Privacy policy

What we collect

When you book, we collect the booker's name, phone number and email, the booking details and, if you pay by bank transfer, the receipt you upload. Before the trip each participant gives their name, date of birth, ID or passport number and an emergency contact, for the insurance declaration and the waiver. We also keep the messages you exchange with us on WhatsApp and a record of how you found us, for example a link from an advertisement.

Why we use it

To run your booking and keep you informed about it (confirmation, reminders, changes); to declare participants to our insurer; to meet safety and legal requirements; to process payments and refunds; and to understand which of our advertising works. If you started a booking but did not finish it, we may send you one WhatsApp message about it. Promotional messages go only to past customers, and you can stop them at any time by replying STOP.

Who sees it

Our staff and crew, as needed for your trip. Our insurer, for the participant declaration. Stripe, which processes card payments; we never see your card number. Meta, which carries our WhatsApp messages. Our hosting provider, which runs the system from a data centre in Singapore. We do not sell personal data and we do not share it with other businesses for their marketing.

How we protect it

ID and passport numbers are stored encrypted. The back office is limited to staff with a login, and crew see only the trips they run. The site uses HTTPS throughout.

How long we keep it

Booking and payment records are kept for as long as Malaysian tax and company law requires. Participant ID and passport numbers are kept only as long as needed for the insurance declaration of that trip and then deleted. You can ask us to delete your contact details earlier; see your rights below.

Cookies

The site uses a session cookie to keep your booking in progress and, if you arrived from an advertisement, remembers that link so the booking can be attributed to it. After you book, a cookie keeps the name, phone number and email you typed for one year, so your next booking form is already filled in; clearing your browser's cookies removes it. We do not use third-party tracking cookies.

Your rights

Under the Personal Data Protection Act 2010 you may ask to see, correct or delete the personal data we hold about you, or withdraw your consent to promotional messages. Write to admin@promarktravel.com and we will respond within 21 days.

Who is responsible

Promark Powersports (M) Sdn. Bhd. for jet ski bookings and Promark Global Tour & Travel Sdn. Bhd. for cruise bookings, both at Senibong Cove Marina, Johor Bahru. Last updated 6 October 2026.