Privacy Policy

1. Introduction

windloyna ("we," "our," or "us") operates yacht charter services from Penang, Malaysia. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our services or interact with our website. We are committed to handling your personal data responsibly and in compliance with applicable Malaysian data protection regulations.

By using our services or providing us with your personal information, you consent to the collection, use, and disclosure of your information as described in this policy. If you have questions or concerns, contact us at [email protected].

2. Information We Collect

Personal Information:

When you book a charter or submit an inquiry, we collect: name, email address, phone number, mailing address, and any other information you provide voluntarily (such as medical conditions, dietary requirements, or emergency contact details). This information is necessary to arrange charters, communicate with you, and ensure safety during operations.

Automatically Collected Information:

Our website may collect technical information automatically, including IP address, browser type, device information, and pages visited. This data helps us understand how visitors use our site and improve our services. We may use cookies and similar tracking technologies for this purpose.

Payment Information:

We collect payment details necessary to process charter bookings. Financial information is processed securely through third-party payment processors, and we do not store complete credit card numbers on our systems.

3. How We Use Your Information

We use collected information for the following purposes:

• Processing and managing charter bookings
• Communicating about your charter, including confirmations, schedule changes, and weather updates
• Responding to inquiries and providing customer support
• Ensuring safety and emergency response capabilities during charters
• Improving our services and website functionality
• Complying with legal obligations and regulatory requirements
• Sending occasional updates about our services (you may opt out at any time)

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: We may share information with third-party service providers who assist with payment processing, website hosting, or other operational functions. These providers are contractually obligated to protect your information and use it only for specified purposes.
• Legal Requirements: We may disclose information when required by Malaysian law, regulation, or legal process, or when necessary to protect our rights, property, or safety, or that of others.
• Emergency Situations: In case of medical emergencies during charters, we may share relevant health information with medical professionals or authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include secure servers, encryption of sensitive data during transmission, access controls, and regular security assessments.

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Booking information and related correspondence are typically retained for seven years for operational and regulatory compliance purposes. After this period, personal data is securely deleted or anonymized.

7. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyze site usage. Cookies are small text files stored on your device that help us remember your preferences and understand how visitors interact with our site.

You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of certain website features. For detailed information about our cookie usage, please see our Cookie Policy.

8. Your Rights

Under applicable Malaysian data protection regulations, you have the following rights:

• Access: You may request access to the personal information we hold about you.
• Correction: You may request correction of inaccurate or incomplete personal information.
• Deletion: You may request deletion of your personal information, subject to legal retention requirements.
• Objection: You may object to certain processing of your personal information.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw that consent at any time.
• Data Portability: You may request a copy of your personal information in a structured, commonly used format.

To exercise these rights, contact us at [email protected]. We will respond to your request within 30 days.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can delete such information.

10. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. International Data Transfers

Our operations are primarily based in Malaysia. If you are accessing our services from outside Malaysia, please be aware that your information may be transferred to and processed in Malaysia, where data protection laws may differ from those in your jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will post the updated policy on our website with a revised "Last Updated" date. Significant changes will be communicated via email to registered users or through a prominent notice on our website.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: