This Personal Data Protection Notice ("Notice") describes how Urban Rhythms Tours Adventures & Travel Sdn Bhd and its respective subsidiaries, associate companies and jointly controlled entities ("The Company") uses your Personal Data.

In the event of any conflict between the English and other language versions, the English version shall prevail. The Company shall have the right to modify, update or amend the terms of this Notice at any time by notifying you and/or placing the updated Notice on the Company website ("Website") at the following link: www.buddyz.co By continuing to communicate with the Company or use The Company’s services following the modifications, updates or amendments to this Notice, such actions shall signify your acceptance of such modifications, updates or amendments.

1. "Personal Data" means information about you, from which you are identifiable, including but not limited to your name, identification card number, telephone numbers, address, email address, date of birth, age, gender, photograph, race, ethnic origin, nationality, passport number, social media contact, marital status, information about your company and your designation in your company, credit/debit card details, your flight and travel details, frequent flyer number or other loyalty program membership number, or any information about you which you have provided to the Company in any correspondence or when you engage the Company for services and/or any information about you that has been or may be directly or indirectly collected, stored, used and processed by the Company from time to time. The Company may also collect sensitive personal data such as data relating to your health, religion or other similar beliefs, and you hereby expressly consent to the use of such sensitive personal data, and sensitive personal data will form part of the definition of "Personal Data".
2. In addition to the Personal Data you provide to the Company directly, the Company may also collect your Personal Data from a variety of sources, including from inquiry forms, application forms, registration forms and/or other similar forms, company searches, corporate documents that may contain your personal data, governmental agencies, when you interact and communicate with the Company at any events, fairs or roadshows, via the Website or otherwise or when you make enquiries. If you do not wish to have cookies placed on your computer while browsing the Website, please set your browsers to refuse cookies before using the Website, with the drawback that certain features of the Website may not function properly without the aid of cookies.
3. Provision of your Personal Data is mandatory for the Purposes (as outlined below). If you do not provide the Company with your Personal Data, the Company will not be able to provide the services you have requested, such as organising your travel arrangements.

1. The Company may use and process your Personal Data to provide you the services you have requested, to perform the contract you have entered into with the Company and for the purposes relating to the business and activities of the Company which shall include, without limitation the following ("The Purposes"):
   • To process your travel arrangements or for matters related to your travel arrangements, including for flight and accommodation bookings, making ground arrangements, purchasing insurance, application of visa, etc;
   • To facilitate your participation in any contests or promotional/marketing events which you have signed up for;
   • To facilitate your participation in loyalty programs;
   • For purposes of billing and payments relating to the services you have requested;
   • To contact and correspond with you regarding various matters pertaining to the services you have requested, such as the status of your travel arrangements, last minute cancellations, etc;
   • To respond to questions, comments and feedback from you;
   • For internal administrative purposes, such as auditing, data analysis, and to improve our services;
   • For purposes of detection, prevention and prosecution of crime;
   • To enforce or defend the Company’s legal rights and/or to obtain legal advice;
   • For the Company to comply with its obligations under law whether within or outside Malaysia;
   and you agree and consent to the Company using and processing your Personal Data in the manner as identified in this Notice.

1. Unless you have indicated otherwise, the Company may also use and process your Personal Data for marketing and advertising purposes such as to:
   • Send you communications regarding the Company’s latest promotions and services;
   • Contact and inform you about events, fairs or exhibitions which may be of interest to you;
   • Conduct market surveys
   by way of post, telephone calls, short messaging service (SMS), other forms of digital messaging and/or by email ("Marketing Purposes")
   
   If you do not consent to the Company processing your Personal Data for the Marketing Purposes, please notify the Company using the contact details stated below.

1. Your Personal Data may be transferred to, stored, used and processed in a jurisdiction other than Malaysia, such as in the following circumstances:
   • Where personal information is required to be disclosed to various law enforcement agencies and governments for security, customs and immigration purposes;
   • Where the Company’s service providers, contractors, agents or partners are located outside of Malaysia;
   • Where the Company’s servers or back-up servers are located outside of Malaysia.
   and you understand and consent to the transfer of your Personal Data out of Malaysia as described herein.

1. Your personal data may be transferred, accessed or disclosed to third parties for the Purposes or for Marketing Purposes. Further, the Company may engage other companies, service providers or individuals to perform functions on the Company’s behalf, and consequently may provide access or disclose to your Personal Data to such service providers or third parties. The third parties referred to in this section include (without limitation):
   • Service providers such as the Company’s information technology (IT) service providers;
   • Contractors in order for the Company to complete a transaction on your behalf;
   • Marketing and advertising agencies;
   • Our professional advisors, including our legal advisors, auditors, accountants and consultants;
   • The Company’s subsidiaries, associate companies and jointly controlled entities; and
   • Regulatory and governmental authorities in order to comply with statutory and government requirements.
   Your Personal Data may also be shared in connection with a corporate transaction, such as a sale of a subsidiary or a division, merger, consolidation, or asset sale, or in the unlikely event of winding-up.

1. Subject to any exceptions under applicable laws, you may request for access to and/or request correction of your Personal Data, request to limit the processing of your Personal Data for Marketing Purposes and/or make any inquiries regarding your Personal Data by contacting:
   Email address: hello@buddyz.co
2. Please note that if you withdraw your consent for the Company to process your Personal Data for the Purposes, the Company may consequently not be able to transact or contract with you and may be unable to provide you the products or services which you have requested.
3. In respect of your right to access and/or correct your Personal Data, the Company has the right to refuse your requests to access and/or make any correction to your Personal Data for the reasons permitted under law, such as where the expense of providing access to you is disproportionate to the risks to your or another person’s privacy. The Company reserves the right to impose a fee for access of your Personal Data in the amounts as permitted under law.

1. The Website may contain links to third parties' websites. Please note that the Company is not responsible for the collection, use, maintenance, sharing, or disclosure of data and information by such third parties. If you provide information directly to such sites, the privacy policy and terms of service on those sites are applicable and the Company is not responsible for the information processing practices or privacy policies of such sites.

1. As a parent or legal guardian, please do not allow the minor (individuals under 18 years of age) under your care to submit Personal Data to the Company. In the event that such Personal Data is provided to the Company, you hereby consent to the processing of the minor’s Personal Data as his/her parent or legal guardian and personally accept and agree to be bound by this Notice and take responsibility for his or her actions.
2. In some circumstances you may have provided personal data relating to other individuals (such as your spouse, family members, colleagues or friends) and in such circumstances you represent and warrant that you are authorised to provide their personal data to the Company and you have obtained their consent for their personal data be processed and used in the manner as set forth in this Notice and they have been alerted to the contents of this Notice.

1. By communicating with the Company, engaging the Company or using the Company’s services, you acknowledge that you have read and understood this Notice and agree and consent to the use, processing and transfer of your Personal Data by the Company as described in this Notice.