Privacy Policy
Last updated: 2026
This Privacy Policy explains how Luxury Bali Trip ("we", "us", "our") collects, uses, shares, and protects personal data when you visit or use the Luxury Bali Trip website and related services. Luxury Bali Trip is an independent Bali, Indonesia guide and concierge website operated by Bali Premium Trip and published by Juara Holding Group.
We are committed to protecting your privacy in accordance with applicable data protection laws, including Indonesia's Personal Data Protection Law (Undang-Undang Pelindungan Data Pribadi / "UU PDP" No. 27/2022) and, where applicable, the EU and UK General Data Protection Regulation (GDPR).
Contact Details
If you have any questions about this Privacy Policy or about your personal data, you may contact us at:
- Email: info@luxurybalitrip.com
Scope of This Policy
This Privacy Policy applies to:
- The Luxury Bali Trip website and any subpages;
- Contact and inquiry forms hosted on our website;
- Our communication with you via email, WhatsApp, or other channels listed on our website.
Personal Data We Collect
Information You Provide to Us
We may collect the following personal data directly from you, for example when you fill in a contact form, request a concierge service, sign up for updates, or communicate with us:
- Identification and contact details, such as your name, email address, phone or WhatsApp number, and country of residence;
- Trip and service details, such as travel dates, accommodation preferences, budget, and special requests you choose to share;
- Communication content, including messages, feedback, and any other information you voluntarily provide to us via forms, email, or messaging apps.
Information Collected Automatically
When you visit our website, certain information is collected automatically:
- Usage data: pages visited, links clicked, time and date of visit, referring website, approximate location based on IP address, and device/browser information.
- Cookies and similar technologies: small text files or similar tools stored on your device to remember your preferences and understand how visitors use our website.
- Server logs: IP address, browser type and version, operating system, access times, and any error or diagnostic information related to the use of our hosting infrastructure.
This information is usually collected through our web hosting provider and analytics tools.
How We Use Personal Data
We use your personal data only for lawful purposes and, where applicable, on the following grounds: performance of a contract or steps prior to entering a contract, compliance with legal obligations, legitimate interests, or your consent.
Primary Purposes
- Responding to inquiries: to answer your questions, provide information about Bali, and communicate about our guide and concierge services.
- Providing and managing services: to plan, arrange, and manage travel-related services and experiences you request from us.
- Customer support: to provide assistance, manage complaints, and handle follow-up communication.
Improvement and Analytics
- Website performance and analytics: to understand how visitors use our website, improve content and navigation, and address technical issues.
- Security and fraud prevention: to monitor for suspicious activity, secure our website and systems, and protect our rights and those of our users.
Marketing and Communications
- Updates and offers: with your consent, to send you updates about Bali, special experiences, or services we think may interest you.
- Opt-out: you may unsubscribe from any marketing communications at any time by following the instructions in the communication or by contacting us.
Legal Bases for Processing (EU/UK Visitors)
For visitors from the EU/EEA and the UK, we process personal data on the following legal bases under the GDPR:
- Contract: where processing is necessary to provide our services or respond to your requests.
- Legitimate interests: for website security, analytics, and improvement, provided your rights and interests do not override our interests.
- Consent: for certain cookies, analytics, and direct marketing communications, where required by law.
- Legal obligation: where we are required to process or retain data to comply with applicable laws and regulations.
Cookies and Similar Technologies
We use cookies and similar technologies to help our website function correctly, remember your preferences, and understand how visitors use our pages.
Types of Cookies
- Strictly necessary cookies: essential for basic website operation, such as security and load balancing. These cannot usually be disabled through our systems.
- Performance and analytics cookies: help us understand website traffic and usage patterns so we can improve our content and user experience.
Depending on your location, you may see a cookie banner or settings tool that allows you to accept or reject certain categories of cookies. You may also control cookies through your browser settings, but disabling some cookies may affect website functionality.
Third Parties and Data Sharing
We do not sell your personal data. We may share personal data with the following categories of recipients, only as needed for the purposes described above:
Service Providers
- Web hosting and infrastructure providers: companies that host our website and store information, including server logs.
- Analytics providers: third-party tools that measure website usage and performance, using cookies or similar technologies.
- Communication tools: email and messaging providers (including WhatsApp, where you contact us there) used to send and receive messages.
These service providers act as data processors or operators and are contractually bound to protect your personal data and to use it only for the services they provide to us.
Concierge and Travel Partners
When you request specific services, such as private drivers, villa stays, tours, or other travel experiences in Bali, we may share limited personal data with local partners and suppliers as necessary to arrange and deliver those services (for example, your name, contact details, and booking details). Where required, we will inform you before sharing such data and may seek your explicit consent.
Legal and Regulatory Disclosures
We may disclose personal data if required to do so by law, regulation, court order, or government request, or to protect our rights, safety, or the rights and safety of others, and to prevent fraud or security incidents.
International Data Transfers
Our operations and service providers may be located in Indonesia and in other countries. As a result, your personal data may be transferred to and processed in jurisdictions that may have different data protection rules than your home country.
Where required by the GDPR, we take steps to ensure that international data transfers are subject to appropriate safeguards, such as standard contractual clauses or equivalent mechanisms, and that your rights and protections travel with your data.
Data Retention
We keep personal data only for as long as necessary for the purposes for which it was collected, and to comply with applicable legal, tax, and accounting requirements.
- Inquiry and contact data: generally kept for up to 3 years from the date of last contact, unless a longer period is required for legal claims or record-keeping.
- Service and booking data: retained for the duration of the service and for any additional period required by local law or to protect our legitimate interests.
- Analytics data and logs: retained in accordance with our hosting and analytics providers' policies, usually for a limited period sufficient for security, diagnostics, and analysis.
When we no longer need personal data, we will delete it or anonymize it so that it no longer identifies you.
Data Security
We take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or alteration. These measures may include secure hosting, access controls, encryption in transit where appropriate, and regular monitoring of our systems.
However, no method of transmission over the internet or method of electronic storage is completely risk-free. While we aim to protect your data, we cannot guarantee absolute security.
Children's Data
Our website and services are intended for adults. We do not knowingly collect personal data from children under the age of 18 without verifiable consent from a parent or legal guardian, as required by applicable law.
If you believe that a child has provided personal data to us without appropriate consent, please contact us at info@luxurybalitrip.com, and we will take steps to delete the information as soon as reasonably possible.
Your Rights Under Indonesian Law (UU PDP)
Under Indonesia's Personal Data Protection Law (UU PDP No. 27/2022), you may have the following rights regarding your personal data:
- The right to obtain information about the clarity of identity, legal basis, and purpose of personal data processing;
- The right to access and obtain a copy of your personal data held by us;
- The right to correct or complete inaccurate or incomplete personal data;
- The right to end processing, delete, or anonymize personal data in certain circumstances;
- The right to withdraw consent, where processing is based on your consent;
- The right to object to automated decision-making that has legal or significant effects on you, if applicable;
- The right to file complaints with the relevant Indonesian authority.
Your Rights Under the GDPR (EU/UK Visitors)
If you are located in the EU/EEA or the UK, you may have additional rights under the GDPR, including:
- The right to be informed about how your data is used;
- The right of access to your personal data;
- The right to rectification of inaccurate or incomplete data;
- The right to erasure ("right to be forgotten") in certain circumstances;
- The right to restrict processing under specific conditions;
- The right to data portability, where technically feasible, for data you provided to us on the basis of consent or contract;
- The right to object to processing based on our legitimate interests or for direct marketing;
- The right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
- The right to lodge a complaint with a supervisory authority in your country or in the country where you believe a breach has occurred.
How to Exercise Your Rights
To exercise any of the rights described above, or to ask a question about your data, please contact us at:
- Email: info@luxurybalitrip.com
We may ask you to provide certain information to verify your identity before fulfilling your request. We will respond within the time limits set by applicable law.
Third-Party Websites
Our website may contain links to third-party websites or services, including partners, travel providers, or social media platforms. This Privacy Policy does not cover the privacy practices of those third parties. We encourage you to review the privacy policies of any websites you visit from our links.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or privacy practices. When we make changes, we will revise the "Last updated" date at the top of this page. In case of significant changes, we may provide additional notice on our website or by direct communication, where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how we handle personal data.