PRIVACY POLICY

Effective Date: Febuary 15, 2026

Las Carretas Malaysia Sdn Bhd (“Las Carretas”, “we”, “our”, or “us”) is committed to protecting and respecting your privacy in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our restaurant, make reservations, contact us, or interact with us through social media or other communication channels.

1. Personal Data We Collect

We may collect and process the following personal data:

a) Information You Provide to Us

  • Full name
  • Phone number
  • Email address
  • Reservation details
  • Event booking information
  • Feedback, enquiries, or complaints
  • Delivery address (if applicable for direct orders)

b) Information Collected Automatically (If You Visit Our Website or Social Media Pages)

  • IP address
  • Device and browser information
  • Cookies and basic usage data

c) CCTV Recordings

For safety and security purposes, CCTV cameras may be installed within our premises.

2. How We Use Your Personal Data

We use your personal data to:

  • Manage reservations and event bookings
  • Provide dine-in, takeaway, or direct delivery services
  • Respond to enquiries and customer service requests
  • Improve our services and customer experience
  • Send promotional materials or updates (only with your consent)
  • Ensure safety and security of our premises
  • Comply with legal and regulatory requirements

3. Disclosure of Personal Data

We may share your personal data with:

  • IT service providers
  • Marketing partners (where consent has been given)
  • Professional advisors (if necessary)
  • Government authorities or regulators (where required by law)

We do not sell, trade, or rent your personal data to third parties.

4. Data Security

We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, disclosure, or alteration.

While we strive to protect your personal data, no method of transmission or storage is completely secure.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law.

6. Your Rights

Under the PDPA, you have the right to:

  • Request access to your personal data
  • Request correction of inaccurate or incomplete data
  • Withdraw consent for marketing communications
  • Request deletion of your data, subject to legal obligations

To exercise your rights, please contact us using the details below.

7. Third-Party Platforms

Our social media pages may be hosted on third-party platforms (e.g., Facebook, TIKTOK, Instagram). We are not responsible for the privacy practices of these platforms.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted at our premises or through our official communication channels.

9. Contact Us

If you have questions about these Terms, please contact us at:
Las Carretas Malaysia

Email: info@lascarretas.com
Phone: SUBANG (03) 5637 3058 AMPANG (03) 4257 1668