Privacy policyPrivacy policy

Personal data on this site is managed by [Company name], located at [Registered address].

We store the following data:

• Account data: name, email address, a hashed password (never the plain text) and your email language.
• Booking data: tour, travel date, number of travellers, contact name and phone number, the notes you write, and the price.
• Payment status: status, payment method, amount and payment time as reported by Midtrans.
• Reviews you write, with the name and country you provide.
• Session data: IP address and user agent of the device used to sign in, for account security.

Payments are processed by Midtrans. Card numbers, bank details and e-wallet credentials are entered directly on the Midtrans page and are never stored on our systems.

We use data to:

• Create and manage bookings, including passing special needs on to your hosts.
• Send transactional emails: booking confirmations, status changes, payments and password resets.
• Keep accounts secure, for example by limiting repeated sign-in attempts.

We only use two kinds of cookie: a session cookie to keep you signed in, and a language cookie to remember your site language. We currently use no analytics, advertising or third-party tracking cookies.

Data is shared only with parties needed to provide the service:

• Midtrans, to process payments.
• Our email provider, to send transactional emails.
• Your hosts and guides, limited to the contact name, number of travellers and relevant notes.

You can change your name and language at any time in My Account. To request a copy or deletion of your data, contact us. Some booking data may need to be kept longer for accounting purposes: [Data retention period].