Updated Sept 2026 details verified
The short version: we collect what you type into our forms and standard analytics, we use it to answer you and improve the site, we share booking enquiries with the tour operator you're enquiring with, and we don't sell anything to anyone. The long version follows.
Last updated: September 2026. This policy is written in plain language on purpose; it is the whole policy, not a summary of a longer one.
sepilokorangutan.my is an independent visitor guide operated from Sabah, Malaysia. We are not affiliated with the Sabah Wildlife Department or the Sepilok Orangutan Rehabilitation Centre. For anything in this policy, reach us via the contact page.
Form data. When you use our tour enquiry form or contact form, we receive what you type: name, email, and the details of your enquiry (travel dates, party size, message). We use it for exactly one purpose — responding to that enquiry. We never add form contacts to a marketing list; there isn't one.
Analytics. We use Google Analytics to understand how the site is used — pages visited, approximate location at city level, device type. This is aggregate data; we don't use it to identify individuals. Google's processing is governed by Google's own privacy terms, and you can block analytics with any standard browser tool or opt-out extension — the site works identically without it.
What we don't collect: no accounts, no passwords, no payment details (we take no payments — bookings are transacted directly with the operator), no data from children knowingly, and nothing you haven't typed or that standard web analytics doesn't produce.
Tour enquiries are shared with the tour operator — that's the entire function of the form. Enquiries from the tours and Kinabatangan pages go to Remarkable Borneo Travel & Tours, who reply to you directly; from that point their handling of your data is theirs. Our disclaimer describes this relationship fully.
Contact-form messages stay with us — media, partnership and correction enquiries are not shared with any operator.
Beyond that: nobody. We do not sell, rent, or trade personal data, and never will. We'd disclose data only if legally compelled by a Malaysian authority.
The site itself sets no cookies for its own features. Google Analytics sets its standard cookies for the aggregate measurement described above. The currency selector on our tour pages runs entirely in your browser and stores nothing.
Enquiry emails are kept as long as needed to handle the enquiry and for reasonable business records, then deleted. Analytics data follows Google Analytics' standard retention settings.
Under Malaysia's Personal Data Protection Act 2010 — and as a matter of basic decency regardless of where you live — you can ask us what we hold about you, ask us to correct it, or ask us to delete it. One message via the contact form does it; deletion requests are honoured without argument.
If this policy changes, the date at the top changes with it, and the plain-language promise stands: no policy update will ever quietly introduce selling your data, because we don't do that.