Firefly | Privacy Policy

Introduction

FlyFirefly Sdn. Bhd. (referred to as the “Company”, “we”, “our” or “us”) is committed to the protection of your Personal Data and takes the matter of protecting your privacy as high priority.

This Privacy Statement explains general terms on how we collect, use and protect the privacy of your Personal Data under the Personal Data Protection Act 2010 ("PDPA"). Please note that the Privacy Statement is streamlined to common principles of data privacy in most jurisdictions although there may be some slight variations due to local requirements.

What Personal Data do we collect?

The types of Personal Data that we collect directly from you or from third parties depend on the circumstances of collection and on the nature of the service requested or transaction undertaken. It may include (but is not limited to):

personal information that links back to an individual, e.g., name,gender, date of birth, passport, other government issued NationalIdentification card numbers and other personal identification numbers;
contact information, e.g., address, phone number and email address;
payment information, e.g., credit or debit card information, includingthe name of cardholder, card number, billing address and expiry date;
travel information, e.g., flight information, loyalty program membershipdetails, seating, dietary or other service preferences;
health information, e.g., health issues relevant to your travelarrangement or medical records and requests;
technical information, e.g., IP address; and
statistical data, e.g., number of passengers, and hits to website.

Where another person makes reservations on your behalf, you undertake and will ensure that you have authorized the disclosure of your Personal Data and consent to the terms and conditions of this Privacy Statement. Where you are booking on behalf of another person, you represent and warrant that you have the consent of those persons to provide their Personal Data. In addition where you are booking on behalf of children (those below 18 of age), please ensure that you are over 18, has appropriate authority and consent of their consent whose Personal Data is submitted to the Data User.

How do we collect your Personal Data?

This Privacy Policy covers any Personal Data provided to us:

via any online sites operated by us and our contractors;
under any other contractual agreement or arrangement;
via a third party, e.g., travel agent or our service provider.

Some of the other ways we may collect Personal data shall include (but is not limited to):

communications with you via telephone, letter, fax and email;
when you visit our website or one of our contractors’ websites;
when you contact us in person;
when we contact you in person;
when we collect information about you from third parties; and otherchannels including our ticketing counters and airport operations;
when you interact with us via social media or interactive applicationsincluding but not limited to Facebook, Twitter, Instagram etc;
from publicly available sources;
mobile services.

How do we collect your Personal Data from our website?

IP Address: We use your IP address to help diagnose problems with our server, and to administer our website. IP addresses are not linked to personally identifiable information.

Cookies: A cookie is an element of data that a website can send to your browser, which may then store it on your system. We use cookies in some of our pages to store your preferences and record session information. The information that we collect is then used to ensure a more personalized service level for our users. Please be assured though that your credit card number will not be saved for security reasons. You must type the credit card number each time you make a purchase.

Online Reservation System: Our online reservation system resides in a secure server that encrypts your purchase information using Secure Socket Layers. We use all reasonable endeavours to protect Personal Data from loss, misuse and alteration. Only authorized employees and agents will have access to your Personal Data. However, you are responsible for your user ID or password that is used on our web site. You should take due care to protect them.
User Feedback Form
Site Tracking: We use tracking software to monitor customer traffic patterns and siteusage to help us develop the design and layout of the websites. This softwaredoes not enable us to capture any personal passenger information.

What do we use your Personal Data for?

We may use your Personal Data for the following purposes:

to enable us to provide our services and perform our services to you;
to facilitate your travel (e.g., making a booking) and freight arrangements;
to verify identity of passengers and perform luggage check-ins;
to provide flight alert messages;
to facilitate internet check-in;
to process any commercial transaction (e.g. In-flight sales);
to facilitate your participation in our or third parties’ loyaltyprograms;
to protect the safety and well-being of yourself and/or other customers;
to investigate and respond to claims and inquiries from you;
to remind you to complete your booking and/or offer our assistance (in case, for instance, failure to complete due to technical difficulties). This is an optional service. You can choose not to receive these emails at any time by following the link at the bottom of each such email;
to provide in-flight catering and other services that best meet yourpreferences and needs;
for financial purposes such as credit or other payment cardverification, accounting, billing and audit; and / or.
for business development purposes such as statistical and marketing analysis, systems testing, maintenance and development, customer surveys, customer relations to advise on alterations to flights or to help us in any future dealings with you, for example by identifying your requirements and preference;
to comply with any legal or regulatory requirements; and/ or
for all other purposes ancillary to any of the purposes stated above. ("Core Purposes").
to communicate promotions, offers, product, services and information onproducts and activities, offers to upgrade or other notifications in relationto your booking;
marketing/cross-marketing and communicating with you in relation toproducts and services offered by us and our service partners as well as ourappointed agents; and/or
for all other purposes ancillary to any of the purposes stated above. ("Ancillary Purposes") (collectively, "Purposes")

Accessing/Limiting/Correcting/Updating your Personal Data

You may request to obtain information of your Personal Data, limit the processing of your Personal Data and also update or make amendments to your Personal Data as below:

for online registered customers, you may login to your online accountand update your Personal Data; or
for every other customer, you may forward your request to the contactperson as detailed below at clause 12.

Please note that depending on the information requested, a nominal fee may be charged. We will endeavour to provide the information back to you as soon as practicable. However we also reserve the right to validate all requests for the authenticity of the request. We may refuse to comply with data access request in circumstances as provided by the law (under section 32 of the PDPA). If we are not able to comply with your request, we will notify you of the reasons.

Withdrawing Consent

Withdraw Consent

Please note that it is obligatory for the Company to process your Personal Data for the Core Purpose as stated above, without which we will not be able to make travel arrangements for you. If we do not have your consent to process your Personal Data for the Ancillary Purposes, we will not be able to keep you updated about our future, new and/or enhanced services and products.

Nevertheless, you may stop receiving promotional activities by:

unsubscribing from the mailing list;
editing the relevant account settings to unsubscribe; or
sending a request to customer_care@fireflyz.com.my

To whom do we disclose your Personal Data?

We will not trade or sell your Personal Data to third parties. Your Personal Data shall only be disclosed or transferred to the following third parties appointed or authorised by the Company, who may be located within or outside Malaysia for the fulfilment of the Purpose:

our travel and freight service providers or travel-related businesses;
our travel and freight service providers or travel-related businesses;
airport authorities;
our other affiliates and subsidiaries where it is necessary tofacilitate your travel;
credit card verification providers,
data warehouse;
IT service providers;
data analytics and/or marketing agency;
other third parties in order to process your commercial transactions;
legal bodies as permitted or required by law such as in compliance witha warrant or subpoena issued by a court of competent jurisdiction; and/or
customs, immigration or other regulatory authorities applicable to you; and/or
safety and security personnel.

In addition to the above, your personal data may also be disclosed or transferred to any of the Company’s actual and potential assignee, transferee or acquirer (within or outside Malaysia) (including our affiliates and subsidiaries) or our business, assets or group companies, or in connection with any corporate restructuring or exercise including the restructuring to transfer the business, assets and/or liabilities.

We shall take practical steps to ensure that their employees, officers, agents, consultants, contractors and such other third parties mentioned above who are involved in the collection, use and disclosure of your Personal Data will observe and adhere to the terms of this Privacy Statement.

How long may retain your Personal Data?

How long may we retain your Personal Data?

We will store the Personal Data in the country in which we are based ie Malaysia. However, the Company may have back up and storage servers, which are located overseas. Additionally, the Company will secure the storage in following ways in compliance with the minimum security measures prescribed under the PDPA, its regulation and standards:

register all those who are allowed access;
control and limit access based on necessity;
maintain proper record of access and transfer of Personal Data;
ensure all employees of the Company protect confidentiality;
conduct awareness programmes to all employees (if necessary) on responsibility to protect Personal Data;
establish physical security procedures;
bind third parties involved in processing of Personal Data; and
do not use removable device and cloud computing service to transfer or store Personal Data unless with written consent from top management of the Company.

We will not retain your Personal Data longer than necessary for the fulfilment of the Purpose. However, relevant Personal Data may be retained subject to the conditions below:

as and when required under legislation; or
where legal actions have arisen and are pending.
commercial/operational purposes of Malaysia Airlines

The Company shall take all reasonable steps to ensure that all Personal Data is destroyed or permanently deleted when no longer required for the Purpose and prepare disposal schedule for inactive data with 24 month period.

Change to Privacy Statement

Please note that this Privacy Statement may be amended from time to time in accordance to applicable laws and regulations and such variations may be applicable to you. The latest version of this Privacy Statement will be made available to all customers. Do revisit our website from time to time for updates on our Privacy Statement.

Links to third party website

We may link this website and/or our applications to other companies or organizations websites (collectively, “Third Party Sites”). This Privacy Notice does not apply to such Third Party Sites as those sites are outside our control. If you access Third Party Sites using the links provided, the operators of these sites may collect your personal information. Please ensure that you are satisfied with the privacy statements of these Third Party Sites before you submit any personal information. We try, as far as we can, to ensure that all third party linked sites have equivalent measures for protection of your personal information, but we cannot be held responsible legally or otherwise for the activities, privacy policies or levels of privacy compliance of these Third Party Sites.

Contact

If you still have inquiries or complaints in relation to our handling of your Personal Data or our Privacy Policy or wish to access, update or amend your Personal Data as mentioned above at Clause 6, please visit contact us via the details as described below:

Designation : Customer Care

Phone no. : 603-7845 4543

Email Address : customer_care@fireflyz.com.my