Privacy Policy

Introduction

Nautiq operates yacht charter services along the Pahang coast of Malaysia. This privacy policy explains how we collect, use, and protect personal information provided by guests who book charter passages or enquire about our services.

We are committed to protecting your privacy and handling your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. By using our services or providing your information, you agree to the practices described in this policy.

For questions regarding this policy or how we handle your information, contact us at [email protected].

Information We Collect

We collect personal information necessary to process charter bookings and provide our services. The types of data we collect include:

• Name and contact details (email address, phone number)
• Booking information (preferred dates, charter type, number of guests)
• Dietary requirements and special requests
• Emergency contact information for safety purposes
• Payment information processed through secure third-party payment processors

We collect this information when you submit enquiries through our website contact form, communicate with us via email or phone, or complete a booking for charter services.

Our website uses cookies to improve user experience. For detailed information about our cookie usage, please see our Cookie Policy.

How We Use Your Information

Personal data collected is used for the following purposes:

• Processing and confirming charter bookings
• Communicating with you about your booking, including pre-departure information and any schedule changes
• Preparing vessels and crew for your charter, including arranging meals that accommodate dietary requirements
• Maintaining emergency contact information for safety during passages
• Processing payments and managing financial transactions
• Responding to enquiries about our services
• Improving our charter operations based on guest feedback
• Sending occasional updates about our services, if you have opted in to receive such communications

We do not use your personal information for automated decision-making or profiling.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contract performance: Processing is necessary to fulfil our charter services agreement with you
• Legitimate interests: We process data to operate our business, improve services, and maintain safety standards
• Legal obligations: We retain certain information to comply with Malaysian maritime and tax regulations
• Consent: For marketing communications, we rely on your explicit consent which can be withdrawn at any time

Data Sharing and Third Parties

We share personal information only when necessary to provide our services or comply with legal obligations. Third parties who may receive your data include:

• Payment processors: Secure third-party services that handle credit card and banking transactions
• Service providers: Companies that assist with website hosting, email communications, and booking management systems
• Crew and suppliers: Information necessary for charter operations, such as dietary requirements shared with onboard cooks or passenger counts for safety equipment preparation
• Maritime authorities: When required by law for safety reporting or regulatory compliance
• Insurance providers: In the event of incidents requiring insurance claims

All third parties are required to maintain appropriate security measures and use your data only for the specified purposes. We do not sell or rent personal information to third parties for marketing purposes.

Our website may contain links to external sites. We are not responsible for the privacy practices of these third-party websites.

Data Retention

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy:

• Booking information: Retained for 7 years to comply with Malaysian financial and tax record-keeping requirements
• Enquiry data: Deleted after 2 years if no booking is made
• Marketing consent: Maintained until you withdraw consent or after 3 years of inactivity
• Safety and incident records: Retained for 10 years in accordance with maritime industry standards

Data Security

We implement technical and organisational measures to protect personal data against unauthorised access, loss, or misuse:

• Encrypted transmission of data via SSL/TLS protocols on our website
• Secure storage of physical records in locked facilities
• Access controls limiting data access to authorised personnel only
• Regular security assessments and updates to our systems
• Staff training on data protection practices

While we take reasonable precautions, no method of transmission or storage is completely secure. We cannot guarantee absolute security but will notify you of any data breaches as required by law.

Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right to access: Request copies of the personal data we hold about you
• Right to correction: Request that we correct inaccurate or incomplete information
• Right to withdraw consent: Where we process data based on consent, you may withdraw it at any time
• Right to limit processing: Request that we limit how we use your data in certain circumstances
• Right to data portability: Request transfer of your data to another service provider where technically feasible
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes

To exercise these rights, contact us at [email protected]. We will respond to requests within 30 days.

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

Cookies and Tracking

Our website uses cookies to enhance user experience and analyse site usage. Cookies are small text files stored on your device.

We use the following types of cookies:

• Essential cookies: Necessary for website functionality and cannot be disabled
• Analytics cookies: Help us understand how visitors interact with our website
• Preference cookies: Remember your settings and preferences

For detailed information about cookies we use and how to manage them, please refer to our Cookie Policy.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it. Charter bookings for minors must be made by a parent or legal guardian.

International Data Transfers

Your personal data is primarily processed and stored in Malaysia. In limited circumstances, data may be transferred to service providers located outside Malaysia (such as cloud hosting services). Where such transfers occur, we ensure appropriate safeguards are in place to protect your information in accordance with Malaysian data protection laws.

Changes to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page indicates when the most recent revisions were made.

Significant changes will be communicated through a notice on our website or via email to active customers. Continued use of our services after changes take effect constitutes acceptance of the updated policy.

Contact Information

For questions, concerns, or requests regarding this privacy policy or how we handle your personal data, please contact: