Privacy Policy

Introduction

cahayacrenas ("we", "us", "our") is committed to handling personal data responsibly and in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). This policy explains what data we collect, how we use it, and the rights you hold in relation to it. It applies to all individuals who interact with our services, including enquirers, booking contacts, and guests onboard our charters.

If you have questions about this policy or wish to exercise your rights, please write to: [email protected]

What Data We Collect

We collect personal data through our contact form, telephone enquiries, and email correspondence. The categories of data we may hold include:

• Full name and contact details (email address, phone number)
• Group size and occasion details provided during charter planning
• Dietary requirements or medical information shared voluntarily for onboard catering
• Booking history and payment records (processed through third-party payment providers)
• Website usage data collected via cookies and analytics tools (see Cookie section below)

We collect only the data necessary for the purpose stated. We do not collect data speculatively or for purposes beyond those described here.

How We Use Your Data

Personal data collected is used for the following purposes:

• Service delivery: Planning, coordinating, and operating your charter
• Communication: Responding to enquiries, confirming bookings, and providing pre-departure information
• Catering and crew briefing: Sharing relevant dietary or medical preferences with the onboard chef and crew, solely for your benefit
• Payment processing: Facilitating secure payment through our third-party payment provider
• Legal compliance: Retaining booking records as required under Singapore commercial law
• Service improvement: Analysing anonymised usage data to understand which charter options are most commonly enquired about

We do not use personal data for automated decision-making or profiling. We do not sell your data to third parties.

Legal Basis for Processing

Under Singapore's PDPA, we process personal data on the following bases:

• Consent: You provide data voluntarily when contacting us or making a booking
• Contractual necessity: Processing required to fulfil the charter agreement
• Legitimate interests: Maintaining records, improving our service, and communicating about bookings you have initiated
• Legal obligation: Retaining records as required by Singapore law

Retention Periods

We retain personal data for the following periods:

• Enquiry data (no booking made): up to 12 months from last contact
• Booking and guest records: 7 years from the charter date, as required for tax and legal purposes
• Payment records: as required by Singapore financial regulations
• Marketing preferences (where given): until withdrawn by the individual

After these periods, data is securely deleted or anonymised.

Data Sharing

We may share personal data with the following third parties, solely to facilitate the services you have requested:

• Onboard crew and catering staff: Name, group size, dietary requirements for charter day
• Payment processors: Name and contact details for payment authorisation (processed securely by the payment provider)
• Analytics providers: Anonymised usage data only (e.g., Google Analytics)
• Singapore authorities: If required by law or court order

We do not transfer personal data outside Singapore except where required by a payment processor operating internationally, in which case appropriate data transfer protections apply.

Data Protection Measures

We take the security of your personal data seriously. Measures in place include:

• HTTPS encryption on all website communications
• Access controls limiting data to staff who require it for their role
• Secure deletion procedures when data is no longer required
• Regular review of data handling practices

In the event of a data breach that is likely to affect individuals significantly, we will notify the affected parties and the Personal Data Protection Commission (PDPC) of Singapore as required.

Cookies

Our website uses cookies to operate correctly and to understand how it is being used. Essential cookies are required for basic site functionality and cannot be disabled. Optional analytics and marketing cookies require your consent, which you can manage via our Cookie Policy page.

Your Rights Under PDPA

Under Singapore's Personal Data Protection Act, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Withdrawal of consent: Withdraw consent for processing (where consent is the legal basis)
• Data portability: Request data in a portable format where technically feasible
• Lodge a complaint: Contact the PDPC at www.pdpc.gov.sg if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reading their respective policies before submitting personal data.

Minors

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 without the consent of a parent or legal guardian. If you believe we have received data from a minor without appropriate consent, please contact us promptly.

Policy Updates

We may update this policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page shows when the policy was last revised. Continued use of our services after any update constitutes acceptance of the revised terms.

Contact

For privacy-related enquiries, write to:

cahayacrenas
Data Protection Contact
60 Anson Road, #12-01, Mapletree Anson, Singapore 079914
Email: [email protected]