Privacy and data on Bombana Sailing Komodo

Four kinds of data reach us. First, what you send when you ask or book: name, email, phone number, nationality, passport details for the park boarding pass and the passenger list, and dietary or medical needs that matter on board. Second, payment details handled by the payment provider, not stored by us as card numbers. Third, the messages you send us on WhatsApp or email. Fourth, how you use this site, through analytics.

Passport details are for the park ticket and the harbour passenger list only. Health details are asked when they affect your safety on the boat.

To answer your enquiry, confirm a booking, register you with the park and the harbour office, take payment, send confirmations and look after you on the trip. Analytics show us where this website confuses people. Marketing measurement happens only if you agree to it.

Nothing here sells your details. The data runs your trip and improves the service.

Our team sees it, and the boat crew sees what the trip needs, such as names and dietary notes. A few providers handle data for us: WhatsApp and Meta for messaging, Xendit and PayPal for payments, Brevo for confirmation emails, Google for backups and business tools, and Cloudflare for security in front of this site. An AI tool from Cerebras helps our team draft replies to some messages. A person is involved in every booking, and no price or booking is decided by software alone.

Some of these providers sit outside Indonesia, including in the United States. We rely on their own data-protection commitments and contract terms for those transfers.

No fixed limit applies to WhatsApp history. It stays with our booking and service records until you ask us to delete it. Indonesian law requires us to keep financial and tax records for a statutory period, so invoices and payment records linked to completed bookings stay, in the minimum form required. Operational backups are kept in a limited number and older ones are removed automatically.

You can ask to see, correct or delete the data we hold about you, under Indonesia's Personal Data Protection Law (UU No. 27 of 2022) and, for visitors from the European Economic Area, under the GDPR. To ask for deletion, email info@komodoexplorer.com with the subject "Data deletion request", or message us on WhatsApp with your name and booking reference. We confirm receipt within a few business days and finish within 30 days of checking your identity, or tell you what we must keep and why.

Deleting our copy does not delete yours on your phone, or Meta's copy of a WhatsApp chat.

We use Microsoft Clarity to see how visitors move through the site, with session replays and heatmaps, processed under Microsoft's privacy statement. If you agree to marketing measurement, we share your email or phone number, one-way hashed, with Google and Meta to measure whether our advertising worked. Decline, and we share nothing. Withdraw later through the privacy banner. Your booking, availability and price don't change either way.

Questions go to the contact page. The terms cover the booking side.