Legal
Privacy Policy
Last Updated: 14 March 2026 · Effective Date: 14 March 2026
ombakstena ("we", "our", or "us") is committed to handling personal information responsibly. This policy explains what information we collect, how we use it, who we share it with, and what rights you have in relation to your data. It applies to visitors of our website and guests who enquire about or book charter experiences with us.
1. Who We Are
ombakstena is a private yacht charter company registered in Singapore. Our principal place of business is 3 HarbourFront Place, #02-07, Singapore 099254. For privacy-related questions, contact us at [email protected].
2. What Personal Data We Collect
We collect personal data in the following circumstances:
- Enquiry and booking forms: name, email address, phone number, and the content of your message
- Charter planning: dietary requirements, group composition (including ages of minors, where relevant), occasion details, and any special requests you share with us
- Website analytics: IP address, browser type, pages visited, and session duration (via cookies, with your consent)
- Marketing communications: email address, if you opt in
We do not collect payment card data directly. Any payment processing is handled by third-party providers who are PCI-DSS compliant.
3. Legal Basis for Processing
Under Singapore's Personal Data Protection Act 2012 (PDPA), we process personal data on the following bases:
- Contract performance: to manage your booking and deliver the charter service
- Legitimate interests: to respond to enquiries, improve our services, and manage our business operations
- Consent: for marketing communications and optional analytics cookies — you may withdraw consent at any time
- Legal obligation: where required by Singapore law, including maritime safety regulations
4. How We Use Your Data
- Responding to charter enquiries and confirming bookings
- Planning the catering, logistics, and experience for your charter
- Sending pre-charter information and post-charter follow-up
- Complying with MPA and maritime safety requirements
- Improving our website and understanding how visitors use it
- Sending marketing communications (only with your explicit consent)
5. Data Sharing
We do not sell or rent personal data to third parties. We may share data with:
- Service providers: catering suppliers, photographers, and florists engaged for your specific charter — only the information necessary for them to perform their role
- Analytics providers: such as Google Analytics, under data processing agreements
- Regulatory authorities: where required by Singapore law or MPA requirements
6. Data Retention
We retain personal data for the following periods:
- Booking and charter records: 7 years, in line with Singapore commercial record-keeping requirements
- Enquiries that did not result in a booking: 12 months
- Marketing consent and communication records: until withdrawal of consent, plus 12 months
- Website analytics data: 26 months (Google Analytics default)
7. Cookies
Our website uses cookies to function and to understand how it is used. Essential cookies are always active. Analytics and marketing cookies are only placed with your consent. You can manage your cookie preferences at any time via our Cookie Policy page.
8. Data Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and loss. These include:
- HTTPS encryption on our website
- Access controls limiting who within our team can view personal data
- Regular review of security practices
- Prompt notification to affected individuals in the event of a data breach, in accordance with PDPA obligations
9. Your Rights
Under Singapore's PDPA, you have the right to:
- Request access to the personal data we hold about you
- Correct inaccurate or incomplete personal data
- Withdraw consent for marketing or optional processing at any time
- Request deletion of personal data, subject to legal retention obligations
- Lodge a complaint with the Personal Data Protection Commission (PDPC) if you believe your rights have been infringed
To exercise any of these rights, contact us at [email protected]. We will respond within 10 business days.
10. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
11. Children
Our services are intended for adults aged 18 and over. If a booking involves minors, the booking must be made by a responsible adult. We do not knowingly collect personal data directly from children under 18.
12. Changes to This Policy
We may update this policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Continued use of our website or services after an update constitutes acceptance of the revised policy.
13. Contact
For any privacy-related questions or requests:
- Email: [email protected]
- Address: 3 HarbourFront Place, #02-07, Singapore 099254