Privacy Policy – ooceandi

1. Introduction

ooceandi ("we", "us", "our") is committed to protecting your personal data. This policy explains how we collect, use, store, and share information when you interact with our website at ooceandi.live or enquire about our yacht tour services.

This policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia. If you have questions about how we handle your data, contact us at [email protected].

2. Data We Collect

We collect only the information necessary to respond to your enquiry and arrange your tour:

Contact details: name, email address, phone number
Enquiry content: tour preferences, dietary requirements, group details shared in your message
Technical data: browser type, IP address, pages visited — collected via analytics cookies if consented

We do not collect payment information through this website. No payment is processed here.

3. How We Use Your Data

To respond to your enquiry and provide information about tours
To arrange and manage a booking once confirmed
To accommodate dietary requirements or other arrangements on board
To comply with legal obligations under Malaysian law
To improve our website using aggregated, anonymised analytics data (only if you consent to analytics cookies)

We do not use your personal information for marketing unless you have explicitly requested to be kept informed.

4. Legal Basis for Processing

Under the PDPA 2010, we process your data on the following bases:

Consent: when you submit our enquiry form
Contract: when processing is necessary to fulfill a booking
Legal obligation: when required by Malaysian law

5. Data Retention

Enquiry data is retained for up to 12 months from the date of last contact if no booking is confirmed. Booking records are retained for 7 years to comply with Malaysian accounting and legal requirements. Analytics data is anonymised and retained for up to 26 months.

6. Data Sharing

We do not sell your personal data. We may share information with:

Our crew, where relevant to on-board arrangements (e.g., dietary requirements)
Analytics providers (e.g., Google Analytics) where cookies are consented to
Regulatory authorities if required by Malaysian law

7. Data Security

We use standard security measures including SSL encryption on this website, restricted access to personal data, and regular review of our data handling practices. No system is completely secure, but we take reasonable steps to protect information entrusted to us. In the event of a data breach affecting your rights, we will notify you as required by Malaysian law.

8. Cookies

This website uses cookies. Essential cookies are required for basic website function. Analytics and other optional cookies are only used with your consent. See our Cookie Policy for full details and preference controls.

9. Your Rights

Under the PDPA 2010, you have the right to:

Request access to the personal data we hold about you
Request correction of inaccurate or incomplete data
Withdraw consent for data processing at any time
Request that we stop processing your data for certain purposes
Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, contact us at [email protected].

10. External Links

This website may contain links to third-party sites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site you visit.

11. Children

Our website is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.

12. Policy Updates

This policy may be updated periodically. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our website after updates constitutes acceptance of the revised policy.

13. Contact

Data controller: ooceandi

29 Jalan Tun Sri Lanang, 80000 Johor Bahru, Johor, Malaysia

Email: [email protected]