Privacy Policy
Last updated: 30 November 2025
Fishon.my ("Fishon", "we", "our", or "us") is operated by Kartel Motion Ventures (Business Registration No: 202203267096 (003441013-T)). We respect your privacy and are committed to protecting your personal information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our website, mobile app, or related services (collectively, the "Platform").
Information We Collect
We collect personal and non-personal data in the following ways. This section describes what you provide, what we collect automatically, and what we receive from third parties.
1.1Information You Provide
When you create an account, book a charter, or register as an operator, we may collect:
- Full name
- Email address
- Phone number
- Identification details (e.g., IC or license number)
- Business registration (SSM) or permit documents (for captains/operators)
- Payment information (e.g., transaction IDs, bank account for payouts)
- Any communications or feedback submitted to Fishon.my
1.2Automatically Collected Information
When you browse our website or app, we may automatically collect:
- Device and browser information
- IP address and geolocation data
- Access times and pages viewed
- Cookies and tracking data (see Section 8)
1.3Third-Party Data
We may receive information from:
- Payment gateways (e.g., SenangPay)
- Marketing partners or analytics tools
- Social login providers (Google, Facebook, Apple)
- Calendar services (Google Calendar) when you connect them
How We Use Your Information
We use your personal data to:
- Create and manage your Fishon.my account
- Facilitate booking and payment transactions
- Verify captain/operator eligibility and documentation
- Communicate important updates or promotional offers
- Improve our services and user experience
- Handle inquiries, complaints, or disputes
- Comply with legal or regulatory obligations
- Sync your availability with connected calendar services
We will only use your personal data for the purposes stated above or for purposes directly related to them.
Google Calendar Integration
Fishon.my offers optional Google Calendar integration for charter operators to sync their availability. This section explains how we handle your Google Calendar data.
3.1Data We Access
When you connect your Google Calendar, we request access to:
- View your calendars: To display a list of your calendars and let you choose which one to sync with
- View calendar events: To read event titles, dates, and times for import as blocked dates
- Create and modify events: To sync your blocked dates and bookings from Fishon to your Google Calendar
3.2How We Use This Data
- Display your blocked dates and bookings as events in your Google Calendar
- Import events from your Google Calendar as blocked dates on Fishon (with your explicit selection)
- Keep your Fishon calendar and Google Calendar synchronized
3.3Data Storage & Security
- We store OAuth tokens securely and encrypted in our database
- We do not store the content of your Google Calendar events beyond what is necessary for sync
- Access tokens are refreshed automatically and revoked when you disconnect
- Your Google Calendar data is never shared with third parties
3.4Revoking Access
You can disconnect Google Calendar at any time from your Fishon Captain dashboard. When you disconnect:
- We immediately revoke our access to your Google Calendar
- All stored OAuth tokens are deleted from our servers
- Events already synced to Google Calendar will remain (you can delete them manually)
- You can also revoke access directly from your Google Account permissions page
Data Sharing & Disclosure
We may share your information with:
- Operators (Captains/Charters): to process your booking and communicate trip details
- Payment Providers: to process transactions securely
- Marketing Partners: for advertising or promotional campaigns (with your consent)
- Law Enforcement or Regulators: if required by law or for fraud prevention
We will never sell your personal data to any third party. Your Google Calendar data is never shared with any third party and is used solely for the synchronization features you enable.
Data Retention
We retain your data only as long as necessary to fulfill the purposes outlined in this Policy, or as required by law. When your data is no longer needed, we will securely delete or anonymize it.
Data Security
We implement appropriate technical and organizational safeguards to protect your information against:
- Unauthorized access
- Accidental loss or damage
- Misuse or disclosure
Examples include encrypted payment processing, secure data transmission (HTTPS), and restricted staff access. However, no internet-based service can guarantee absolute security, and you agree to use the Platform at your own risk.
Your Rights
Under the Malaysian PDPA, you have the right to:
- Access your personal data held by us
- Correct any inaccurate or incomplete information
- Withdraw consent to data processing (which may affect your use of the Platform)
- Request deletion of your account and associated data
You may exercise these rights by contacting us at support@fishon.my. We may require verification to confirm your identity before processing such requests.
Third-Party Links
Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies separately.
International Data Transfer
Although Fishon.my primarily operates in Malaysia, certain data may be processed or stored on servers outside Malaysia by our trusted service providers. We take reasonable steps to ensure all such transfers comply with PDPA standards for data protection.
Updates to This Policy
We may revise this Privacy Policy from time to time. Any updates will be posted on this page with a new “Last Updated” date. Your continued use of the Platform after any changes constitutes your acceptance of the updated Policy.
Contact Us
Kartel Motion Ventures
Email: support@fishon.my
Note
This Privacy Policy is provided for transparency and does not constitute legal advice. For legal interpretation, please consult a qualified professional.