Privacy Policy

CampORA ("we", "us", "our") is an online marketplace operated in Malaysia that connects campers with campsite owners and motorhome operators. Our platform is accessible at campora.my. For privacy enquiries, contact us at: privacy@campora.my

We collect the following personal data when you use CampORA: Account Data: Name, email address, profile photo (via Google OAuth) Booking Data: Booking dates, campsite or motorhome selected, number of guests, special requests Payment Data: Transaction references and amounts. We do not store card numbers or banking credentials — these are handled by ToyyibPay. Owner / Host Data: Full name, IC number, phone number, TIA registration number, bank account details (collected post-approval for payout purposes only) Usage Data: Pages visited, search terms, device type, browser — collected via analytics tools to improve the platform Communications: Messages sent via our contact form or support channels

We process your personal data for the following purposes: To facilitate bookings and confirm reservations To process payments and disburse payouts to owners To verify campsite owner identity and regulatory compliance (TIA/MOTAC) To send booking confirmation, pre-arrival, and post-stay emails To provide customer support To comply with Malaysian law, including PDPA 2010 and tax obligations To improve the platform through aggregated, anonymised analytics We do not use your data for advertising profiling or sell your data to third parties.

Under Malaysia's Personal Data Protection Act 2010 (PDPA), we process your data based on: Contractual necessity: To fulfil a booking you have made Legitimate interests: To operate, secure, and improve our platform Legal compliance: To meet obligations under Malaysian law Consent: For optional communications such as newsletters, where we ask for your explicit consent

Your data is stored on Supabase infrastructure with servers in secure, compliant data centres. We apply: Encryption at rest and in transit (TLS/HTTPS) Role-based access controls — only authorised team members can access personal data Separate secure storage for sensitive owner documents (private, non-public storage buckets) Regular security reviews We retain your data for as long as your account is active, or as required by law (e.g. financial records for 7 years under Malaysian tax law). You may request deletion at any time.

We share your data only as necessary: With campsite owners or motorhome operators: Your name and booking details are shared with the host of your confirmed booking. With payment processors: ToyyibPay receives transaction data to process payments. With service providers: We use third-party tools (e.g. analytics, email delivery) that process data only on our behalf and under our instructions. With authorities: We will disclose data when required by Malaysian law, court order, or regulatory authority. We do not sell, rent, or trade your personal data.

Under PDPA 2010, you have the right to: Access: Request a copy of the personal data we hold about you Correction: Request correction of inaccurate or incomplete data Withdrawal of consent: Withdraw consent for optional processing at any time Deletion: Request deletion of your data (subject to legal retention requirements) To exercise any of these rights, email us at privacy@campora.my. We will respond within 21 days.

We use cookies to maintain your login session and analyse platform usage. These are: Essential cookies: Required for the platform to function (login, session) Analytics cookies: Help us understand how users navigate the platform (anonymised) You can manage cookie preferences in your browser settings. Disabling essential cookies may affect platform functionality.

CampORA is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. If we make material changes, we will notify registered users by email. Continued use of the platform after notification constitutes acceptance of the updated policy.

For all privacy-related enquiries: Email: privacy@campora.my Address: CampORA, Malaysia This policy is effective as of 1 July 2026 and was last updated on 1 July 2026.