Privacy Policy

1.1 Booking & Coordination Details: When inquiring or reserving services with Bali Samala Tour, you provide essential details including full name, WhatsApp contact number, email address, travel dates, passenger group size, and specific accommodation pickup/drop-off points in Bali.

1.2 Strict Minimization of Identity Documents: We do not collect or archive national ID cards (KTP) or passports as a prerequisite for website usage. Official identification numbers are strictly requested only when legally mandated by marine port authorities (manifest fast boat to Nusa Penida) or specific national park checkpoints.

1.3 Technical Interaction Data: Our website uses minimal, non-intrusive session cookies and CSRF security tokens necessary for maintaining booking state and securing checkout transactions.

2.1 Tour Fulfillment & Dispatch: Your contact and itinerary details are utilized exclusively to confirm vehicle schedules, dispatch dedicated drivers, book verified activity time-slots, and deliver your digital E-Vouchers and invoices.

2.2 Concierge Communication: Our dispatch team uses your WhatsApp number and email to send pre-trip driver contact introductions, pickup confirmations, and real-time support during your island excursion.

2.3 No Unsolicited Marketing Spams: Bali Samala Tour does not sell, lease, or distribute guest contact lists to external telemarketing firms or bulk advertising agencies.

3.1 Operational Need-to-Know: Data sharing is restricted strictly to operational personnel directly involved in servicing your itinerary:

• Assigned Drivers & Guides: Receive guest name, phone number, and pickup location for timely greeting.
• Outdoor Activity Operators: Receive participant headcount and session timing to prepare equipment and instructors.
• Certified Payment Processors (Midtrans Snap): Financial transactions are processed directly through Midtrans via PCI-DSS compliant secure channels. Bali Samala never handles or stores raw cardholder data.

4.1 Technical Measures: All data transmissions across our website are encrypted using standard SSL/TLS (HTTPS) protocols. Access to administrative systems is safeguarded by strict authentication and role-based permissions.

4.2 Commercial Reasonableness: While no electronic transmission or cloud storage system can be guaranteed 100% impervious against malicious threats, Bali Samala Tour implements all commercially reasonable technical and organizational safeguards to prevent unauthorized access, alteration, or disclosure.

5.1 Rights of Data Subjects: In full alignment with Indonesian Personal Data Protection regulations (UU PDP), guests possess the right to:

• Request confirmation regarding the personal data we hold about you.
• Request corrections of inaccurate or outdated contact information.
• Request the erasure of non-essential contact data after tour completion.

5.2 Retention Policy: Transaction records and tax invoices are retained for the statutory period required under Indonesian accounting and financial laws, after which data is safely purged or irreversibly anonymized.

6.1 Contact Channels: For privacy inquiries, data subject access requests, or policy feedback, please contact Bali Samala Tour: