Compliance & Data Protection Notice

ItenaTravel Privacy Policy

Last Updated: August 4, 2026. Effective for all users of the ItenaTravel web and mobile applications.

At ItenaTravel (operated by Ritma Insights Sdn Bhd), we are committed to safeguarding your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, process, and protect your data in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

1Data Controller & Contact Information

The data controller responsible for your personal data is Ritma Insights Sdn Bhd. If you have questions regarding this Privacy Policy or wish to exercise your rights under the PDPA, you may contact us at:

Address: Level 2, Chen Ling Tower, The Podium, Jalan Tun Datuk Patinggi Hj. Ahmad Zaidi Adruce, 93200 Kuching, Sarawak, Malaysia.

Data Protection Officer Emails: [email protected] | [email protected]

2Categories of Personal Data Collected

We collect information to provide, improve, and protect our travel directory platform. The types of data collected include:

User & Provider Credentials: Full name, email address, password hash, role (traveller, provider, admin), and organization details.
Provider Business Listings: Contact numbers, business addresses, operating hours, pricing/budget rates, media/photos, and service descriptions.
Technical & Device Data: IP address, browser type, operating system, access timestamps, and device identifiers.
Location Data: Coarse or precise geolocation data provided with your permission when exploring points of interest (POIs) or map routes.

3Purpose of Data Processing

Your personal data is processed exclusively for legitimate business and platform operational purposes, including:

Displaying points of interest, nature trails, and Sarawak travel listings to users.
Facilitating provider listing management and admin moderation.
Maintaining platform security, preventing unauthorized access, and detecting fraud.
Analyzing platform usage metrics to enhance map interactions and search performance.
Communicating important updates, security alerts, and administrative notices.

4Data Protection & Security Practices

We implement stringent technical and organizational security measures to protect your personal data against accidental loss, unauthorized access, disclosure, or alteration:

Encryption: All data transmitted between your device and our servers is encrypted using standard Transport Layer Security (TLS/HTTPS).
Access Control: Administrative access is restricted to verified personnel of Ritma Insights Sdn Bhd under strict confidentiality obligations.
No Data Selling: We never sell, rent, or trade your personal information to third-party advertisers or data brokers.

5Your Rights under the Malaysian PDPA

Under the Personal Data Protection Act 2010, you hold specific rights regarding your personal information:

Right to Access: Request a copy of the personal data held about you by ItenaTravel.
Right to Correction: Request correction of inaccurate, incomplete, or out-of-date personal data.
Right to Withdraw Consent: Withdraw your consent for processing your personal data at any time.
Right to Erasure: Request the deletion of your user account and associated personal data.

To submit a request, please send an email specifying your request to [email protected]. We will respond within 21 working days as required by law.

6Cookies & Map Service Integrations

ItenaTravel uses essential cookies and local browser storage to maintain session states and user preferences. We utilize Leaflet and OpenStreetMap for interactive map rendering. External map tile services may process non-personally identifiable request headers (such as user-agent) to deliver map tiles efficiently.