How MaldivesQuest handles your enquiry data, in plain language

Your trip brief is used to reply to you, and it goes to the travel provider only if you tick a separate consent box. This page follows your data from the moment you press send to the day it is deleted.

It is the plain-language companion to our formal privacy notice and traveller consent, which sets out the legal basis and your rights under Malaysia's Personal Data Protection Act 2010. Both sit within the trust and transaction clarity hub.

What the enquiry form asks for

The form asks for what we need to plan a trip, and no more.

The form never asks for passport numbers, IC numbers or dates of birth. If a booking later needs traveller details, the licensed travel company issuing the booking asks for them directly.

The life of a brief, step by step

1. You send the brief through the enquiry form or WhatsApp.
2. It is stored securely on Cloudflare infrastructure.
3. We read it and reply with options and an itemised view of likely costs.
4. If you tick the quotation consent box, we share the brief with the licensed travel provider so it can prepare a firm quotation.
5. If you tick the marketing opt-in, we may send occasional planning updates.
6. It is deleted up to 24 months after your last contact, or sooner if you ask.

Who can see your brief

The MaldivesQuest team reads your brief to reply to it. The licensed travel provider sees it only after you give consent through the separate tick box.

Your details are used only for the purposes on this page. The travel provider, once you book, shares the details a booking requires with the resorts, airlines and transfer operators it books for you.

How the provider is chosen and checked is set out in how MaldivesQuest selects and verifies travel partners.

How long it is kept

Briefs are kept for up to 24 months after your last contact with us. That lets us help when you come back to plan a second trip or change dates.

You can ask for deletion sooner at any time. Once deleted, your earlier brief is gone, so a new enquiry starts fresh.

How to see, correct or delete your data

Reply to any message from us, or use the contact route on the enquiry page, and say what you would like:

• See the data we hold about you.
• Correct anything that is wrong, such as a phone number or travel dates.
• Delete your brief and contact details.
• Withdraw consent for sharing with the travel provider or for marketing updates.
• Receive a copy of the data you gave us, in a common format.

We reply to these requests promptly. Withdrawing consent stops future sharing; if you have already booked, the travel company keeps what it needs for your booking.

Analytics and cookies

When analytics is enabled, MaldivesQuest uses Cloudflare Web Analytics. It is a privacy-friendly service that measures page visits without advertising cookies.

No advertising cookies are set, and no profile of you is built for ad targeting. Measuring which guides are read helps us decide which pages to update first.

If something goes wrong

If we ever become aware of a data breach affecting your brief, we will tell you and notify Malaysia's Personal Data Protection Commissioner as the 2024 amendments to the PDPA require. The formal position is in the privacy notice.

Who this matters to most

Families and group organisers often send briefs that mention other people, such as children's ages or a colleague's dietary needs. Share only what is needed to plan, and let the others know their details are in the brief.

Company HR planners sending a team brief can use a work email and a single contact name. Individual traveller details can wait until the travel company issues the booking.