Privacy Policy

1. Introduction

Brine Compass ("we," "our," or "us") operates yacht charter services in Langkawi, Malaysia. This Privacy Policy explains how we collect, use, disclose, and protect personal information obtained through our website and booking services.

We are committed to protecting your privacy and complying with the Personal Data Protection Act 2010 (PDPA) of Malaysia. If you have questions about this policy, contact us at [email protected].

2. Information We Collect

2.1 Personal Information

We collect the following personal data when you make a booking inquiry or reservation:

• Name and contact details (email address, phone number)
• Booking preferences and special requirements
• Payment information (processed through secure third-party payment processors)
• Emergency contact information for safety purposes

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on our site
• Referring website addresses
• Cookie data (see our Cookie Policy for details)

3. How We Use Your Information

We use your personal data for the following purposes:

• Service Delivery: To process bookings, coordinate charters, and provide customer support
• Communication: To send booking confirmations, updates, and respond to inquiries
• Safety: To maintain emergency contact information during charters
• Legal Compliance: To meet regulatory requirements and maintain records
• Improvement: To analyze service usage and improve our offerings
• Marketing: To send promotional communications (with your consent, which can be withdrawn)

4. Legal Basis for Processing

We process your personal data based on:

• Contract Performance: Processing necessary to fulfill charter bookings
• Consent: For marketing communications and optional services
• Legitimate Interests: For service improvement and business operations
• Legal Obligations: To comply with Malaysian maritime and business regulations

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Payment processors, booking systems, and IT service providers
• Maritime Authorities: When required by law or for safety investigations
• Insurance Providers: In case of incidents requiring claims processing
• Legal Requirements: When compelled by court order or regulatory authority

We do not sell or rent your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Secure encrypted connections (SSL/TLS) for data transmission
• Access controls limiting staff access to personal data
• Regular security assessments and updates
• Secure data storage with backup systems
• Staff training on data protection practices

While we take reasonable precautions, no method of transmission over the internet is completely secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your personal data for the following periods:

• Booking Records: 7 years (as required by Malaysian maritime regulations)
• Marketing Communications: Until you withdraw consent or 3 years of inactivity
• Website Analytics: 24 months
• Financial Records: 7 years (as required by Malaysian tax laws)

After these periods, we securely delete or anonymize your data.

8. Your Rights

Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, you have the following rights:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Withdrawal of Consent: Withdraw consent for processing (where applicable)
• Data Portability: Request your data in a structured, commonly used format
• Limitation: Request limitation of processing in certain circumstances

To exercise these rights, contact us at [email protected]. We will respond within 21 days.

9. Cookies

We use cookies and similar technologies to improve your experience on our website. For detailed information about our cookie usage, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have collected data from a minor, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending an email to registered users. The "Last Updated" date at the top of this policy indicates when it was last revised.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you believe your data protection rights have been violated, you may lodge a complaint with the Personal Data Protection Department of Malaysia.