Privacy policy
We respect your privacy and process personal data in line with Indonesia's Personal Data Protection Law (UU No. 27 Tahun 2022). Last updated: 6 October 2026.
Data we collect
- Account data from Google sign-in: name, email address and profile picture.
- Booking data: contact phone, guest names, travel dates, special requests and order history.
- Payment status from our payment partner (we never receive full card or bank credentials).
- Technical data needed to run the site securely, such as IP address and browser information.
How we use it
- To create and manage your bookings, send vouchers and order updates.
- To provide customer support through email and WhatsApp.
- To prevent fraud and keep our services secure.
- To meet legal, tax and accounting obligations.
Who we share it with
We share only what is needed to deliver your booking: hotels and our hotel distribution partner (guest names and stay details), our payment gateway (amount and contact details), our email provider, and our hosting and security providers. We do not sell your personal data.
Retention and security
Booking records are kept for as long as required for tax and accounting purposes. Data is encrypted in transit, and third-party credentials are encrypted at rest. Access is limited to authorised staff.
Your rights
You may request access to, correction of, or deletion of your personal data, or withdraw consent, by contacting us. We respond within the time required by law.