Data We Collect

Personal data collected through bolizenoar.world falls into two categories: information you provide directly through forms and enquiry submissions, and information collected automatically through your browser interaction with the site. Both categories are documented below. We collect only the minimum data necessary to fulfil the stated purpose for each collection point. No data is collected passively without a corresponding functional or analytical purpose disclosed in this policy.

Data Sharing Practices

Bolizenoar does not sell personal data to third parties. Data sharing occurs only in the three categories documented below: with service providers who support the technical operation of this site, in response to verified legal obligations, and in anonymised statistical form for site performance analysis. All third-party service providers engaged by Bolizenoar are required to handle personal data in a manner consistent with the Personal Data Protection Act 2010 of Malaysia and applicable international data protection standards.

Your Data Rights

Under the Personal Data Protection Act 2010 of Malaysia, individuals whose personal data is held by Bolizenoar have the rights documented below. Requests to exercise any of these rights should be submitted via the contact form on this website with sufficient detail to allow accurate identification of the data in question. Bolizenoar will respond to verified rights requests within a reasonable timeframe and no later than the period specified under applicable Malaysian law.

• • Right to request access to all personal data held by Bolizenoar about you.
• • Right to request correction of any inaccurate or incomplete personal data we hold.
• • Right to request erasure of your personal data where no lawful basis for retention applies.
• • Right to receive your personal data in a structured, commonly used format for transfer.
• • Right to object to processing of your data carried out under legitimate interest grounds.
• • Right to request restriction of processing while a rectification or objection request is assessed.

Data Retention Periods

Personal data collected through bolizenoar.world is retained only for the period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable Malaysian law. Retention periods are documented by data category below. Data that is no longer required for its stated purpose and for which no legal retention obligation applies is securely deleted or anonymised within a reasonable period following the end of the retention window.

• • Enquiry and contact form data retained for up to two years from the date of submission.
• • Site analytics data retained in anonymised aggregate form for up to twenty-four months from collection.
• • Email correspondence related to cruise enquiries retained for up to three years from final communication.
• • Booking-related financial reference data retained for seven years under Malaysian tax and commercial law.
• • Newsletter subscription data retained until consent is withdrawn or a deletion request is submitted.

Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data derived from personal data may be retained beyond the stated retention period as it no longer constitutes personal data under the Personal Data Protection Act 2010 of Malaysia. Requests for early deletion may be submitted via the contact form on this site.

International Data Transfers

Certain third-party service providers engaged by Bolizenoar operate infrastructure outside Malaysia. Where personal data is transferred to a jurisdiction outside Malaysia, Bolizenoar ensures that appropriate safeguards are in place to protect that data at a standard consistent with the Personal Data Protection Act 2010. Transfers are only made to service providers who have committed to equivalent data protection standards through contractual or regulatory mechanisms recognised under Malaysian law.

• • Data transfers to third-party analytics providers are governed by contractual data processing agreements specifying protection standards.
• • Communication platform providers operating outside Malaysia are required to apply encryption in transit and at rest for all personal data.
• • No personal data is transferred to jurisdictions with materially weaker data protection frameworks without documented safeguard mechanisms.
• • Transfers are limited to the minimum data necessary for the third-party provider to perform its contracted technical function.

Changes to This Policy

Bolizenoar reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Malaysian law, or regulatory guidance. Updated versions will be published on this page with a revised effective date. Where changes are material, Bolizenoar will take reasonable steps to notify affected users through the communication channels available. Continued use of bolizenoar.world following publication of a revised policy constitutes acknowledgement of the updated terms.

• • Updated policy version published on this page with a clearly displayed revised effective date.
• • Email notification sent to newsletter subscribers where changes affect the processing of subscriber data.
• • Site banner notification displayed for a defined period following publication of any material policy amendment.
• • Contact form users notified by email where changes materially affect how their submitted enquiry data is processed.

Bolizenoar recommends reviewing this Privacy Policy periodically to remain informed of current data processing practices. The effective date displayed at the top of this page identifies the version currently in force. Prior versions of this policy are available on request via the contact form on bolizenoar.world.