How we collect, use, and protect your personal information.
Discover Bali (operating at baliexperiences.com) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information in accordance with:
Data Controller: Discover Bali, baliexperiences.com
ABN: 66 983 357 585
Contact: Indonesianaturalcroups@gmail.com or discoverbaliofficial@gmail.com
WhatsApp: +62 877-9879-8359
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | First name, last name | Booking confirmation, customer identification |
| Contact Data | Email address, phone number | Booking confirmations, itinerary delivery, customer service |
| Booking Data | Activity, date, number of participants, notes | Arranging and coordinating your tour |
| Location Data | Hotel name, Airbnb address (pickup activities only) | Arranging driver pickup |
| Financial Data | Payment amount, currency, booking reference | Payment processing (card details handled solely by Airwallex) |
| Communications | WhatsApp messages, chat transcripts, emails | Customer support, dispute resolution |
When you visit our website, we may automatically collect technical data including: IP address, browser type and version, device type, operating system, pages visited, time spent on pages, and referring URLs. This data is collected via Netlify hosting logs and does not personally identify you.
We do not collect: full payment card numbers (handled by Airwallex); government identity documents; health data (unless voluntarily disclosed for safety reasons); or biometric data.
We use your personal information for the following purposes and legal bases:
| Purpose | Legal Basis (GDPR) | Legal Basis (APPs) |
|---|---|---|
| Processing and confirming bookings | Contract performance | APP 3 — collection necessary for function |
| Sending booking confirmations and itineraries | Contract performance | APP 3 |
| Arranging tour logistics (pickup coordination) | Contract performance | APP 3 |
| Processing refunds and handling disputes | Legal obligation / legitimate interests | APP 3 |
| Responding to enquiries and customer service | Legitimate interests | APP 3 |
| Improving our website and services | Legitimate interests | APP 3 |
| Complying with legal obligations | Legal obligation | APP 3 |
| Sending promotional offers (if consented) | Consent | APP 7 (direct marketing) |
We will never sell your personal information to third parties for marketing purposes.
We share your name, contact number, hotel address (for pickup activities), and booking details with our local Balinese tour Operators solely for the purpose of delivering your booked activity. Operators are required to handle this information confidentially and not use it for any other purpose.
| Provider | Role | Data Shared | Their Privacy Policy |
|---|---|---|---|
| Airwallex | Payment processing | Name, email, payment amount | airwallex.com privacy policy |
| Netlify | Website hosting & serverless functions | IP address, request logs | netlify.com/privacy |
| JSONBin.io | Encrypted booking data storage | All booking data fields | jsonbin.io/privacy-policy |
| Google (Gmail) | Email delivery (confirmation emails) | Name, email, booking details | Google Privacy Policy |
| Google Fonts | Website typography | IP address (font loading) | Google Privacy Policy |
We may disclose your personal information if required by law, court order, or government authority. We will notify you of such disclosure where legally permissible to do so.
In the event of a sale, merger, or transfer of our business, customer data may be transferred to the new owner, subject to the same privacy protections described in this Policy.
Your data may be transferred to and stored in servers located in the United States (Netlify, Google, JSONBin) and in other jurisdictions in which our payment processor, Airwallex, operates its payment infrastructure (see Airwallex's own privacy statement for details of its data locations). These transfers are made under appropriate safeguards including contractual arrangements and reliance on adequacy decisions where applicable. By using our services, you consent to these transfers.
We retain your personal information for the following periods:
After the applicable retention period, your data is securely deleted or anonymised.
Under the Privacy Act 1988 (Cth) and the APPs, you have the right to:
If you are located in the European Economic Area, you additionally have the right to:
Under UU No. 27/2022, Indonesian residents have rights including: access to personal data; correction of inaccurate data; deletion of personal data; and withdrawal of consent.
To exercise any of these rights, contact us at Indonesianaturalcroups@gmail.com. We will respond within 30 days. We may need to verify your identity before processing your request.
Our website uses minimal cookies. We do not use advertising or tracking cookies. Our website may load resources from Google Fonts, which may set a session cookie. We do not use analytics platforms such as Google Analytics. You can disable cookies in your browser settings; this will not affect your ability to use our booking service.
Our services are not directed at children under 16. We do not knowingly collect personal information from children under 16 without verified parental consent. If you believe we have inadvertently collected such data, please contact us immediately for deletion.
We implement appropriate technical and organisational security measures to protect your personal information, including:
No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.
We will only send you promotional communications if you have opted in. You may opt out at any time by emailing us or clicking "unsubscribe" in any marketing email. We do not share your contact details with third parties for their marketing purposes.
Our website may contain links to external websites (e.g. Google Maps, WhatsApp). We are not responsible for the privacy practices of these third-party sites and encourage you to read their privacy policies independently.
We may update this Privacy Policy from time to time. The current version will always be available at baliexperiences.com/privacy.html. Material changes will be communicated by email or a prominent notice on our website. Continued use of our services after any change constitutes acceptance.
If you have a complaint about how we handle your personal information, please contact us first. If you are not satisfied with our response, you may contact:
Privacy inquiries:
ABN: 66 983 357 585
Email: Indonesianaturalcroups@gmail.com · discoverbaliofficial@gmail.com
WhatsApp: +62 877-9879-8359
Website: baliexperiences.com