Privacy policy for the NK Jaya Komodo website

The controller of this site, nk-jaya-phinisi.pages.dev, and of every booking made through it is PT Komodo Explorer Indonesia, NIB 1805260128363. The law behind this page is Indonesia's Personal Data Protection Law, UU No. 27 of 2022, and for visitors in the European Economic Area, the GDPR.

Write to sales@nk-jaya-phinisi.pages.dev for any privacy question, or message us on WhatsApp. A person answers.

The photos on this site are of the boats. The few that include people keep them small in the frame, and none is a portrait.

• Contact details: name, email address and WhatsApp number, to answer you and run the booking.
• Booking details: dates, number of guests, cabins and who shares with whom.
• Identity details for the passenger list: names as in the passport, nationality and passport numbers where the boarding pass and the park ticket require them.
• Dietary and medical notes, for catering and safety on board, and for nothing else.
• Payment details: the provider you pay through receives what that payment needs, which can include your email address.

We collect only what the trip needs. The legal basis is the contract you make when you book, our legitimate interest in running and securing the service, and your consent where we ask for it, as in the advertising section below.

When you message us on WhatsApp, we receive your phone number, your profile name and the content of your messages through the WhatsApp Business Cloud API, operated by Meta Platforms. We use them to answer you and to manage the booking. The conversation can be mirrored into our customer system so that whoever helps you can read the history.

We apply no fixed maximum retention period to WhatsApp history. It stays as part of the booking and service records until you ask us to delete it.

Some message text can be processed by an AI service, Cerebras Systems in the United States, to help our team understand a request and draft or route a reply. That processing prepares a reply. It does not accept a booking, reject one or set a price, and a person handles every decision that affects your reservation.

Brevo sends our transactional emails, such as booking confirmations, using your name and email address.

We use Microsoft Clarity to see how visitors use the site. It records interactions as session replays and heatmaps, which helps us find technical friction. Microsoft processes that data under its own privacy statement.

With your consent, and only then, we share a one-way hash of your email address or phone number with Google and Meta, together with technical ad identifiers such as GCLID and fbclid. The purpose is to measure whether our advertising worked. If you decline, we share neither with Google or Meta.

You can withdraw consent at any time through the privacy banner or by writing to us. Withdrawal applies from that moment on and changes nothing about your booking, the service or the price.

Our internal systems connect to Google Ads, Analytics, Search Console, Drive and Sheets through the company's own accounts. We do not access or store the Google account data of visitors or customers.

• Meta Platforms: the WhatsApp channel and the advertising identifiers described above.
• Cerebras Systems: AI assistance with message text.
• Payment providers: card payments, PayPal, Wise, Revolut, QRIS, Alipay and our partner for WeChat Pay receive the details the chosen method needs. A bank transfer runs through your own bank.
• Brevo: transactional emails.
• Google: an off-site backup of our operational database, which can include booking and message records.
• Cloudflare: delivery, DNS and security for the website.

We do not sell your personal data. Some providers are outside Indonesia, including in the United States. Where data crosses a border, we rely on each provider's own protections and contractual safeguards. Backups sit in an access-restricted folder, and older ones are removed automatically.

You can ask to see the data we hold about you, to correct it or to have it erased. To ask for deletion, email sales@nk-jaya-phinisi.pages.dev with the subject line Data deletion request, or message us on WhatsApp. Use the phone number, email or booking reference tied to your data. We can ask you to verify who you are first.

We confirm receipt and finish the deletion within 30 days of verification, or tell you which part we cannot complete and why. It removes your contact details and conversation history from our systems, your consent records and identifiers, and free-text notes.

Indonesian law requires us to keep invoices, payment records and accounting entries for completed bookings for a statutory period. We keep the minimum needed and anonymize the rest. Deleting our copy does not delete your copy of a WhatsApp chat or Meta's.