Privacy Policy
隐私政策

Your Data, Explained Plainly

Privacy Policy

Last updated 23 September 2026.

Jaimie.my ("JAIMIE.MY", "we", "us") is a Kuala Lumpur-based luxury travel consultancy. This page explains what personal data we collect through this website, why we collect it, who we share it with, and how you can ask us about it. It applies to every visitor, enquirer and customer of jaimie.my, and it describes what this application actually does — not a generic template.

Information We Collect

We only collect what running a travel booking service requires:

• Enquiry details — your name, email address, phone number, destination and trip type, budget and any message, whenever you submit our enquiry form or contact us directly.
• Account sign-in — if you create a jaimie.my account, your name and email address; if you sign in with Google, the identity Google confirms for that address. We never see or store your Google password.
• Traveller details — once a booking is made, the full name, date of birth, nationality, and passport number and expiry of every person travelling, so we can arrange flights, hotels, visas and any other travel document your trip needs.
• Identity and travel documents — passport scans, visas, insurance and other supporting files you or our office upload against your booking. These are kept in a private, access-controlled file store, never on a public web address, and every time one is opened it is logged.
• Payment details — when you pay by card, your card number goes directly to Stripe, our payment processor; we never receive or store it. We keep only the payment's own record: the amount, currency, status, the card's brand and last 4 digits, and Stripe's own reference for the transaction.
• Wallet balance — if you top up a JAIMIE.MY wallet, we keep the balance and the history of top-ups and payments made from it. It is closed-loop: it can only be spent on a jaimie.my booking, and it is never paid out as cash or transferred to anyone else.
• Website usage — if you accept our cookie banner, Google Analytics (GA4) records how you use the site so we can improve it. See "Cookies and Analytics" below.

How We Use Your Information

• Respond to your enquiry and help plan your trip.
• Arrange your booking with the airlines, hotels and other travel providers it involves.
• Prepare and check the travel documents a trip needs.
• Process your payment and keep an accurate financial record.
• Verify who is travelling, where an airline, hotel, or visa or immigration authority requires it.
• Manage your wallet balance and its transaction history.
• Send booking-related messages: confirmations, receipts, and reminders when a payment is due.
• Sign you in and keep your account secure.
• Understand, in aggregate, how visitors use the site — only if you have accepted analytics cookies.

We do not use your data for anything else, and we do not sell it.

Who We Share It With

• Stripe — processes your payment. See Stripe's own privacy policy for how it handles your card details.
• Google — verifies your identity if you sign in with Google.
• Amazon Web Services — stores your uploaded documents privately, in Singapore; Amazon does not use them for anything of its own.
• Google Analytics (GA4) — receives anonymised usage data, only if you accept our cookie banner.
• Airlines, hotels and other travel providers, and government or visa/immigration authorities — receive the traveller details (name, passport, date of birth, nationality) necessary to deliver and document the specific trip you booked.

We do not sell your personal data, and we do not share it with anyone else for their own marketing.

Data Retention

Traveller details (name, date of birth, nationality, passport number and expiry) are kept for up to two years after your trip ends, then are eligible to be erased. Booking and payment records are kept for longer, since we are required to retain them for accounting and tax purposes — erasing traveller details never removes those. We do not yet run an automatic erasure schedule; today, our office actions an erasure request by hand (see "Your Rights" below), except for what we are legally required to keep.

Data Security

Your passport scans, identity and other documents are stored in a private location that is not reachable from the open web; each download link works for a few minutes and is then useless, and every time a document is created, changed, viewed or deleted, we record who did it. Payments are handled by Stripe under its own security standards — we never see your full card number. No system is perfectly secure, and we will never ask you for your password, or your full card number, by email or phone.

Cookies and Analytics

When you first visit, a banner asks whether you accept cookies. Google Analytics (GA4) is not loaded at all until you accept it; if you decline, or choose "essential only", it never loads, and nothing about your visit is sent to Google. We run no advertising on this site, and we do not use analytics for ad targeting.

Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA), you can ask us to:

• tell you what personal data we hold about you;
• correct it, if it is wrong;
• stop processing it, or withdraw a consent you gave earlier;
• delete it, except for what we are legally required to keep.

To ask, contact us using the details below. If you believe we have not handled your data properly, you may also complain to Malaysia's Department of Personal Data Protection.

Children

Jaimie.my is not directed at children. A child travels only as part of a booking made, and consented to, by a parent or guardian.

International Transfers

Your documents are stored in Singapore. Stripe and Google may process your data in other countries, under their own privacy and security commitments.

Changes to This Policy

We may update this page as the site or the law changes. The version here is the one currently in effect.

Contact Us

For a question about this policy, or to make a request about your personal data, contact us: contact•••Click to reveal +60 XX-XXX XXXX•••Click to reveal