Privacy Policy

Introduction

Keelward ("we", "us", "our") takes the protection of your personal data seriously. This Privacy Policy explains how we collect, use, and safeguard information provided to us through our website and through enquiries or bookings made by phone or email.

This policy applies to personal data processed in connection with Keelward's yacht tour services, operated from 51 Jalan Dato Bandar Tunggal, 70000 Seremban, Negeri Sembilan, Malaysia.

If you have any questions about this policy, please contact us at [email protected].

What Data We Collect

We collect personal data only when you provide it voluntarily — through our enquiry form, by email, or by phone. The types of information we may collect include:

• Your full name
• Email address
• Phone number (if provided)
• Your message or enquiry content, including departure preferences and dietary requirements
• Technical information collected automatically via cookies — including your IP address, browser type, and pages visited (see our Cookie Policy)

We do not collect sensitive personal data such as financial details, national identification numbers, or health information unless specifically relevant to a booking and provided with your consent.

Legal Basis for Processing

We process your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). Our legal bases for processing are:

• Consent: You provide your data voluntarily when submitting an enquiry form or contacting us.
• Contractual necessity: Where data is required to fulfil a booking or confirm arrangements.
• Legitimate interests: For website analytics that help us improve the user experience, where these do not override your rights.

How We Use Your Data

We use personal data collected for the following purposes:

• Responding to enquiries about our yacht tour departures
• Confirming and managing tour bookings and arrangements
• Communicating schedule changes, weather updates, or rescheduling
• Sending booking confirmations and pre-departure information
• Improving our website and understanding how visitors use it (via aggregated analytics data only)

We do not use your data for automated decision-making or profiling. We do not send unsolicited marketing communications.

Data Sharing

We do not sell, rent, or trade your personal data with third parties. Your information may be shared with third-party service providers only where necessary to operate our services — for example, email hosting or website analytics tools — and only under appropriate data processing agreements.

Any analytics data shared is aggregated and does not identify you personally. We may disclose data where required by Malaysian law or regulatory authority.

Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include:

• Secure (HTTPS) transmission of data via our website
• Access controls limiting which team members can view personal enquiry data
• Regular review of data handling practices

In the event of a data breach that affects your rights, we will notify the affected individuals and, where required, the relevant Malaysian authority within the timeframe prescribed by law.

Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy. Enquiry data from guests who have not made a booking is typically deleted within six months. Booking-related data may be retained for up to three years for operational and legal purposes. Analytics data is held in aggregated, anonymised form indefinitely.

Cookies

Our website uses cookies to support basic functionality and, with your consent, to collect anonymised analytics data. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies that are required for the site to function cannot be disabled.

Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw your consent to processing at any time
• Request that we limit or cease processing your data
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days of receiving your request.

Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend that you review their individual privacy policies before providing any personal information.

Children's Privacy

Our website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has submitted data to us, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. Continued use of our website after changes are posted constitutes acceptance of the revised policy.

Contact for Data Enquiries

For any questions, requests, or concerns related to the handling of your personal data, please contact us at:

• Email: [email protected]
• Post: Keelward, 51 Jalan Dato Bandar Tunggal, 70000 Seremban, Negeri Sembilan, Malaysia