WORLD EXPRESS (WXP) respects your privacy and is committed to protecting personal data in line with the Malaysian Personal Data Protection Act 2010 (PDPA) and, where applicable, the General Data Protection Regulation (GDPR). This statement explains how we collect, use, and safeguard personal data through our website and business operations. 

What We Collect 

We may collect: 

• Traveller details such as name, passport number, nationality, date of birth, booking history, preferences, and special requests.
• Business contact details from tour operators, travel agents, suppliers, and partners.
• Employee information (where relevant for recruitment or HR purposes).

How We Use the Data 

We use this information to: 

• Arrange and deliver inbound travel and destination management services.
• Maintain business records with partners, suppliers, and agents.
• Share updates on services, promotions, or developments where you have given consent.
• Comply with legal, contractual, and operational requirements.

You may opt out of marketing communications at any time by contacting us or using the unsubscribe option in our emails. 

Data Storage & Security 

Personal data may be stored in secure cloud platforms such as Google Workspace and Microsoft 365, which host data on international servers with internationally recognised certifications (ISO, SOC 2, GDPR compliance). Access is restricted to authorised staff, and safeguards such as multi-factor authentication, encryption, and regular backups are applied. Vendors and service providers handling traveller data are contractually required to maintain equivalent security standards. 

 Data Transfers 

As part of our DMC services, relevant personal data may be shared with overseas tour operators, airlines, hotels, and service providers outside Malaysia. 
Data may also be stored on international servers hosted by our cloud service providers. Where such transfers occur, safeguards are applied to ensure compliance with the Malaysian PDPA and GDPR principles. 

Your Rights 

You have the right to request access to, or correction of, your personal data held by WXP.  For travellers and partners in the EU, GDPR rights (such as erasure, restriction, or objection to processing) are also recognised. To make a request or withdraw consent, please contact our Data Protection Officer (DPO): 

• Email: wxpkul@worldexpress.travel
• Phone: +603 2148 9601

Cookies 

This website may use cookies to improve functionality and analyse site traffic. You may choose to accept or decline cookies through your browser settings. 

Third-Party Links 

Our website may contain links to partner, supplier, or airline websites. Please note that we are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any external sites you visit. 

Policy Updates 

WXP may update this policy from time to time. Changes will be posted on this page with an updated effective date. 

Effective from: 10 October 2025