Delete My Data

What this page is for

This page explains how to ask MD2 Botanic Cafe & Resort to delete the personal information we hold about you — including anything we received when you contacted us or signed in through Facebook, Instagram or WhatsApp.

It is published to meet Meta’s platform requirements for data deletion, and to support the rights you have under the Malaysian Personal Data Protection Act 2010 (PDPA).

How to make a request

There is no form to fill in. Ask us in whichever way is easiest for you:

• email us with “Data deletion request” in the subject line;
• send us a WhatsApp message saying you would like your data deleted;
• message our Facebook or Instagram page;
• call us and tell our team — we will record the request for you.

So that we can find the right records and be confident the request really comes from you, please tell us the name your booking was made under, the phone number or email address you used, and — if you contacted us through social media — the Facebook or Instagram account name.

You do not need to give a reason, and asking costs nothing.

Removing access from your Facebook account

You can disconnect us from your Facebook account yourself at any time. In Facebook, go to Settings & Privacy → Settings → Apps and Websites, find MD2 Botanic Cafe & Resort in the list, and choose Remove.

Removing the connection stops any further information reaching us, but it does not delete what we already hold. To have that deleted, send us a request as described above.

What happens after you ask

• We acknowledge your request within 7 days of receiving it.
• We may ask one or two questions to verify your identity, so that we never delete the wrong person’s records.
• We delete or anonymise the information within 30 days of verifying your request.
• We confirm to you in writing once it is done, and tell you about anything we had to keep.

The request also reaches our service providers — our booking system and any partner engaged for your booking — so that their copies are removed too.

What we may have to keep

Malaysian tax, accounting and guest-registration law requires us to keep certain booking, accommodation and financial records for a set period — generally seven years. Where that applies, we keep only the minimum the law requires, stop using it for any other purpose, and delete it when the period ends.

We also keep a short record of the deletion request itself, so we can show that it was carried out.

If you are not satisfied

If we have not dealt with your request properly, please tell us first so we can put it right. You may also complain to the Personal Data Protection Department of Malaysia (JPDP).

How to contact us

Send your deletion request to any of these: