Privacy Policy

1. Introduction

Marezure ("we", "us", "our") is committed to handling the personal information of guests and website visitors with care and transparency. This policy describes what data we collect, how we use it, and what rights you have in relation to it. Marezure operates from 38 Jalan Padungan, 93100 Kuching, Sarawak, Malaysia, and is subject to the Personal Data Protection Act 2010 (PDPA) of Malaysia.

For questions about this policy, contact us at [email protected].

2. Data We Collect

Information you provide directly:

• Full name and email address (from contact and booking enquiries)
• Phone number (optional, when provided)
• Dietary requirements and accessibility needs (when disclosed during booking)
• Communication content (messages sent through our contact form)

Information collected automatically:

• IP address and browser type (via server logs)
• Pages visited and time spent on site (via analytics cookies, if consented)
• Device type and operating system

Legal basis for processing:

We process personal data on the basis of your consent (for analytics cookies and marketing), on the basis of contract performance (for booking coordination), and on the basis of legitimate interest (for safety and legal compliance).

3. How We Use Your Data

• To respond to enquiries and coordinate charter bookings
• To manage dietary and accessibility requirements for your voyage
• To send booking confirmations and pre-voyage information
• To improve our website through aggregated analytics (if consented)
• To comply with Malaysian maritime and tourism regulatory requirements

We do not use personal data for automated decision-making. We do not sell personal data to third parties.

4. Data Retention

Enquiry and booking records are retained for a period of three years following the last interaction. Safety and voyage logs are retained for seven years in accordance with Malaysian Marine Department requirements. Analytics data is aggregated and anonymised after thirteen months.

5. Data Sharing

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers: Website hosting and email service providers who process data on our behalf under data processing agreements
• Regulatory requirements: Malaysian Marine Department (APMM) voyage logs as required by law
• Analytics: Aggregated, anonymised data may be processed by analytics tools (Google Analytics) if you have consented to analytics cookies

6. Cookies

We use cookies to understand how visitors use our website and to remember preferences. Essential cookies are necessary for the site to function and cannot be disabled. Analytics and preference cookies are optional and require your consent. See our Cookie Policy for full details and preference management.

7. Data Protection Measures

• Website connections encrypted via HTTPS/TLS
• Access to personal data restricted to staff who require it for booking coordination
• Email systems protected with industry-standard authentication
• No storage of payment card data (payments are handled separately through licensed payment processors)

In the event of a data breach affecting your personal information, we will notify you and the relevant Malaysian authority (the Personal Data Protection Commissioner) in accordance with PDPA requirements.

8. Your Rights Under PDPA Malaysia

Under the Personal Data Protection Act 2010, you have the following rights:

• Right of access: Request a copy of personal data we hold about you
• Right of correction: Request correction of inaccurate or incomplete data
• Right to withdraw consent: Withdraw consent for optional processing at any time
• Right to prevent processing for direct marketing: Opt out of any marketing communications

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external sites, including Sarawak Tourism Board, Bako National Park information, and Malaysian Marine Department pages. We are not responsible for the privacy practices of external sites and encourage you to read their policies separately.

10. Children's Privacy

Our booking and enquiry services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18 without the consent of a parent or guardian.

11. Changes to This Policy

We may update this policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Continued use of our website following updates constitutes acceptance of the revised policy.

12. Contact

For data protection enquiries: [email protected]

Marezure · 38 Jalan Padungan · 93100 Kuching · Sarawak · Malaysia