English
01How to make a request
- Email admin@zahintravel.com with the subject “Personal Data Request”.
- State whether you request access, correction, updating, withdrawal of consent, restriction or deletion.
- Identify the channel used and minimum details such as your display name, username, email or telephone number.
- Do not send passwords, PINs, OTPs, full card numbers, MyKad or passport copies through ordinary email, WhatsApp or social messages.
02Verification and timing
We aim to acknowledge within 3 business days. For ordinary requests, we may send a one-time code to an existing phone or email and ask for one matching booking detail.
High-risk requests may require a protected upload channel. After verification, we aim to complete within 21 calendar days. If a valid access request needs more time, written notice will be given before day 21 and the additional period will not exceed 14 days.
03What we will do
We will search relevant CRM, webhook, stored message or comment, Lead Ads, marketing, identifiable log and processor records. Where approved, we will correct, restrict, delete or irreversibly anonymise the data and record the outcome.
04Exceptions and backups
Deletion may exclude minimum records required for law, accounting, security, fraud prevention, disputes or claims. We will explain retained categories and reasons.
Encrypted backup data may expire through a cycle of up to 90 days. If a backup is restored, the deletion request will be reapplied. A minimum suppression record may be retained to prevent further marketing contact.