Privacy Policy

Circa Bar KL, operated by Rokumeiken Sdn. Bhd. ("we", "our", or "us"), is committed to protecting the privacy of our guests and website users. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

By visiting our website, making a reservation, or engaging with our services, you consent to the practices described in this policy. If you do not agree, please refrain from using our services.

1. Information We Collect

1.1 Information You Provide Directly

When you interact with us — whether through our website reservation form, by email, WhatsApp, or in person — we may collect:

• Identity data: Full name, date of birth (for age verification)
• Contact data: Email address, phone number
• Reservation data: Date, time, party size, occasion type, special requests
• Event data: Organisation name, event details, budget range (for private bookings)
• Communications: Any correspondence with us via email, phone, or social media

1.2 Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent on each page
• Referring website or search terms
• Device type and operating system

This data is collected via standard web server logs and analytics tools (such as Google Analytics) and is used in aggregate, anonymised form to improve our website.

1.3 CCTV & Premise Security

Our premises operate CCTV surveillance for the safety and security of our guests and staff. Footage is retained for a limited period and may be shared with law enforcement if required.

2. How We Use Your Information

We use personal data collected for the following purposes:

• Reservation management: To confirm, manage, and follow up on your table or event booking
• Communication: To respond to your enquiries and provide customer support
• Service improvement: To understand how guests use our venue and website in order to improve our offerings
• Marketing (with consent): To send you information about upcoming events, promotions, and special offers — only if you have opted in
• Legal compliance: To comply with applicable laws, regulations, and licensing requirements
• Safety & security: To protect our staff, guests, and premises

3. Legal Basis for Processing

Under PDPA 2010, we process your personal data based on the following lawful grounds:

• Consent: Where you have explicitly agreed to receive marketing communications
• Contractual necessity: To fulfil your reservation or event booking
• Legitimate interests: For security, fraud prevention, and improving our services
• Legal obligation: Where required by Malaysian law or regulation

4. Sharing of Personal Data

We do not sell, trade, or rent your personal information to third parties. We may share your data in limited circumstances:

• Service providers: Trusted third parties who assist us in operating our business (e.g., email platforms, reservation software), bound by confidentiality obligations
• Legal authorities: Where required by Malaysian law, court order, or to protect the rights and safety of Circa Bar KL, its staff, and guests
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, subject to appropriate confidentiality protections

5. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law:

• Reservation data: Up to 24 months from the date of visit
• Private event data: Up to 36 months from the event date
• General enquiry communications: Up to 12 months
• CCTV footage: Typically 30 days, unless required for an investigation
• Marketing consent records: Until consent is withdrawn

After the relevant retention period, data is securely deleted or anonymised.

6. Cookies

Our website uses cookies — small text files stored on your device — to improve your browsing experience. We use:

• Essential cookies: Necessary for the website to function correctly
• Analytics cookies: Help us understand how visitors use our website (e.g., Google Analytics, anonymised data only)

You can control cookie preferences through your browser settings. Disabling cookies may affect some website functionality. We do not use advertising or tracking cookies.

7. Social Media & Third-Party Links

Our website links to our social media profiles on Instagram and Facebook, and may contain links to third-party websites. We are not responsible for the privacy practices of these external platforms. We encourage you to review their respective privacy policies.

When you interact with our social media content (e.g., following @circabarkl, commenting on posts), the relevant social platform's privacy policy governs that interaction.

8. Your Rights Under PDPA 2010

As a data subject under Malaysia's PDPA, you have the right to:

• Access: Request a copy of personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Withdrawal of consent: Withdraw marketing consent at any time by emailing us or clicking "unsubscribe" in any marketing email
• Complaint: Lodge a complaint with the Personal Data Protection Department of Malaysia if you believe your rights have been infringed

To exercise any of these rights, contact us at enquiry@circabarkl.com. We will respond within 21 days.

9. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include SSL encryption on our website, restricted staff access to personal data, and regular security reviews.

However, no method of data transmission over the internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security and encourage you to use secure and up-to-date browsers when interacting with our website.

10. Children's Privacy

Circa Bar KL is strictly an adults-only venue and our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be available on this page, with the "last updated" date clearly noted at the top. Continued use of our services following any updates constitutes your acknowledgement of the revised policy.

12. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our Data Management team:

• Email: enquiry@circabarkl.com
• Phone / WhatsApp: +60 14-726 2474
• Address: Rokumeiken Sdn. Bhd., 8-7, Jalan Batai, Bukit Damansara, 50490 Kuala Lumpur, Malaysia