Privacy policy

• Booking details: name, email, phone / WhatsApp, travel date, time slot, group size (adults/children), hotel & pickup area, notes you send us.
• Support messages: WhatsApp and email conversations so we can handle date changes, refunds and quotes.
• Technical data: basic device, pages visited and cookies needed for cart, login and analytics (see §5).
• Reviews (optional): name, country and review text — only published with your permission.
• We do not collect or store full card numbers — payments are processed by secure third-party providers.

• Confirm bookings, send mobile tickets and pickup details.
• Notify you about schedule, weather or meeting-point changes.
• Process cancellations, reschedules and refunds (see refund policy).
• Improve experiences, prevent fraud and answer support requests.
• Marketing only with consent — every message has an opt-out, and a single “STOP” on WhatsApp unsubscribes you.

• Experience operators & drivers: name, date, group size and pickup info — only what's needed to run your tour.
• Payment providers: to process and refund payments securely.
• Service tools: hosting, analytics and messaging providers under strict processing agreements.
• Authorities only when legally required. We never sell data to advertisers or data brokers.

• Booking records: kept for accounting and dispute resolution (typically up to 5 years under Indonesian record-keeping practice), then deleted or anonymised.
• Support chats: up to 2 years for service quality, unless you ask for earlier deletion.
• Marketing consents: until you withdraw consent.

We use strictly-necessary cookies for cart, login and security, plus privacy-friendly analytics to understand which experiences are popular. You can block cookies in your browser — the site still works, but cart and login may not remember you. We do not use cross-site advertising trackers.

• Access, correct or delete your personal data at any time.
• Withdraw marketing consent (“STOP” on WhatsApp or reply to any email).
• Ask for a copy of the data we hold about you.

Email hello@balitours.co.id with subject “Privacy request” — we respond within 7 days and complete deletion promptly unless the law requires us to keep accounting records.

Data is transmitted over HTTPS with access limited to staff who need it. No system is 100% secure — if you suspect misuse, tell us immediately. Our experiences are booked by adults; we do not knowingly collect data directly from children under 13.

Data controller: BaliTours, Bali, Indonesia · hello@balitours.co.id · Contact page. See also our Terms & conditions.