Privacy Policy
Last Updated: January 20, 2026
Introduction
wandriira is committed to protecting your personal information and respecting your privacy. This policy explains how we collect, use, store, and protect data when you book our yacht charter services in Langkawi. By using our services or providing your information, you agree to the practices described in this document.
For questions about this policy, please contact us at [email protected]
Information We Collect
Personal Information
When you book a sailing experience or contact us for inquiries, we collect the following:
- Full name and contact information (phone number, email address)
- Mailing address for correspondence
- Emergency contact details (required for all voyages)
- Dietary requirements and preferences
- Health information relevant to sailing safety (such as motion sickness or mobility considerations)
- Payment details processed through secure payment providers
Automatically Collected Data
Our website collects certain information automatically through cookies and similar technologies. This includes IP addresses, browser type, device information, pages visited, and time spent on our site. For detailed information about our cookie practices, please review our Cookie Policy.
How We Use Your Information
We use collected data for the following purposes:
- Service Delivery: Processing bookings, coordinating voyage details, and communicating about your sailing experience
- Safety and Emergency Response: Maintaining emergency contact information and health considerations to ensure passenger safety
- Customer Communication: Responding to inquiries, providing voyage updates, and sending booking confirmations
- Payment Processing: Completing financial transactions through secure third-party payment processors
- Service Improvement: Analyzing feedback to enhance our offerings and customer experience
- Marketing Communications: Sending information about new services or special offers (only with your consent, and you may opt out at any time)
- Legal Compliance: Meeting regulatory requirements related to maritime operations and business licensing
Data Sharing and Third Parties
We do not sell your personal information to third parties. However, we may share data with:
- Service Providers: Payment processors, email service providers, and booking management systems that help us operate our business
- Maritime Authorities: When required by law for safety reporting or regulatory compliance
- Emergency Services: If necessary during a maritime emergency to ensure passenger safety
- Legal Requirements: If compelled by court order or legal process to disclose information
All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.
Data Retention
We retain your personal information for the following periods:
- Booking and payment records: 7 years (as required by Malaysian tax regulations)
- Marketing consent records: Until you withdraw consent or 3 years of inactivity
- Website analytics data: 24 months
- Emergency contact information: Deleted 30 days after voyage completion
After these periods, data is securely deleted or anonymized so it cannot identify you.
Data Protection Measures
We implement appropriate technical and organizational measures to protect your information:
- Encryption of data in transit using SSL/TLS protocols
- Secure storage systems with access controls
- Regular security audits and updates
- Staff training on data protection practices
- Passwords and authentication for system access
- Backup procedures to prevent data loss
While we take reasonable precautions, no internet transmission or electronic storage system is completely secure. We cannot guarantee absolute security but will notify you promptly if a data breach affects your information.
Your Rights
Under Malaysian data protection regulations, you have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Ask us to correct inaccurate or incomplete information
- Deletion: Request deletion of your data (subject to legal retention requirements)
- Objection: Object to processing of your data for marketing purposes
- Data Portability: Receive your data in a structured, commonly used format
- Withdraw Consent: Withdraw previously given consent for data processing
To exercise these rights, contact us at [email protected]. We will respond to your request within 30 days.
Cookies and Analytics
Our website uses cookies to improve functionality and analyze site usage. Cookies are small text files stored on your device. We use:
- Essential Cookies: Required for basic site functionality
- Analytics Cookies: Help us understand how visitors use our site
- Preference Cookies: Remember your settings and choices
You can control cookie settings through your browser preferences. For more detailed information, please see our Cookie Policy.
Children's Privacy
Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under 18 without parental consent. If you are a parent and believe your child has provided us with information, please contact us immediately so we can remove it.
International Data Transfers
Your data is primarily stored and processed in Malaysia. If we transfer data outside Malaysia, we ensure appropriate safeguards are in place, such as standard contractual clauses or data processing agreements that meet international protection standards.
Changes to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you by email (if you have provided one) or through a notice on our website. The "Last Updated" date at the top of this policy indicates when it was last revised.
Contact Information
For questions, concerns, or requests regarding your personal data or this privacy policy, please contact:
wandriira Privacy Officer
Email: [email protected]
Phone: +60 7-384 9216
Address: 15 Jalan Wong Ah Fook, 80000 Johor Bahru, Johor, Malaysia
If you are not satisfied with our response, you have the right to lodge a complaint with the Malaysian Personal Data Protection Commission.