Legal
Privacy Policy
Last Updated: 10 January 2026 · Effective Date: 10 January 2026
Monsunai ("we", "us", "our") is committed to protecting the privacy of individuals who engage with our services, visit our website, or make enquiries about our yacht tours. This Privacy Policy explains what information we collect, how we use it, and what rights you have over your data. It applies to all personal data processed in connection with our operations in Malaysia.
1. Data Controller
The data controller for personal information collected through this website and in connection with our services is:
Monsunai
24 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-8471 2936
2. Personal Data We Collect
We collect personal data in the following ways:
Information you provide directly
- Name and email address submitted through our contact form
- Phone number, if provided voluntarily
- Message content relating to voyage enquiries
- Dietary requirements or accessibility needs communicated before a voyage
Information collected automatically
- Technical data such as browser type, IP address, and pages visited, collected through analytics cookies (with consent)
- Cookie preference data stored in your browser's local storage
We do not collect payment card information directly. Payment processing, if applicable, is handled by third-party payment providers.
3. Legal Basis for Processing
Under the Personal Data Protection Act 2010 (PDPA) of Malaysia, we process your personal data on the following grounds:
- Consent: Where you have submitted a form or accepted cookies
- Contractual necessity: To fulfil a voyage booking or respond to a service enquiry
- Legitimate interests: To improve our services and maintain records of past voyages for safety purposes
- Legal obligation: Where required by Malaysian law, including maritime safety regulations
4. How We Use Your Data
- To respond to enquiries submitted through our contact form
- To confirm and manage voyage bookings
- To communicate voyage details, scheduling updates, and safety information
- To maintain records required under Malaysian maritime law
- To improve the performance and usability of our website (analytics, with consent)
- To comply with legal obligations
We do not use your personal data for automated decision-making or profiling. We do not sell personal data to third parties.
5. Data Sharing
We share personal data only where necessary:
- With our crew and operational staff, who need voyage participant information for safety and logistics
- With analytics providers (e.g. Google Analytics) where you have consented to analytics cookies
- With payment processors, where applicable, in connection with booking transactions
- With government or regulatory authorities where required by Malaysian law
All third-party providers are required to handle personal data in accordance with applicable data protection standards.
6. Data Retention
We retain personal data for the following periods:
- Contact form enquiries: 12 months from the date of enquiry, unless a booking follows
- Booking records: 7 years, for legal and maritime compliance purposes
- Analytics data: As configured in the relevant analytics platform, typically 26 months
- Cookie preferences: Until cleared by you in your browser
7. Cookies
Our website uses cookies. Essential cookies operate without consent, as they are necessary for basic site function. Optional cookies (analytics, marketing, preference) require your consent. You can manage your preferences at any time on our Cookie Policy page.
8. Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption. Access to personal data within our organisation is limited to staff with a legitimate need.
In the event of a data breach that poses a risk to individuals, we will notify affected parties and relevant authorities in accordance with Malaysian PDPA requirements.
9. Your Rights
Under the Malaysian Personal Data Protection Act 2010, you have the following rights:
- The right to access personal data we hold about you
- The right to correct inaccurate or incomplete data
- The right to withdraw consent to processing (where consent is the legal basis)
- The right to request that we stop using your data for direct marketing
- The right to make a complaint to the Personal Data Protection Department of Malaysia
To exercise any of these rights, contact us at [email protected]. We will respond within 21 calendar days.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their policies independently.
11. Children's Privacy
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18 without parental or guardian consent. If you believe we have inadvertently collected such data, please contact us so we can remove it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised date. We encourage you to review this policy periodically.
13. Contact
For any questions about this Privacy Policy or how your personal data is handled, please contact:
Monsunai — Privacy Enquiries
Email: [email protected]
Phone: +60 3-8471 2936
Address: 24 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia