Travelink Mobile Privacy Policy
Last updated: 15 October 2026
Who operates Travelink
Travelink Mobile is an internal retail application operated by Travelink Enterprise Sdn. Bhd. For privacy requests, contact enquiries@travelink-online.com.
Information used by the app
- Staff account details, access role, sign-in and security activity needed to control access to the online workbench.
- Product and stock snapshots imported for offline lookup, and Stock Take batches, counts and reports created by staff.
- For an administrator who connects cloud alerts: a device identifier, a protected device access credential and an encrypted phone push token.
- For authorized marketplace integrations: platform and store identifiers, order or message event identifiers, event times, notification status and limited error records. Current Facebook and Instagram message alerts record a hash of the message ID; the alert service does not save message text, sender names or customer contact details from those webhooks.
The app uses the camera to scan barcodes. The barcode image is processed on the device and is not uploaded by the scanner feature.
Why we use this information
We use it to provide staff access, offline product lookup, Stock Take records, administrator order and message alerts, duplicate detection, delivery retries and security auditing. Marketplace alerts operate only for platforms and business assets that have been connected and authorized.
Who receives the information
Authorized Travelink staff can access information needed for their assigned work. Marketplace notification history and connected account controls are restricted to administrators. Cloudflare hosts the notification service and its database; Firebase Cloud Messaging delivers Android push notifications. Marketplace platforms provide events through their authorized APIs and webhooks. We do not sell personal information.
Storage and deletion
Offline data and exported files can remain on a device until removed by its user or administrator. The current cloud alert service does not yet apply an automatic deletion period to event metadata or notification history. An administrator can revoke a phone's access, and you may request access, correction or deletion through the contact address above. We will assess and carry out a request subject to records that must be retained for legitimate business or legal reasons.
Security
The app uses HTTPS for cloud connections and restricts cloud alerts to a bound administrator device. Cloud service secrets are held on the server rather than in the Android package. Phone lock-screen alerts omit customer names, addresses and message text. No online system can guarantee absolute security.
Changes
We will update this notice when the app's data handling changes. Questions and requests: enquiries@travelink-online.com.