Privacy notice
Last updated 22 October 2026. This notice is written in English; if you would like it explained in another language, send us a message from the contact form.
Who we are
Jelajah Halal (halalmuslimtravel.com) is operated by HARTA PRIBUMI HERITAGE (CA0426810-X), Malaysia. We handle personal data in line with Malaysia's Personal Data Protection Act 2010.
What we collect, and why
| What | Why | How long |
|---|---|---|
| Contact form: name, email address, subject and message | To answer you. We do not use it for marketing and do not share it. | Deleted automatically after 12 months, or sooner if you ask. |
| Reviews: the name you type, a star rating and your comment | To show your review on the place's page once we have checked it. | Until you ask us to remove it. |
| Visit statistics (our own, no cookies): the section you opened, your language, the website you came from, your country, and the type of device and browser | To see which pages are useful and to keep the site working. A visitor is a daily scrambled code made from your connection and browser with a random salt; your IP address is never stored and the code cannot be followed from one day to the next. If your browser sends “Do Not Track” or “Global Privacy Control”, we do not count you. | Up to 13 months. |
| Abuse protection: a scrambled form of your IP address, kept with a timestamp | To limit how many reviews, messages and saved trips one person can send, and to spot attacks on the admin sign-in. | Rate-limit records: 2 days. Security log: 6 months. |
| Ask us anything chat: the question you type | Sent to the AI service we use to compose an answer. We do not store the conversation; it stays in your browser until you close the chat. Please do not type personal details into it. | Not stored by us. |
| Your location, if you tap “near me” | Used once to find the nearest mosques and prayer times. It is not stored. | Not stored. |
What stays on your device
Your saved places, language, theme, chosen city and prayer-reminder choice are kept in your browser's storage and never sent to us. The optional “Offline use” pack is stored encrypted on your phone for at most 30 days and can be removed at any time from the Offline use window. Prayer reminders are shown by your browser while the page is open; nothing is sent to a server.
Other companies involved
- Cloudflare delivers and protects the site, so it sees your IP address and requests.
- Google Fonts supplies the typeface; your browser contacts Google to download it.
- OpenStreetMap supplies map tiles on the Map page, and Wikimedia Commons hosts many of the photos; your browser contacts them when those appear.
- Google Maps place photos are fetched by our server and passed on to you, so your browser does not contact Google for them.
- The Halal check forwards the business name you type to the public JAKIM directory.
Your choices
You can ask to see, correct or delete what we hold about you — for example the messages sent from your email address — by writing to us through the contact form and telling us the email address you used. We will act on it and confirm.
Security
The site is served only over HTTPS. Messages from the contact form are visible only to the site's administrator, who signs in with a password and, optionally, an authenticator code. Reviews are checked before they are shown.
Changes
If this notice changes in a way that matters, we will update the date at the top.