Privacy Policy

The enquiry form marks required fields with an asterisk. We need your name, email address, country, guest numbers, intended stay dates, room preference and diving interest so that we can identify your request, check the relevant arrangements and reply to you. We also require your acceptance of the reservation disclaimer and privacy acknowledgement before the form can be submitted.

• Required: your first and last name, email address and country;
• Required: your intended stay dates and the number of adults, children and toddlers travelling;
• Required: your villa preference and diving interest;
• Required: your acceptance of the reservation disclaimer and privacy acknowledgement; and
• Optional: your message and any dietary, accessibility, medical or other requirements you choose to share.

If you do not provide the required information and acknowledgements, we cannot submit or respond to the enquiry through this form. You do not need to provide an optional message. Please share sensitive information only when it is relevant to the arrangements you are requesting.

Please do not send payment-card, passport or other identity-document details through the enquiry form.

Our website and infrastructure may also process limited technical information needed to deliver and protect the Service, such as your IP address, browser and device information, request time, requested page, referring page and security or diagnostic events.

We may use personal data to:

• respond to and manage accommodation, diving and other resort enquiries;
• prepare availability information, quotations and arrangements you request;
• communicate with you about your enquiry or a resulting booking;
• operate, secure, troubleshoot and improve the Service;
• prevent abuse, fraud and unauthorised use; and
• meet legal, regulatory, accounting and dispute-resolution obligations.

Submitting an enquiry does not create or confirm a booking. Resort staff must confirm availability and the final quotation separately.

We may follow up about the enquiry or a resulting booking by email or through another contact method that you choose to use with the resort. We do not use the enquiry consent for unrelated marketing.

Personal data may be available to authorised resort staff and to service providers that support our website, hosting, security, enquiry delivery, email, data storage, backup or professional services. These providers should process personal data only as needed to provide their services or meet applicable legal obligations.

We may also disclose information when required by law, to respond to lawful requests from public authorities, to protect people or the Company’s rights and property, or in connection with a reorganisation, sale or transfer of the business. We do not sell personal data.

Successfully delivered enquiry records in our website enquiry-delivery system are scheduled for deletion 24 months after submission. Delivery records that require investigation may be retained while the issue is reviewed. Copies in staff email systems and records connected with a confirmed booking or transaction may be kept for different periods where reasonably necessary to provide the service, maintain appropriate business records, resolve disputes or meet legal obligations.

When personal data is no longer required, we will take reasonable steps to delete or anonymise it, subject to any incident, dispute, legal-hold or record-keeping requirement.

We use reasonable administrative and technical safeguards designed to protect personal data. No internet transmission or electronic storage system can, however, be guaranteed to be completely secure.

Some service providers or technical systems may process or store information outside Malaysia. Where this occurs, we take reasonable steps to require appropriate protection for the information in accordance with applicable law.

The Service uses a short-lived security token and browser-side state to protect the enquiry form and preserve an unfinished enquiry while you navigate the website. It also uses limited local browser storage to remember whether a navigation hint has been dismissed. These functions do not require advertising or analytics cookies.

Some Location and Contact pages directly embed Google Maps. When you visit a page containing an embedded map, your browser connects to Google and may send technical information such as your IP address, browser details and the page you are viewing. Google handles that information under its own privacy terms.

Some Dive Sites pages directly embed YouTube videos using YouTube’s privacy-enhanced domain. The historical blog archive uses a click-to-load video treatment and does not connect to YouTube until you choose to load a video. When a YouTube player is loaded, Google may still receive technical information and set or access storage according to its own practices.

You can review Google’s Privacy Policy (opens in a new tab) for information about Google Maps and YouTube processing.

The enquiry form is intended to be completed by an adult. It asks only for the number of children and toddlers travelling, not their names. Please do not submit a child’s personal data unless it is necessary for the enquiry and you are authorised to provide it.

Subject to applicable law, you may ask us about personal data we hold about you, request access or correction, withdraw consent where processing relies on consent, or ask us to delete information that we no longer need to retain. We may need to verify your identity before acting on a request, and some legal or operational exceptions may apply.

Our website may link to services operated by other organisations. Their privacy practices are governed by their own policies, and we are not responsible for their websites or services.

We may update this Privacy Policy when our practices, services or legal obligations change. The revised version will be posted on this page with an updated date.

For privacy questions or requests, contact Sipadan Pom Pom Resort & Tours Sdn Bhd at contact@pompomisland.com or write to A-2-1, Karamunsing Capital, Lorong Kapital, Block A, 2nd Floor, 88000 Kota Kinabalu, Sabah, Malaysia.