Privacy Policy

1. Operating Entity & Introduction

This Privacy Policy describes how Artsylum Festivals Sdn. Bhd. (Registration No: 201701002031 / 1236197-M), operating as Black Lion Steakhouse KL (part of the Qing Arts Club group), collects, uses, protects, and manages personal data in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

By making a reservation, dining at our establishment, or interacting with our digital services, you consent to the data practices described in this notice.

2. Personal Data We Collect

When you interact with Black Lion Steakhouse KL, we may collect the following personal data:

• Guest Contact Details: Full name, mobile telephone number, and email address.
• Reservation Information: Date and time of reservation, party size, seating zone preference (Gallery Dining, Signature Dining, Chef's Table, or The Chamber PDR), and special occasion notes.
• Dietary & Allergy Records: Voluntary dietary requirements, allergy disclosures, or culinary preferences provided during booking.
• Payment & Billing Data: Payment verification details for private dining deposits or banquet pre-orders processed through authorized banking institutions (Maybank).
• Technical Browsing Data: Non-personally identifiable technical analytics (IP address, browser type, device information) collected to optimize page performance.

3. Purpose of Data Processing

Your personal data is collected and processed strictly for legitimate operational purposes, including:

• Fulfilling table reservations, managing dining schedules, and sending reservation confirmations via WhatsApp or SMS.
• Coordinating private dining buyouts, banquet menus, and special arrangements for The Chamber (VIP PDR).
• Accommodating recorded dietary restrictions and allergy precautions for safe culinary service.
• Communicating operational updates, seasonal menu announcements, or special event invitations (where explicit consent has been granted).
• Complying with statutory, tax, and legal requirements under Malaysian law.

4. Third-Party Service Providers

We work with trusted third-party technology providers to power our operations. Your information is shared only to the extent necessary to deliver our services:

• UMAI Reservation Engine (letsumai.com): Powers our operational table management, live seating availability, and digital booking funnel.
• Payment Processors: Official banking channels (Malayan Banking Berhad / Maybank) for verified transaction clearing.

Note: Artsylum Festivals Sdn. Bhd. does not sell, lease, or trade personal guest information to any unauthorized third parties for marketing purposes.

5. Data Security & Storage

We implement strict administrative, technical, and physical safeguards to protect personal data against loss, theft, unauthorized access, disclosure, or modification. All digital transmissions via our website are secured using industry-standard SSL/TLS encryption.

6. Your Rights & Inquiries

Under the Malaysian PDPA 2010, you have the right to:

• Request access to the personal data we hold about you.
• Request correction or updating of incomplete or inaccurate data.
• Withdraw consent for promotional marketing communications at any time.

To exercise your rights or submit any data inquiry, please contact our administrative office: