Privacy Policy
Last Updated: 15 January 2026
1. Introduction
Cerulith ("we", "us", "our") is committed to handling personal data responsibly and transparently. This Privacy Policy describes how we collect, use, and safeguard information in connection with our yacht tour services and this website. We operate from 42 Jalan Tun Fuad Stephens, 88000 Kota Kinabalu, Sabah, Malaysia.
By submitting an enquiry or booking form on this site, you confirm that you have read and understood this policy.
2. Data We Collect
We collect personal information directly from you when you use our contact forms. This typically includes:
- Your name
- Email address
- Phone number (if provided)
- Message content relating to voyage enquiries
- Dietary or accessibility requirements shared voluntarily
We may also collect limited technical data via website analytics tools, including pages visited and browser type, for the purpose of improving our website's usability.
3. How We Use Your Data
Personal information is used exclusively for:
- Responding to voyage enquiries and booking requests
- Coordinating pre-departure logistics and guest preparation materials
- Accommodating dietary or accessibility requirements
- Sending confirmations or schedule updates relating to confirmed voyages
We do not use your data for marketing without explicit consent, and we do not share, sell, or transfer your personal information to third parties other than as described below.
4. Legal Basis for Processing
We process personal data on the following legal bases under Malaysia's Personal Data Protection Act 2010 (PDPA):
- Consent — when you voluntarily submit a form on this site
- Contractual necessity — when processing is required to fulfil a booking or enquiry you have initiated
- Legitimate interest — for website analytics that help us maintain and improve our service
5. Data Retention
Enquiry data is retained for up to 24 months after the last contact. Booking data may be retained for up to 5 years for financial and operational record-keeping. After these periods, data is deleted or anonymised.
6. Third-Party Services
We may use the following third-party services in connection with site operation and analytics:
- Google Analytics — aggregated website usage data
- Email service providers — for enquiry response delivery
These services operate under their own privacy frameworks. We do not pass personally identifiable information to advertising platforms.
7. Cookies
This site uses cookies for essential functionality and, with your consent, for analytics. You can manage your cookie preferences at any time via our Cookie Policy page.
8. Your Rights
Under Malaysia's PDPA, you have the right to:
- Access personal data we hold about you
- Request correction of inaccurate data
- Withdraw consent for data processing
- Request deletion of your data (subject to legal retention requirements)
To exercise any of these rights, please contact us at [email protected]. We will respond within 14 working days.
9. Data Security
We apply reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, or loss. Our website uses HTTPS encryption. Access to stored data is restricted to personnel who require it for operational purposes.
10. Children's Privacy
This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently done so, please contact us so we can address it promptly.
11. Third-Party Links
This site may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected by an updated "Last Updated" date at the top of this page. We encourage you to review this page periodically.
13. Contact
For any privacy-related questions or requests, please contact:
- Email: [email protected]
- Address: 42 Jalan Tun Fuad Stephens, 88000 Kota Kinabalu, Sabah, Malaysia