
Privacy Policy
Your privacy is important to us. Learn how we collect, use, and protect your personal information.
Last updated: June 18, 2024
Data Security
Encrypted storage & transmission
Transparency
Clear data practices
Cookie Control
Manage your preferences
Your Rights
Access & delete your data
1. Information We Collect
We collect information to provide better services to our users. The types of information we collect include:
Personal Information: • Name, email address, and phone number • Passport details and nationality (for booking requirements) • Payment information (processed securely through our payment partners) • Billing address and delivery details
Booking Information: • Travel dates, destinations, and preferences • Accommodation and transportation requirements • Special requests or dietary requirements • Emergency contact information
Technical Information: • IP address and browser type • Device information and operating system • Website usage data and cookies • Location data (with your consent)
2. How We Use Your Information
We use the information we collect for the following purposes:
Service Delivery: • Process and confirm your bookings • Communicate with you about your reservations • Provide customer support and assistance • Send booking confirmations and travel documents
Service Improvement: • Analyze usage patterns to improve our website • Personalize your experience and recommendations • Develop new features and services • Conduct surveys and gather feedback
Communication: • Send promotional offers (with your consent) • Share travel tips and destination guides • Provide updates about our services • Respond to inquiries and feedback
Legal Compliance: • Comply with legal obligations • Prevent fraud and unauthorized transactions • Resolve disputes and enforce our agreements • Cooperate with law enforcement when required
3. Information Sharing
We do not sell your personal information. We share information only in the following circumstances:
Service Providers: • Hotels, tour operators, and transportation companies to fulfill your bookings • Payment processors to handle transactions securely • Email service providers to send communications • Analytics providers to improve our services
Legal Requirements: • When required by law, regulation, or legal process • To protect our rights, property, or safety • To prevent fraud or illegal activities • In connection with a business transfer or merger
With Your Consent: • When you explicitly authorize us to share information • For marketing partnerships (only with opt-in consent) • For co-branded services or joint promotions
4. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
Security Measures: • SSL/TLS encryption for all data transmission • Secure servers with firewall protection • Regular security audits and vulnerability assessments • Limited access to personal data on a need-to-know basis • Employee training on data protection practices
Payment Security: • PCI DSS compliant payment processing • No storage of complete credit card numbers on our servers • Tokenization of sensitive payment data • 3D Secure authentication for online payments
Data Retention: • We retain your data only as long as necessary • Booking data: retained for 7 years for legal compliance • Marketing data: retained until you unsubscribe • Technical logs: retained for 12 months
Despite our efforts, no security system is impenetrable. We cannot guarantee absolute security of your data.
5. Your Rights
Under applicable data protection laws, you have the following rights:
Access and Portability: • Request a copy of your personal data • Receive data in a structured, machine-readable format • Understand how your data is being used
Correction and Deletion: • Update or correct inaccurate information • Request deletion of your personal data • Object to certain types of data processing
Consent Management: • Withdraw consent for marketing communications • Opt-out of data sharing for marketing purposes • Control cookie preferences through browser settings
Data Protection Rights: • Lodge complaints with data protection authorities • Request restriction of processing in certain circumstances • Object to automated decision-making
To exercise these rights, please contact us at info@waitrav.com. We will respond within 30 days.
6. Cookies and Tracking
We use cookies and similar technologies to enhance your browsing experience:
Types of Cookies: • Essential Cookies: Required for website functionality (login, bookings) • Analytics Cookies: Help us understand how visitors interact with our site • Preference Cookies: Remember your settings and preferences • Marketing Cookies: Track visitor behavior for targeted advertising
Cookie Management: • You can control cookies through your browser settings • Most browsers allow you to refuse or delete cookies • Note: disabling essential cookies may affect website functionality • Third-party cookie opt-out tools are available
Third-Party Tracking: • We use Google Analytics for website analytics • Social media platforms may set cookies through our sharing features • Advertising partners may use cookies for retargeting • You can opt out of personalized ads through industry opt-out tools
By using our website, you consent to our use of cookies as described in this policy.
7. International Data Transfers
Your information may be transferred to and processed in countries other than your own:
Transfer Mechanisms: • Indonesia (our primary operations location) • Countries where our service providers operate • Destinations where you book travel services
Data Protection: • We ensure appropriate safeguards are in place for international transfers • Standard contractual clauses with our service providers • Compliance with local data protection regulations • Adequate protection in destination countries
Cross-Border Considerations: • Different countries have different data protection laws • Your data may be subject to disclosure requests from foreign governments • We take reasonable steps to ensure consistent protection levels • You will be notified of significant changes to data locations
8. Children's Privacy
Our services are not intended for children under 16 years of age:
Age Restrictions: • We do not knowingly collect data from children under 16 • Bookings for minors must be made by parents or legal guardians • Parental consent is required for processing children's data
Parental Rights: • Parents can review their child's personal information • Request deletion of children's data • Refuse further collection or use of child's information
If you believe we have inadvertently collected data from a child under 16, please contact us immediately at info@waitrav.com, and we will promptly delete the information.
9. Changes to This Policy
We may update this Privacy Policy from time to time:
Notification of Changes: • Significant changes will be posted on this page • We will update the "Last Updated" date at the bottom • Material changes may be notified via email • We encourage you to review this policy periodically
Effective Date: • Changes become effective immediately upon posting • Continued use of our services constitutes acceptance • Previous versions will be archived upon request
If you do not agree with the changes, you should discontinue using our services and contact us to delete your account.
10. Contact Us
For questions, concerns, or requests regarding this Privacy Policy:
Data Protection Officer: Email: info@waitrav.com Phone: +62-813-3855-2747 Address: [Your Business Address], Bali, Indonesia
Response Time: • We aim to respond to all privacy-related inquiries within 24-48 hours • Complex requests may require additional time • You will be notified if more time is needed
Complaints: If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority or the Indonesian data protection authority.
Our Commitment
Waitrav Bali DMC is committed to protecting your privacy. We adhere to applicable data protection laws including Indonesia's Personal Data Protection Law and international standards like GDPR for our European customers.