Privacy Policy.

Last updated: 5 July 2026

1. Introduction

Suara Juta Sdn Bhd (Company No. 202301032193 (11256116-V)) trading as Travel FM Malaysia ("Travel FM", "we", "our", "us") is committed to protecting the privacy of listeners, subscribers, advertisers and visitors. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and its subsidiary regulations.

2. Personal data we collect

Depending on how you interact with us, we may collect:

• Account data: name, email address, password (encrypted), profile preferences.
• Subscriber data: email address submitted through our newsletter or "stay in the loop" forms.
• Advertiser data: business name, contact person, work email, phone number, campaign brief.
• Listening data: podcasts you play, favourites you save, listening history.
• Technical data: IP address, browser type, device identifiers, referring URLs, cookies.
• Communications: messages you send us via contact forms, email, or social media.

We do not intentionally collect sensitive personal data (such as health, religious beliefs, or political opinions). Please do not submit such information to us unless it is strictly necessary.

3. Purposes of processing

Your personal data is processed for the following purposes:

• to provide, personalise and improve the Services;
• to authenticate accounts and manage subscriptions;
• to send newsletters, programme updates and promotional communications you have consented to;
• to respond to enquiries, advertising briefs and support requests;
• to measure audience reach and refine editorial and advertising strategy;
• to detect fraud, enforce our Terms of Use, and comply with legal obligations under Malaysian law.

4. Legal basis (PDPA principles)

We rely on your consent (given expressly or through your continued use of the Services) and on the following PDPA principles: General Principle, Notice and Choice Principle, Disclosure Principle, Security Principle, Retention Principle, Data Integrity Principle and Access Principle.

5. Disclosure of personal data

We may disclose your personal data to:

• authorised employees, contractors and service providers who assist in operating the Services (e.g. hosting, analytics, email delivery);
• advertisers, in aggregated and anonymised form only, unless you have opted in to direct contact;
• regulatory authorities, courts or law enforcement where required by Malaysian law;
• a successor entity in the event of a merger, acquisition or reorganisation.

Where personal data is transferred outside Malaysia (for example to cloud service providers), we take reasonable steps to ensure the recipient provides a level of protection comparable to the PDPA.

6. Cookies and analytics

We use cookies and similar technologies to remember your preferences, keep you signed in, understand how the Services are used and to serve relevant advertising. You may disable cookies in your browser settings, though some features may no longer function correctly.

7. Retention

We retain personal data only for as long as necessary to fulfil the purposes described above, or as required by applicable law. Newsletter subscribers may unsubscribe at any time; account data is deleted upon verified account closure request, subject to legal retention requirements.

8. Security

We implement reasonable administrative, technical and physical safeguards — including encryption in transit, access controls and regular security reviews — to protect personal data from loss, misuse or unauthorised access. No online transmission is 100% secure; you use the Services at your own risk.

9. Your rights under the PDPA

You have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete personal data;
• withdraw consent for direct marketing at any time;
• limit the processing of your personal data in certain circumstances;
• lodge a complaint with the Personal Data Protection Commissioner of Malaysia (www.pdp.gov.my).

To exercise these rights, email hello@travel-fm.com with the subject line "PDPA Request". We may require you to verify your identity before responding.

10. Children's privacy

The Services are not directed at children under 13. If we discover that we have collected personal data from a child under 13 without verifiable parental consent, we will delete it promptly.

11. Third-party links

The Services may contain links to third-party websites. This Privacy Policy does not apply to those sites; please review their privacy notices before providing personal data.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Services or by email where appropriate. The "Last updated" date at the top of this page reflects the latest revision.

13. Contact us

If you have any questions or complaints about this Privacy Policy or our data handling practices, please contact our Data Protection contact:
Suara Juta Sdn Bhd (trading as Travel FM Malaysia)
Email: hello@travel-fm.com
Address: Kuala Lumpur, Malaysia