Privacy Policy

This Privacy Policy explains how Luxurious Villa Port Dickson ("we", "us", "our") collects, uses, and protects information when you visit pdluxuriousvilla.com (the "Site"). We comply with Malaysia's Personal Data Protection Act 2010 (PDPA).

The short version: we do not operate a database, do not create user accounts, and do not store any personal information about visitors. The details below explain the minimal, transient data flows that occur when you use the Site.

1. Information We Collect

Information you provide

• Chat messages — when you use the Mr. Crab AI concierge, the text you type is forwarded directly to Anthropic to generate a reply and is not stored by us in any database or log. The conversation exists only in your browser for the duration of your session.
• Contact details — if you choose to reach us via WhatsApp, phone, or SMS, your contact information is held in those third-party platforms under their own privacy policies.

Information processed automatically

• IP address — your IP address is checked transiently against a short-lived rate-limit counter to prevent AI chat abuse. The counter expires automatically within minutes and no IP address is written to any persistent log or record on our side.
• Language preference cookie — a single cookie named lang is saved in your browser to remember your preferred display language (e.g. en, zh, ms, ta). It is never sent to any server beyond the initial page request and contains no personally identifiable information.

2. How We Use Your Information

We do not use your data for advertising, sell it to third parties, or combine it with other datasets to build a profile about you.

3. Third-Party Services

• Anthropic — chat messages are sent to Anthropic's API to produce AI responses. We do not retain them, but Anthropic may process them per their Privacy Policy.
• Google Maps / Google Fonts — embedded on the Site. Google may collect data as described in Google's Privacy Policy.
• Airbnb — we retrieve a read-only public iCal feed from Airbnb to display live availability. No guest data from Airbnb is accessible to us through this feed.

4. Data Retention

We retain no personal data. We do not operate a customer database. Chat messages are discarded after Anthropic returns a response. Rate-limit counters expire automatically within minutes. The only persistent data associated with your visit is the lang cookie stored in your own browser, which you can delete at any time via your browser settings.

5. Your Rights Under PDPA 2010

To make a request, reach us via WhatsApp: +60 12-638 0981

6. Cookies

We use one first-party functional cookie (lang) that is strictly necessary for the Site to display in your preferred language. We do not use advertising, tracking, or analytics cookies.

7. Security

All traffic is protected by HTTPS/TLS. AI chat tokens are short-lived and signed with HMAC to prevent forgery. Since we store no personal data, there is no customer database that could be breached.

8. Children's Privacy

This Site is not directed at children under 13. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of the Site after changes constitutes acceptance of the updated Policy.

10. Contact

For any privacy-related questions, contact us via WhatsApp or phone: +60 12-638 0981