Privacy Policy
Back to Home

Privacy Policy

Your privacy is important to us. Learn how we collect, use, and protect your personal information.

Last updated: June 18, 2024

Data Security

Encrypted storage & transmission

Transparency

Clear data practices

Cookie Control

Manage your preferences

Your Rights

Access & delete your data

1. Information We Collect

We collect information to provide better services to our users. The types of information we collect include:

Personal Information: • Name, email address, and phone number • Passport details and nationality (for booking requirements) • Payment information (processed securely through our payment partners) • Billing address and delivery details

Booking Information: • Travel dates, destinations, and preferences • Accommodation and transportation requirements • Special requests or dietary requirements • Emergency contact information

Technical Information: • IP address and browser type • Device information and operating system • Website usage data and cookies • Location data (with your consent)

2. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: • Process and confirm your bookings • Communicate with you about your reservations • Provide customer support and assistance • Send booking confirmations and travel documents

Service Improvement: • Analyze usage patterns to improve our website • Personalize your experience and recommendations • Develop new features and services • Conduct surveys and gather feedback

Communication: • Send promotional offers (with your consent) • Share travel tips and destination guides • Provide updates about our services • Respond to inquiries and feedback

Legal Compliance: • Comply with legal obligations • Prevent fraud and unauthorized transactions • Resolve disputes and enforce our agreements • Cooperate with law enforcement when required

3. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

Service Providers: • Hotels, tour operators, and transportation companies to fulfill your bookings • Payment processors to handle transactions securely • Email service providers to send communications • Analytics providers to improve our services

Legal Requirements: • When required by law, regulation, or legal process • To protect our rights, property, or safety • To prevent fraud or illegal activities • In connection with a business transfer or merger

With Your Consent: • When you explicitly authorize us to share information • For marketing partnerships (only with opt-in consent) • For co-branded services or joint promotions

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

Security Measures: • SSL/TLS encryption for all data transmission • Secure servers with firewall protection • Regular security audits and vulnerability assessments • Limited access to personal data on a need-to-know basis • Employee training on data protection practices

Payment Security: • PCI DSS compliant payment processing • No storage of complete credit card numbers on our servers • Tokenization of sensitive payment data • 3D Secure authentication for online payments

Data Retention: • We retain your data only as long as necessary • Booking data: retained for 7 years for legal compliance • Marketing data: retained until you unsubscribe • Technical logs: retained for 12 months

Despite our efforts, no security system is impenetrable. We cannot guarantee absolute security of your data.

5. Your Rights

Under applicable data protection laws, you have the following rights:

Access and Portability: • Request a copy of your personal data • Receive data in a structured, machine-readable format • Understand how your data is being used

Correction and Deletion: • Update or correct inaccurate information • Request deletion of your personal data • Object to certain types of data processing

Consent Management: • Withdraw consent for marketing communications • Opt-out of data sharing for marketing purposes • Control cookie preferences through browser settings

Data Protection Rights: • Lodge complaints with data protection authorities • Request restriction of processing in certain circumstances • Object to automated decision-making

To exercise these rights, please contact us at info@waitrav.com. We will respond within 30 days.

6. Cookies and Tracking

We use cookies and similar technologies to enhance your browsing experience:

Types of Cookies: • Essential Cookies: Required for website functionality (login, bookings) • Analytics Cookies: Help us understand how visitors interact with our site • Preference Cookies: Remember your settings and preferences • Marketing Cookies: Track visitor behavior for targeted advertising

Cookie Management: • You can control cookies through your browser settings • Most browsers allow you to refuse or delete cookies • Note: disabling essential cookies may affect website functionality • Third-party cookie opt-out tools are available

Third-Party Tracking: • We use Google Analytics for website analytics • Social media platforms may set cookies through our sharing features • Advertising partners may use cookies for retargeting • You can opt out of personalized ads through industry opt-out tools

By using our website, you consent to our use of cookies as described in this policy.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own:

Transfer Mechanisms: • Indonesia (our primary operations location) • Countries where our service providers operate • Destinations where you book travel services

Data Protection: • We ensure appropriate safeguards are in place for international transfers • Standard contractual clauses with our service providers • Compliance with local data protection regulations • Adequate protection in destination countries

Cross-Border Considerations: • Different countries have different data protection laws • Your data may be subject to disclosure requests from foreign governments • We take reasonable steps to ensure consistent protection levels • You will be notified of significant changes to data locations

8. Children's Privacy

Our services are not intended for children under 16 years of age:

Age Restrictions: • We do not knowingly collect data from children under 16 • Bookings for minors must be made by parents or legal guardians • Parental consent is required for processing children's data

Parental Rights: • Parents can review their child's personal information • Request deletion of children's data • Refuse further collection or use of child's information

If you believe we have inadvertently collected data from a child under 16, please contact us immediately at info@waitrav.com, and we will promptly delete the information.

9. Changes to This Policy

We may update this Privacy Policy from time to time:

Notification of Changes: • Significant changes will be posted on this page • We will update the "Last Updated" date at the bottom • Material changes may be notified via email • We encourage you to review this policy periodically

Effective Date: • Changes become effective immediately upon posting • Continued use of our services constitutes acceptance • Previous versions will be archived upon request

If you do not agree with the changes, you should discontinue using our services and contact us to delete your account.

10. Contact Us

For questions, concerns, or requests regarding this Privacy Policy:

Data Protection Officer: Email: info@waitrav.com Phone: +62-813-3855-2747 Address: [Your Business Address], Bali, Indonesia

Response Time: • We aim to respond to all privacy-related inquiries within 24-48 hours • Complex requests may require additional time • You will be notified if more time is needed

Complaints: If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority or the Indonesian data protection authority.

Our Commitment

Waitrav Bali DMC is committed to protecting your privacy. We adhere to applicable data protection laws including Indonesia's Personal Data Protection Law and international standards like GDPR for our European customers.