Privacy Policy

Introduction

Cerulean Bow is committed to protecting the privacy and security of personal information provided to us. This Privacy Policy explains how we collect, use, store, and protect information obtained through our yacht charter booking process and website interactions.

By using our services or website, you consent to the data practices described in this policy. If you have questions or concerns about how we handle your information, please contact us at [email protected].

Information We Collect

Personal Information Provided Directly

When you book a charter or contact us for information, we collect:

• Full name and contact details (email address, phone number)
• Billing and payment information for charter reservations
• Dietary requirements, accessibility needs, or other special requests
• Emergency contact information for multi-day charters
• Communication preferences for booking confirmations and updates

Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and geographic location data
• Browser type, operating system, and device information
• Pages visited, time spent on each page, and navigation patterns
• Referral source (how you arrived at our website)

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. For detailed information about our cookie usage, please refer to our Cookie Policy.

How We Use Your Information

We process your personal information for the following purposes:

Charter Service Delivery

• Processing and confirming charter bookings
• Coordinating vessel, crew, and provisioning arrangements
• Communicating departure times, weather updates, and route changes
• Accommodating dietary restrictions and special requirements
• Maintaining emergency contact information during charters

Business Communications

• Responding to inquiries about charter availability and pricing
• Sending booking confirmations and pre-charter information
• Providing post-charter follow-up and feedback requests
• Sharing operational updates that may affect scheduled charters

Legal and Safety Obligations

• Complying with maritime safety regulations and reporting requirements
• Maintaining records as required by Malaysian Marine Department
• Processing payments and maintaining financial records for tax purposes
• Addressing legal claims or regulatory inquiries if they arise

Service Improvement

• Analyzing booking patterns to optimize vessel scheduling
• Understanding guest preferences to refine charter offerings
• Identifying operational improvements based on feedback
• Enhancing website functionality and user experience

Information Sharing and Disclosure

Third-Party Service Providers

We share information with third parties only when necessary to deliver our services:

• Payment processors for secure transaction handling
• Provisioning suppliers when fulfilling dietary requirements
• Insurance providers when filing claims or maintaining coverage
• Website hosting and analytics services

These third parties are contractually obligated to protect your information and use it only for the specified purposes.

Legal Requirements

We may disclose personal information when required by law, including:

• Responding to court orders, subpoenas, or legal processes
• Cooperating with maritime safety investigations
• Protecting the rights, property, or safety of Cerulean Bow, our guests, or others
• Complying with Malaysian data protection and maritime regulations

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

Data Security

We implement reasonable security measures to protect personal information from unauthorized access, alteration, disclosure, or destruction:

• Encrypted transmission of payment information through secure protocols
• Access controls limiting staff access to personal data on a need-to-know basis
• Regular security assessments of our systems and processes
• Secure storage of physical records containing personal information

However, no method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations:

• Booking and payment records: Retained for seven years for tax and accounting purposes
• Safety and incident reports: Retained in accordance with maritime regulations
• Marketing communications preferences: Retained until you request removal
• Website analytics data: Retained in aggregated form for up to two years

Once retention periods expire, we securely delete or anonymize personal information.

Your Rights

Under Malaysian Personal Data Protection Act (PDPA), you have the following rights regarding your personal information:

Right to Access

You may request a copy of the personal information we hold about you. We will provide this within thirty days of your request, subject to identity verification.

Right to Correction

If your personal information is inaccurate or incomplete, you may request that we update or correct it.

Right to Withdraw Consent

You may withdraw consent for marketing communications at any time by contacting us or using the unsubscribe link in our emails. Note that withdrawal of consent does not affect processing required for charter service delivery or legal obligations.

Right to Data Portability

You may request your personal information in a structured, commonly used format for transfer to another service provider, where technically feasible.

Right to Lodge a Complaint

If you believe we have not handled your personal information appropriately, you may lodge a complaint with the Personal Data Protection Department of Malaysia.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty days.

Children's Privacy

Our services are not directed to individuals under the age of eighteen. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately so we can delete such information.

International Data Transfers

Your information is processed and stored primarily in Malaysia. If we transfer information to third parties located outside Malaysia, we ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we will update the "Last Updated" date at the top of this page and may notify you via email if you have an active booking or have subscribed to communications.

We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Information

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: