Privacy Policy & Disclaimer

1. About This Policy

Fantastic Vasco Holiday Sdn. Bhd., operating as VASCCO, is committed to protecting the personal data of all individuals who interact with us — including school coordinators, teachers, parents, and programme participants.

This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By submitting an enquiry form, contacting us, or engaging our services, you consent to the practices described in this policy.

2. Personal Data We Collect

We collect only the minimum personal data necessary to respond to enquiries and deliver our programmes. This may include:

• Full name of the enquiring person (teacher, coordinator, or parent)
• Email address
• Phone number
• School or organisation name
• Year group and approximate number of students (non-personally identifiable)
• Programme preferences or special requirements

Automatically Collected Data

Like most websites, vascco.my may automatically collect non-personally identifiable information such as browser type, device type, pages visited, and approximate location through cookies and analytics tools (e.g. Google Analytics). This data is used solely to improve our website experience.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

• To respond to programme enquiries and provide quotes or proposals
• To communicate with you about programme logistics, scheduling, and updates
• To improve our services and tailor programme offerings to your school's needs
• To send relevant programme updates or newsletters (only if you have opted in)

We will not use your personal data for any purpose beyond the above without your prior consent.

4. Sharing of Personal Data

We do not sell, rent, or trade your personal data to third parties. Your data may be shared only in the following limited circumstances:

• Partner venues and facilitators — where necessary to arrange and deliver the programme you have booked (e.g. venue name and approximate group size only)
• Legal compliance — where required by Malaysian law or regulatory authorities

All third parties we work with are required to handle personal data responsibly and in accordance with applicable data protection laws.

5. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry data that does not proceed to a booking will be deleted within 12 months. Booking-related records may be retained for up to 7 years for administrative and legal purposes.

You may request deletion of your data at any time by contacting us at the address below.

6. Photography & Media Use Policy

VASCCO programmes are visual and active experiences. We may photograph or film activities during our programmes for the following purposes:

• Programme documentation and quality review
• Marketing and promotional materials, including our website (vascco.my) and social media channels
• Reports and presentations shared with partner schools

Consent

By booking a VASCCO programme, the school coordinator confirms that they have obtained appropriate consent from parents or guardians of participating students for photography and media use, in accordance with the school's own photography consent procedures.

If a school has specific restrictions on photography or media use, these must be communicated to VASCCO in writing before the programme date. We will respect all such restrictions.

Student Identity Protection

We exercise reasonable care in the use of programme photographs. Where practicable, we avoid publishing images where individual students are clearly identifiable by name or other personal details. Full names of students will never be published alongside photographs without explicit written consent from a parent or guardian.

7. Your Rights Under PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access — request a copy of personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Withdrawal of consent — withdraw consent for us to process your data (subject to legal or contractual obligations)
• Deletion — request deletion of your data where it is no longer necessary
• Objection — object to the use of your data for direct marketing purposes

To exercise any of these rights, please contact us in writing at the address below. We will respond within 21 days.

8. General Disclaimer

Programme Information

All programme descriptions, itineraries, pricing, and availability published on vascco.my are provided for general information purposes and are subject to change without notice. Final programme details will be confirmed in writing upon booking.

Safety & Liability

VASCCO takes the safety of all participants seriously. All outdoor and field programmes are facilitated by trained personnel following established safety protocols. However, participation in outdoor and experiential programmes carries inherent risk. VASCCO shall not be held liable for any injury, loss, or damage arising from circumstances beyond our reasonable control, including but not limited to adverse weather, acts of third parties, or participant non-compliance with safety instructions.

Schools and parents are responsible for ensuring that students are medically fit to participate in the programme selected, and must disclose any relevant medical conditions or special requirements at the time of booking.

Third-Party Links

Our website may contain links to third-party websites for reference purposes. VASCCO is not responsible for the privacy practices or content of any third-party website.

Accuracy of Information

While we endeavour to keep all information on vascco.my accurate and up to date, we make no warranties, express or implied, as to the completeness or accuracy of the content. Use of the information on this website is at your own discretion.

9. Cookies

Our website uses cookies to improve your browsing experience and to analyse website traffic. Cookies are small text files stored on your device. You may disable cookies through your browser settings, though this may affect some website functionality.

We use Google Analytics to understand how visitors interact with our site. Google Analytics collects data anonymously and reports website trends without identifying individual visitors.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised date. We encourage you to review this policy periodically.