01Who we are
Bali Luxury Charter Co. is an Indonesia-based luxury tourism curator. The legal controller of personal data on this site is PT Juara Holding Group, registered in the Republic of Indonesia. Contact: [email protected].
We are registered as an Electronic System Operator (Penyelenggara Sistem Elektronik, PSE) with the Indonesian Ministry of Communications and Informatics (Kominfo), under Government Regulation No. 71/2019 and Ministerial Regulation 5/2020 on Private Scope Electronic System Operators.
02What information we collect
Information you give us: name, email address, phone number, country of residence, passport country, travel dates, party size, accommodation preferences, dietary requirements, and any message you send through our contact or quote forms.
Booking information: when you confirm a booking, your full passport name, date of birth, emergency contact, dietary or medical considerations relevant to running the trip safely, and arrival and departure flight details.
Payment information: we do not collect or store full card numbers on this website. Payments are processed by third-party gateways (Xendit, Midtrans or international card processors). We keep only the transaction reference, timestamp, currency and amount needed for booking reconciliation.
Automatically collected data: IP address, approximate location (country or region), browser type and version, device type, referrer URL, pages viewed, time on page and similar technical telemetry from standard server logs and analytics tools.
Cookies and similar technologies: see clause 7.
03Lawful basis for processing
Where applicable under Indonesian law (UU No. 27 Tahun 2022 tentang Pelindungan Data Pribadi, the Personal Data Protection Law) and the EU General Data Protection Regulation 2016/679 (GDPR), we rely on these bases.
Consent: for marketing communications, optional cookies and any processing of sensitive data.
Contract: to provide the booking and travel-curation services you request.
Legal obligation: to keep transaction records under Indonesian tax law (Undang-Undang Pajak) and accounting regulations.
Legitimate interests: to operate the website, prevent fraud and improve our service, in a way that does not override your rights and freedoms.
04How we use your information
To respond to enquiries, send proposals and carry out bookings.
To coordinate with on-the-ground partners (hotels, vessel owners, ground transport, dive masters, captains), strictly as far as needed to deliver the service you requested.
To issue invoices, process refunds and meet legal record-keeping obligations.
To send operational updates such as itinerary changes, weather advisories and pickup confirmations.
With your separate opt-in, to send occasional marketing about new destinations or seasonal offers. You can unsubscribe at any time from the link in any marketing email.
To detect, investigate and prevent fraud, abuse or breaches of our Terms of Service.
05Sharing your information
We do not sell, rent or trade your personal information. We share it only with:
Travel suppliers needed to deliver your booking, such as the specific yacht, hotel, dive operator or driver assigned to your trip.
Payment processors (Xendit, Midtrans, Stripe, Wise), under their own data-processing agreements.
Government authorities when legally compelled, for example immigration manifests for vessels or mandatory tourism reporting under Peraturan Menteri Pariwisata.
Professional advisers (legal, accounting, audit) bound by confidentiality.
Where suppliers are outside Indonesia, transfers are covered by appropriate safeguards under Indonesian law and, for EU residents, the GDPR Chapter V rules on cross-border transfers.
06International visitors: GDPR & CCPA notice
EU, EEA and UK visitors (GDPR): you have the rights of access, rectification, erasure, restriction of processing, data portability and objection, and may withdraw consent at any time. Write to [email protected] to exercise them. You may also lodge a complaint with your national supervisory authority.
California residents (CCPA / CPRA): you have the right to know which categories of personal information we collect, to request deletion, to opt out of any “sale” or “sharing” (we do neither), and not to be discriminated against for exercising these rights.
Children (COPPA & UU PA): we do not knowingly collect personal information from children under 13. A parent or guardian who believes we hold such information should contact us immediately, and we will delete it.
07Cookies
This site uses functional cookies (session, security, language preference), analytics cookies (visit counts, page paths, anonymised aggregates) and, only with your consent, marketing cookies (re-marketing pixels).
You can manage cookie preferences in your browser. Rejecting non-essential cookies will not stop you browsing or contacting us.
08Data retention
We keep enquiry records for 24 months and executed booking records for 10 years, to meet Indonesian tax-law retention requirements. Accounting records are kept for the period required by Undang-Undang No. 28 Tahun 2007 on General Provisions and Tax Procedures. Marketing-list data is kept until you unsubscribe.
09Security
We use industry-standard transport security (HTTPS / TLS 1.3), restricted database access, encrypted backups and strict role-based access for staff.
No system can be guaranteed 100% secure. If a personal-data breach affects you, we will notify the relevant authority and affected individuals within 72 hours where applicable law requires it.
10Refund & cancellation
Refunds and cancellations are governed primarily by our Terms of Service. Personal information related to a refund is processed to complete the refund and meet tax obligations.
11Force majeure
Force-majeure events, including but not limited to natural disasters, volcanic activity, public-health emergencies, civil unrest, government action or maritime advisory closures, may affect this site, the bookings made through it and the personal data processed for them. In such events we follow the principles of this policy, with reasonable adjustments required by safety and legal obligations.
12Your rights under Indonesia’s UU PDP
Under Indonesia’s Personal Data Protection Law (UU No. 27/2022) you have the rights of information, access, correction, deletion, restriction of processing, data portability, withdrawal of consent, objection to automated decision-making, and compensation.
Send requests to [email protected]. We respond within 30 calendar days, as required by Article 7 of UU PDP.
13Changes to this policy
We may revise this Privacy Policy from time to time. The “last updated” date at the top of this page shows the latest revision. Material changes are announced by a banner on the home page or by email to active customers.
14Contact
Privacy questions, requests and complaints: [email protected]
Postal: PT Juara Holding Group, Bali, Indonesia. Phone: +62 811-3941-4563.
