Privacy Policy

Relax Ferry ("we", "us", "our") operates the speedboat transfer service connecting RAA and BAA Atolls in the Maldives. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website (thoddooferry.com) or mobile application.

By using our services, you agree to the collection and use of information as described in this policy.

We collect the following information when you make a booking:

• Full name — used to identify the passenger on the ticket and manifest
• Phone number — used to send booking confirmation and e-ticket via WhatsApp or Viber
• Email address — if you create an account, used for login and notifications
• Payment information — bank transfer slip images uploaded for verification. We do not store card numbers.
• Travel details — route, date, seat selection, passenger type (local, tourist, expat)
• Device information — device token for push notifications (optional, only if you allow notifications)

• To process and confirm your ferry booking
• To issue and deliver your e-ticket
• To send booking confirmation and trip reminders via WhatsApp or Viber
• To send push notifications about your trip (delays, cancellations, announcements)
• To maintain a passenger manifest for each trip (required for safety and government regulations)
• To process refunds or date changes when requested
• To improve our services and resolve disputes

We do not sell your personal information. We share your data only in the following cases:

• Our captains and staff — passenger names and seat numbers are shared with the boat captain for boarding purposes
• Sales agents — if a booking is made through a registered agent, they can view booking details
• Service providers — we use Cloudinary (image storage) and Vercel (hosting). These providers process data only as needed to deliver our service
• Legal requirements — we may disclose information if required by Maldivian law or government authorities

We retain booking records (name, phone, travel details) for a minimum of 1 year for regulatory and dispute resolution purposes. You may request deletion of your account data by contacting us directly.

If you allow push notifications in our mobile app, we store your device token to send you trip alerts and announcements. You can withdraw consent at any time by disabling notifications in your device settings.

We take reasonable measures to protect your personal information, including:

• HTTPS encryption for all data in transit
• Secure cloud database (MongoDB Atlas) with access controls
• Payment slip images stored securely on Cloudinary with restricted access

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Our service is available to all ages as a transport service. Bookings for children (aged 2–11) and infants (under 2) are made by a parent or guardian. We do not knowingly collect personal data directly from children under 13.

You have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for push notifications at any time

To exercise any of these rights, contact us using the details below.

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the "Last updated" date at the top of this page. Continued use of our service after changes constitutes acceptance of the updated policy.