Last updated: September 2026
Who we are
Tiger Blue is a traditional phinisi sailing yacht operated by Blue Horizon Tourism LLC, Dubai, United Arab Emirates (“Tiger Blue”, “we”, “us” or “our”). Blue Horizon Tourism LLC is the data controller responsible for the personal data described in this policy.
If you have a question about this policy or how we use your personal data, or you want to exercise your rights, please email kathryn@tigerblue.info. For reservations, contact sail@tigerblue.info or +971 50 553 8013.
What this policy covers
This policy explains how we collect and use personal data when you:
- visit our website, tigerblue.info;
- send us an enquiry through a form on our website or through our booking system at tiger-blue-xi.vercel.app, including its availability calendar and enquiry form;
- sign up to hear from us;
- book a sailing, complete your guest details or pay through one of our payment links; or
- contact us by email, phone or WhatsApp.
The information we collect
Enquiry forms on our website
Our website enquiry forms (built with the Gravity Forms plugin) ask for your name, phone number, email address, the best time to call, your country of residence, where and when you would like to sail, what you are interested in, your message and how you heard about us. They also record your communication preferences: your consent to be contacted about your enquiry and, if you choose, your consent to join our marketing list. Submissions are stored in our website’s database and emailed to our reservations team. When you submit a form, the website also records technical information such as your IP address and browser type.
Newsletter sign-up
If you enter your email address in the “Would you like to hear from us?” box, we use it to send you news and offers from Tiger Blue.
Our booking system
Our booking system at tiger-blue-xi.vercel.app shows live availability and handles enquiries and bookings. Its enquiry form asks for the type of trip you are interested in, your name, email address, phone or WhatsApp number, country, the number of adults and children, your preferred dates and itinerary, whether your dates are flexible, and your message. We use these details only to reply to your enquiry and plan your trip. We do not add booking-system enquiries to our marketing list.
Guest details for your sailing
Once you have booked, we send you a private link to our guest details form, to be completed at least 30 days before departure. For each guest it asks for:
- personal details: name, email address, phone or WhatsApp number, date of birth, gender, nationality and home address;
- passport details: passport number, issuing country and expiry date;
- two emergency contacts: name, relationship and phone number;
- diving details: certifying agency, certification level and number, number of logged dives, date of last dive and equipment needs;
- insurance: dive insurance and medical emergency and evacuation insurance providers and policy numbers;
- health and diet: dietary requirements, allergies, and medical conditions or medication;
- kit sizes: height, weight, and wetsuit, fin or shoe and BCD sizes; and
- travel details: arrival and departure flights and hotels, transfer needs, drinks package choice, food preferences and any special requests or occasions.
Information about health, allergies and medical conditions is sensitive. We ask for it only so that we can keep you safe on board and in the water, cater for you and respond in an emergency, and we collect it only with the consent you give on the form. If you give us details for other members of your party, please make sure they have seen this policy.
Payments
We may send you a secure payment link so that you can pay a booking instalment online. Payments through these links are processed by Stripe. You enter your card details directly with Stripe, and we do not see or store your full card number. Stripe tells us whether the payment succeeded, the amount and currency, and the name and email address used. If you pay by bank transfer, we keep the transfer details we need to match your payment.
When you contact us
If you email, call or message us, we keep a record of the conversation and the contact details you use. Messages sent on WhatsApp are also handled by WhatsApp (Meta) under its own terms.
When you browse our website
Like most websites, our site and the services it uses collect technical information such as your IP address, browser and device type, and the pages you visit. See “Third-party services on our website” and “Cookies” below.
How we use your information
- To answer your enquiry and prepare a quote, because you have asked us to and because we have a legitimate interest in replying to people who contact us.
- To manage your booking, including payments, invoices, pre-departure information, cabins, transfers, meals and diving, so that we can perform our contract with you.
- To meet legal requirements, including the passenger lists and permits required by Indonesian port, harbour-master, immigration and national park authorities, and our accounting and tax obligations.
- To keep you safe, using health, insurance and emergency-contact details to plan diving and activities and to respond to an accident or medical emergency. In an emergency we may share information to protect your vital interests.
- To send you news and offers, only if you have opted in. You can unsubscribe at any time using the link in our emails or by emailing us.
- To protect and improve our website, by blocking spam with Google reCAPTCHA and, where it is active, by using Google Analytics to understand how visitors use the site. We do this in our legitimate interests, or with your consent where the law requires it.
We do not sell your personal data.
Who we share it with
- Our crew and on-board team, who receive only the details they need to run your trip safely (for example, dietary and medical information for the chef and dive master).
- Indonesian port, harbour-master, immigration and national park authorities, and the local agents who arrange port clearance and park permits for us, where this is needed for your sailing.
- The travel agent who made your booking, if you booked through one.
- Insurers, medical providers and evacuation services in an emergency.
- The service providers who run our systems for us: Hostinger (website hosting), Vercel and Supabase (booking system hosting and database), Stripe (payments), our email providers, and the providers listed under “Third-party services on our website”.
- Professional advisers, and public authorities where the law requires it.
Third-party services on our website
- Google reCAPTCHA protects our forms from spam. It collects hardware and software information, such as device and application data, and sends it to Google for analysis. Google’s Privacy Policy and Terms of Service apply.
- Google Site Kit and Google Analytics. We use Google’s Site Kit plugin to connect our website to Google services. When Google Analytics is active, it uses cookies to collect information about how visitors use our site, such as the pages viewed, approximate location, device type and how you arrived. We use this information in aggregate to improve the site. You can opt out with Google’s Analytics opt-out browser add-on.
- Instagram feed. Our pages show recent posts from our Instagram account using the Smash Balloon Instagram Feed plugin. Images and posts may load from Instagram (Meta) servers, which receive your IP address and browser information. See Instagram’s Privacy Policy.
- Adobe Fonts. Our website’s fonts are served by Adobe from use.typekit.net. To display them, your browser connects to Adobe’s servers, which receive your IP address and browser information. See Adobe’s Privacy Policy.
- Stripe processes payments made through our payment links. See Stripe’s Privacy Policy.
Our website also links to other websites, such as PADI and Divers Alert Network. This policy does not cover them.
Cookies
Cookies are small files stored by your browser. Our website uses:
- cookies needed for the site and its forms to work and stay secure;
- Google reCAPTCHA cookies, to tell people from automated spam; and
- Google Analytics cookies (such as _ga), when Analytics is active, to measure how the site is used.
Our booking system uses only the cookies it needs to work, such as those that keep our staff signed in. It does not use analytics or advertising cookies. You can block or delete cookies in your browser settings, but some parts of the site may not work without them.
International transfers
We are based in the United Arab Emirates and sail in Indonesia, and our service providers operate in other countries, including the United States and Singapore. Your data may therefore be processed outside the country where you live. Where the law requires it, we rely on appropriate safeguards for these transfers, such as contractual commitments from our providers.
How long we keep your data
- Enquiries that do not lead to a booking: only for as long as we need them to reply to you and follow up your enquiry.
- Booking, invoice and payment records: for as long as we need them to manage your booking, and then for the period required by accounting and tax law.
- Passport, health, insurance and emergency-contact details: only for as long as we need them for your sailing and the related port, permit and safety requirements, unless we need them for longer because of an incident, a claim or a legal requirement.
- Marketing list: until you unsubscribe.
- Google Analytics data: for the retention period set in our Analytics account.
How we protect your data
Access to enquiry and booking records is limited to the members of our team who need it. Our booking system requires staff to sign in, guest details forms are sent as private links, and our website and booking system use encrypted (HTTPS) connections. No system is completely secure, but we take reasonable steps to protect your information.
Your rights
Depending on where you live, you may have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct or complete it;
- ask us to delete it;
- object to, or ask us to restrict, how we use it;
- ask for your data in a portable format; and
- withdraw your consent at any time where we rely on consent. This does not affect anything we did before you withdrew it.
To make a request, email kathryn@tigerblue.info. We may need to confirm your identity, and we will reply within one month. If you are unhappy with how we have handled your data, you can also complain to the data protection authority in the country where you live or work.
Children
Our website is not aimed at children. We collect information about children only when a parent or guardian gives it to us as part of a booking, for example for passenger lists and safety.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.
Contact us
Blue Horizon Tourism LLC, Dubai, United Arab Emirates
Email: kathryn@tigerblue.info
