experience
• Analyze website usage and trends
• Comply with legal obligations and protect our rights
• Prevent fraud and enhance security

Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: Processing necessary to fulfill our contractual obligations when you book a tour
• Consent: You have given explicit consent for marketing communications or specific data uses
• Legitimate Interest: Processing necessary for our business operations, fraud prevention, and service improvement
• Legal Obligation: Processing required to comply with Malaysian data protection laws and other legal requirements

Data Sharing and Disclosure

Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in operating our business, including:

• Payment processors for secure transaction handling
• Email service providers for communications
• Website hosting and analytics services
• Restaurant and venue partners for tour arrangements

These third parties are contractually obligated to use your information only as necessary to provide services to us and to protect your information.

Legal Requirements

We may disclose your information when required by law, court order, or governmental authority, or when necessary to protect our rights, property, or safety, or that of others.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Booking and payment information: 7 years (for accounting and tax purposes)
• Marketing communications: Until you withdraw consent
• Website analytics data: 24 months
• Inquiry and support communications: 3 years

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS protocols
• Secure storage of data on protected servers
• Access controls limiting who can view your information
• Regular security assessments and updates
• Staff training on data protection practices

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about our use of cookies, please see our Cookie Policy.

You can control cookie settings through your browser preferences. Note that disabling cookies may affect website functionality.

Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection laws, you have the following rights:

Right to Access

You may request a copy of the personal information we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

You may request deletion of your personal information, subject to legal retention requirements.

Right to Restrict Processing

You may request that we limit how we use your personal information in certain circumstances.

Right to Data Portability

You may request transfer of your personal information to another service provider in a structured, commonly used format.

Right to Object

You may object to processing of your personal information for direct marketing or based on legitimate interests.

Right to Withdraw Consent

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise these rights, contact us at privacy@lumivira. We will respond to your request within 30 days.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@lumivira, and we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the new policy on this page with an updated "Last Updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.