This policy explains what personal information we collect when you use tirtabalitours.com, message us, or book a tour — and what we do (and don’t do) with it.
Who we are
Tirta Bali is operated by [LEGAL ENTITY NAME], a company registered in Indonesia ([COMPANY REGISTRATION NUMBER]), with its registered address at [REGISTERED ADDRESS], Bali, Indonesia. For anything in this policy, you can reach us at hello@tirtabalitours.com. We are the “data controller” of the personal information described here.
What we collect
- Information you give us — your name, email address, phone/WhatsApp number, travel dates, hotel or villa name, group size, and anything else you include when you enquire or book. If your booking involves children or dietary, medical or accessibility needs, we only record what you choose to tell us so we can run your tour safely.
- Booking & payment details — records of the tours you book and payments made. Card payments are processed by our payment providers; we never see or store full card numbers.
- Technical data — when you browse the site we receive standard log information (IP address, browser type, pages viewed) and, if you consent, analytics cookies that help us understand how the site is used.
- Messages — if you contact us on WhatsApp or by email, we keep the conversation so we can plan and run your trip. WhatsApp is operated by Meta and has its own privacy policy.
How we use it
We use your information to reply to enquiries, plan and operate your tours, send booking confirmations and practical trip information, meet our legal and accounting obligations, and improve the website. Where consent is required (for example analytics cookies, or any marketing email), we ask for it and you can withdraw it at any time. We do not sell your personal information, and we don’t send marketing unless you’ve asked for it.
Who we share it with
Only what’s needed, only to run your trip: the guides and drivers assigned to your tour (name, group size, pickup details), hotels and activity operators included in your itinerary, payment providers to process payments, and service providers that host our website and email. If the law requires it, we may share information with authorities. Your data may be processed in Indonesia and in the countries where our service providers operate; where required, we use appropriate safeguards for those transfers.
Cookies
The site uses essential cookies that make it work, and — only with your consent — analytics cookies ([e.g. Google Analytics 4]) that tell us anonymously how visitors use the site. You can refuse or withdraw consent via the cookie banner, and your browser settings let you delete cookies at any time. The site works fine without the optional ones.
Your rights
Depending on where you live (including under the EU/UK GDPR and Indonesia’s PDP Law), you have the right to access the personal information we hold about you, correct it, ask us to delete it, object to or restrict certain processing, receive a copy in a portable format, and withdraw consent at any time. To exercise any of these, email hello@tirtabalitours.com — we respond within 30 days. You also have the right to complain to your local data-protection authority.
Retention & security
We keep enquiry messages for up to [12 months] after our last contact, and booking and payment records for as long as Indonesian tax and accounting law requires (currently up to [10 years]). After that, information is deleted or anonymised. We protect your data with access controls, encrypted connections (HTTPS) and reputable providers — and we only give team members access to what they need to run your trip.
Contact us
Questions about this policy or your data: hello@tirtabalitours.com, or WhatsApp +62 823 1111 0828. If we change this policy, we’ll update the date at the top of this page; significant changes will be flagged on the homepage.