Privacy Policy

We collect personal information necessary to provide and improve our kayaking expedition services:

• Contact Information: Name, email address, phone number, mailing address
• Booking Details: Expedition selection, dates, group size, special requirements
• Emergency Information: Emergency contact details, medical conditions relevant to kayaking safety
• Payment Information: Billing address and payment details (processed through secure third-party payment processors)
• Communication Records: Correspondence via email, phone, or contact forms
• Website Usage Data: IP address, browser type, pages visited, time spent on pages (collected via cookies and analytics tools)

We process your personal data for the following purposes:

• Service Delivery: Processing bookings, coordinating expeditions, and communicating trip details
• Safety Management: Maintaining emergency contact information and medical awareness for participant safety
• Payment Processing: Handling financial transactions related to expedition bookings
• Customer Communication: Responding to inquiries, providing expedition updates, and sending booking confirmations
• Service Improvement: Analyzing website usage and gathering feedback to enhance our offerings
• Marketing: Sending information about new expeditions or services (only with your consent, and you may opt out at any time)
• Legal Compliance: Meeting legal obligations under Malaysian law and maintaining business records

We process your personal data based on:

• Contract Fulfillment: Processing necessary to deliver the kayaking services you have booked
• Consent: Marketing communications and optional data collection where you have provided explicit consent
• Legitimate Interests: Operating our business, improving services, and ensuring safety
• Legal Obligation: Compliance with Malaysian Personal Data Protection Act 2010 and other applicable regulations

We share your information only when necessary with:

• Service Providers: Accommodation partners, transportation providers, and equipment suppliers necessary for expedition delivery
• Payment Processors: Secure payment gateways that handle transaction processing
• Analytics Providers: Google Analytics to understand website usage patterns
• Emergency Services: Medical or rescue services in the event of an emergency during expeditions
• Legal Authorities: When required by law or to protect safety

We do not sell your personal information to third parties. All service providers are contractually bound to protect your data and use it only for specified purposes.

We retain your personal information for the following periods:

• Booking Records: 7 years for accounting and legal compliance purposes
• Emergency Contact Information: Duration of the expedition plus 1 year
• Marketing Communications: Until you opt out or 3 years of inactivity
• Website Analytics: 26 months (Google Analytics default retention)

After retention periods expire, personal data is securely deleted or anonymized.

We implement appropriate technical and organizational measures to protect your data:

• SSL/TLS encryption for data transmission on our website
• Secure storage of physical and electronic records with access controls
• Regular security assessments and updates to our systems
• Staff training on data protection and confidentiality
• Secure payment processing through PCI DSS compliant processors
• Regular backups with encrypted storage

Under Malaysian data protection law, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing at any time (where consent is the legal basis)

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Our website uses cookies and similar technologies:

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
• Marketing Cookies: Used to deliver relevant advertisements (only with your consent)

You can manage your cookie preferences through our Cookie Policy page and your browser settings.

Some of our service providers (such as cloud hosting and analytics services) may process data outside of Malaysia. When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions. Your data receives the same level of protection regardless of where it is processed.

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal information from children under 18 without parental consent. If you are booking an expedition that includes minors, the adult making the booking must provide necessary information and consent on their behalf.

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy regularly. Continued use of our services after changes indicates acceptance of the updated policy.

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

Email: [email protected]

Address: Horizique, 48 Persiaran Gurney, 10250 Penang, Malaysia

If you are not satisfied with our response, you have the right to lodge a complaint with Malaysia's Personal Data Protection Department.