Legal

Privacy Policy

Last Updated: 15 January 2026

1. Introduction

Cerulith ("we", "us", "our") is committed to handling personal data responsibly and transparently. This Privacy Policy describes how we collect, use, and safeguard information in connection with our yacht tour services and this website. We operate from 42 Jalan Tun Fuad Stephens, 88000 Kota Kinabalu, Sabah, Malaysia.

By submitting an enquiry or booking form on this site, you confirm that you have read and understood this policy.

2. Data We Collect

We collect personal information directly from you when you use our contact forms. This typically includes:

We may also collect limited technical data via website analytics tools, including pages visited and browser type, for the purpose of improving our website's usability.

3. How We Use Your Data

Personal information is used exclusively for:

We do not use your data for marketing without explicit consent, and we do not share, sell, or transfer your personal information to third parties other than as described below.

4. Legal Basis for Processing

We process personal data on the following legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA):

5. Data Retention

Enquiry data is retained for up to 24 months after the last contact. Booking data may be retained for up to 5 years for financial and operational record-keeping. After these periods, data is deleted or anonymised.

6. Third-Party Services

We may use the following third-party services in connection with site operation and analytics:

These services operate under their own privacy frameworks. We do not pass personally identifiable information to advertising platforms.

7. Cookies

This site uses cookies for essential functionality and, with your consent, for analytics. You can manage your cookie preferences at any time via our Cookie Policy page.

8. Your Rights

Under Malaysia's PDPA, you have the right to:

To exercise any of these rights, please contact us at [email protected]. We will respond within 14 working days.

9. Data Security

We apply reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. Our website uses HTTPS encryption. Access to stored data is restricted to personnel who require it for operational purposes.

10. Children's Privacy

This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently done so, please contact us so we can address it promptly.

11. Third-Party Links

This site may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by an updated "Last Updated" date at the top of this page. We encourage you to review this page periodically.

13. Contact

For any privacy-related questions or requests, please contact: