Last updated: 18 July 2026
Luxury Bali Private Tour (“we”, “us”, “this website”) is a private-tour concierge website for chauffeur-guided day tours, shore excursions, and bespoke itineraries across Bali. Bookings requested through this website are arranged and operated by Bali Premium Trip, a brand of Juara Holding Group, based in Indonesia. This Privacy Policy explains what personal data we collect when you browse this website or contact our concierge team, why we collect it, how long we keep it, and the rights you have over it. We have written it to comply with Indonesia’s Law No. 27 of 2022 on Personal Data Protection (UU PDP 27/2022) and to respect the principles of the EU/UK General Data Protection Regulation (GDPR) for visitors contacting us from the European Economic Area or the United Kingdom.
Who is responsible for your data
For the purposes of UU PDP 27/2022, the data controller for enquiries and bookings made through this website is Bali Premium Trip (Juara Holding Group), Indonesia. Because we deliberately run a lean, low-data operation, the fastest and only direct contact route for privacy questions is WhatsApp: +62 811-2859-0000. Send the word “PRIVACY” followed by your question and a team member will respond during Bali business hours (GMT+8).
What personal data we collect
We collect far less data than a typical online travel agency, because we do not process payments on this website and we do not require account registration. The personal data we handle falls into three groups:
1. Data you send us on WhatsApp. When you tap a WhatsApp button on this website, you open a chat with our concierge team. In that conversation you may share your name, your travel dates, the number of guests in your party, your hotel or villa name and pickup point in Bali, itinerary preferences, dietary or accessibility notes, and — only where a specific activity requires it (for example certain boat charters or attraction tickets) — passport names of participants. You control exactly what you share; we only ask for what a specific booking genuinely needs.
2. Data collected automatically when you browse. Like almost every website, our server records standard technical logs: IP address, browser type, pages viewed, and timestamps. These logs are used for security monitoring, debugging, and aggregate performance measurement. We do not use them to build individual visitor profiles.
3. Booking records. Once you confirm a tour, Bali Premium Trip keeps a written record of your itinerary, agreed rate, pickup details, and driver-guide assignment so the tour can actually be delivered and any dispute can be resolved against what was agreed in writing.
What we do not collect
We do not collect payment card details through this website. We do not run email marketing lists from this website and we do not ask for your email address as a condition of getting a quote. We do not knowingly collect data from children under 18; tours for families are booked by an adult, and children’s details (ages for seating and pricing) are provided by the booking adult.
Why we process your data (legal bases)
Under UU PDP 27/2022 Article 20 and GDPR Article 6, we rely on the following bases: performance of a contract — using your itinerary, pickup, and party details to prepare, quote, and operate the tour you asked for; consent — when you voluntarily open a WhatsApp conversation with us, you consent to us processing what you send in order to reply; you can withdraw consent at any time by telling us to delete the conversation; legitimate interests — keeping minimal booking records to handle complaints, prevent fraud, and meet our duty of care to guests and driver-guides; and legal obligation — retaining transaction records where Indonesian tax or tourism regulations require it.
Who we share data with
Your data is shared only with the people needed to deliver your tour: the assigned driver-guide (name, pickup point, party size, itinerary — never more), Bali Premium Trip operations staff, and third-party suppliers only when your itinerary includes their service (for example a boat operator who needs a passenger manifest). WhatsApp conversations are processed by WhatsApp LLC (Meta) under its own privacy policy and encryption; by contacting us on WhatsApp you also accept WhatsApp’s terms. We never sell personal data, we never rent enquiry lists, and we do not share your data with advertisers.
International transfers
Our operations are in Indonesia. If you contact us from the EEA, the UK, Australia, or elsewhere, your messages are transferred to Indonesia where our team reads and answers them. Indonesia’s UU PDP provides a national data-protection framework; where GDPR applies to you, we limit processing to what is necessary for the service you requested (GDPR Article 49(1)(b) — transfer necessary for the performance of a contract, or pre-contractual steps taken at your request).
How long we keep data
Enquiries that never become bookings are kept in WhatsApp for up to 12 months so we can pick up the conversation if you return, then deleted. Confirmed booking records are kept for up to 5 years to satisfy Indonesian bookkeeping and tax requirements, then deleted or anonymised. Server logs rotate automatically and are kept no longer than 90 days. You may request earlier deletion at any time (see your rights below); we will honour it unless a law requires us to keep a specific record.
Your rights
Under UU PDP 27/2022 (Articles 5–13) and, where applicable, GDPR (Articles 15–22), you have the right to: access a copy of the personal data we hold about you; correct inaccurate data; delete your data (“right to erasure”); withdraw consent for processing based on consent; object to processing based on legitimate interests; restrict processing while a dispute is resolved; and complain to the Indonesian data-protection authority or, for GDPR matters, your local supervisory authority. To exercise any right, message +62 811-2859-0000 on WhatsApp with the word “PRIVACY” and your request. We aim to respond within 72 hours and to complete requests within 30 days.
Cookies and analytics
This website uses only strictly necessary cookies (for caching and security) and privacy-respecting aggregate analytics to understand which pages are useful. We do not run advertising pixels, remarketing tags, or cross-site tracking on this website. Because we do not use non-essential cookies, we do not show a cookie-consent banner; if that changes, this policy and the website will be updated first.
Security
This website is served over HTTPS. WhatsApp conversations are end-to-end encrypted in transit by WhatsApp. Booking records are accessible only to operations staff who need them, and our team is instructed to request the minimum data necessary for each booking. No system is perfectly secure; if we ever become aware of a breach affecting your personal data, we will notify you and the relevant authority as required by UU PDP 27/2022 Article 46 (within 3×24 hours of becoming aware).
Changes to this policy
We may update this policy as our service or the law changes. The “Last updated” date at the top always reflects the current version, and material changes will be summarised there. Continued use of the website after an update constitutes acceptance of the revised policy.
Contact
All privacy questions, access requests, correction requests, and deletion requests: WhatsApp +62 811-2859-0000 (Bali Premium Trip concierge, GMT+8). This is our only monitored contact channel for this website, and it is the same channel used for bookings, so your request reaches the team that actually holds your data.