Bali Travel & Tour (“we”, “us”, or “our”) is committed to protecting the privacy of visitors and customers who use our website https://balitravelandtour.com/ (the “Website”) and our services (the “Services”). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have regarding your data. By using the Website or booking our Services you agree to the terms of this Privacy Policy.
1. Controller
The data controller for personal data collected via the Website is Bali Travel & Tour. Our full contact details are available on the Website. If you have questions about this Privacy Policy or our data practices, please contact us using the contact information on the Website.
2. Scope
This Policy applies to personal data collected:
- when you visit or interact with the Website;
- when you make enquiries, request quotes or book Services with us;
- when you contact our customer support or subscribe to marketing communications.
3. Information we collect
We collect the following types of information where necessary for the purposes set out below:
a. Personal & identity information
- Full name, date of birth (when required), gender.
- Nationality and passport/ID details (only when required for bookings or legal compliance).
b. Contact information
- Email address, telephone/mobile number, postal address.
c. Booking & transaction information
- Booking details (itinerary, travel dates, number of travellers, special requests).
- Payment and billing details (payment card details are processed by third-party payment processors; we do not store full card numbers unless expressly stated).
- Invoicing and transaction history.
d. Travel preferences & special requirements
- Dietary requirements, health or mobility information, special assistance requests (provided voluntarily and only when required to arrange Services).
e. Technical & usage information
- IP address, device and browser type, operating system, referring URLs, pages visited, search queries, and other analytics data automatically collected when you use the Website.
f. Communications
- Records of communications with us (emails, chat transcripts, telephone calls where recorded in accordance with applicable law).
g. Cookies and tracking
- Cookies and similar technologies (see the “Cookies & Tracking” section below).
4. How we use your personal data
We will use personal data for the following purposes:
- To provide, manage and fulfil bookings and Services (including arranging accommodation, transfers, guides and activities).
- To process payments and prevent fraud.
- To communicate with you about bookings, confirmations, changes, cancellations and customer support.
- To send marketing communications (where you have consented or where permitted by law).
- To improve and personalize the Website and our Services, including analytics and performance monitoring.
- To comply with legal obligations (e.g., storing booking records, immigration/entry requirements, tax records).
- For our legitimate business interests such as enforcing our Terms, preventing fraud, and protecting the safety of our customers and staff.
5. Legal basis for processing (where applicable)
Where applicable law requires, we rely on one or more of the following legal grounds to process personal data:
- Performance of a contract (to perform your booking and related services).
- Consent (for marketing communications and certain cookies/tracking).
- Compliance with legal obligations.
- Legitimate interests (e.g., fraud prevention, direct marketing, improving our Services), subject to your rights and interests.
6. Sharing and disclosure of personal data
We may share personal data with:
- Third-party suppliers and service providers necessary to deliver Services (hotels, transport operators, activity providers, guides).
- Payment processors and financial institutions to process payments.
- IT and analytics providers that help operate and measure the Website.
- Professional advisors (e.g., lawyers, auditors) where necessary.
- Government, law enforcement or other public authorities when required by law or to comply with legal process.
- Successors in the event of a merger, sale, reorganization or acquisition (only as permitted by law).
We require third parties to provide adequate protections for personal data and to use it only for specified purposes.
7. International transfers
Some of the third-party service providers we use (e.g., cloud hosting, payment processors) may be located in countries outside your country of residence. Where personal data is transferred internationally, we take steps to ensure appropriate safeguards are in place (appropriate contractual clauses, only using providers in jurisdictions with adequate protections, or other lawful transfer mechanisms).
8. Data retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, to comply with legal obligations (for example tax or accounting requirements), resolve disputes, and enforce our agreements. When retention is no longer necessary, we will securely delete or anonymize your personal data.
9. Security
We implement reasonable technical and organisational measures designed to protect personal data from loss, unauthorised access, disclosure, alteration or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach occurs and we are legally required to do so, we will notify affected individuals and relevant authorities in accordance with applicable law.
10. Your rights
Depending on your jurisdiction and applicable law you may have certain rights in relation to your personal data, including:
- The right to access the personal data we hold about you.
- The right to correct or update inaccurate or incomplete data.
- The right to request deletion or restriction of processing (subject to legal and contractual obligations).
- The right to object to processing, including profiling and direct marketing.
- The right to data portability where applicable.
- The right to withdraw consent (where processing is based on consent) without affecting processing done prior to withdrawal.
To exercise any of these rights, please contact us via the contact details on the Website. We may need to verify your identity before fulfilling requests and may refuse requests where permitted by law (for example to preserve booking records required by law).
11. Cookies & tracking technologies
We use cookies and similar technologies to operate and improve the Website, to provide basic functionality, and to understand how users interact with the Website. Cookies fall into categories such as:
- Strictly necessary cookies (required for the Website to function).
- Functional cookies (remember preferences).
- Performance/analytics cookies (aggregate usage data).
- Advertising/targeting cookies (for marketing purposes).
You can control cookie preferences through your browser settings and, where available, via our cookie consent banner. Disabling certain cookies may affect functionality of the Website and Services.
12. Third-party websites and services
The Website may contain links to third-party websites and services (for example suppliers’ websites, social media platforms, online travel agents). This Policy does not apply to those third parties. We encourage you to read their privacy policies before providing personal data.
13. Children
Our Services are not directed to children under 16. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have collected personal data of a child in violation of this Policy, please contact us and we will take steps to delete the information.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When changes are made we will post the updated policy on the Website with a new effective date. Material changes will be communicated where required by law (for example by email if you are a customer).
15. Complaints and supervisory authority
If you have concerns about our handling of your personal data, please contact us first so we can investigate and attempt to resolve the issue. You also have the right to lodge a complaint with a supervisory authority in your jurisdiction (for example a data protection authority).
16. Contact information
For questions about this Privacy Policy, to exercise your rights, or to make a complaint, please contact us using the contact details published on https://balitravelandtour.com/.
