Effective: 1 January 2026 · Under the Personal Data Protection Act 2010 (PDPA)
LetsMakan collects the following information when you register and use our platform: full name, email address, phone number, profile photo, identity card (IC) and selfie (for identity verification only), payment information (securely processed by Stripe — we do not store card details), and booking information.
Your data is used to: manage your account and bookings, verify the identity of Home Hosts and Makan Guides, process payments, send booking notifications, and comply with legal requirements.
IC and selfie are stored in protected private storage, accessible only to the LetsMakan team for verification. Data is not shared with third parties except for platform operations (Stripe for payments, Resend for email).
You have the right to: access your personal data, correct inaccurate data, withdraw consent, and request account deletion. To request data deletion, log in to your Profile and select "Delete Account", or email privacy@letsmakan.my.
Account data is kept while your account is active. IC and selfie are kept until verification is complete and deleted within 30 days after. Transaction data is kept for 7 years for tax and audit purposes.
For any privacy enquiries: privacy@letsmakan.my