1. Introduction

This Privacy Policy explains how Gili Boat Booking ("we", "us") collects, uses, stores, and protects your personal data when you use our website to book fast-vessel tickets, private charters, or snorkeling packages to the Gili Islands.

By using our website and making a booking, you agree to the collection and use of information as described in this policy, in accordance with Indonesia's Personal Data Protection Law (UU No. 27/2022).

2. Information We Collect

When you make a booking, we collect the personal data you provide directly: full name, email address, phone number, country of residence, and any notes or special requests you add to your order.

We also collect booking details such as vessel, route, travel date, and number of passengers, which are needed to issue your ticket and coordinate with the vessel operator.

Our website uses basic analytics (Google Analytics) to understand traffic and improve the site. This collects non-identifying technical data such as browser type, device, and pages visited.

3. How We Use Your Information

To process and confirm your booking, generate your e-ticket, and send booking confirmations or updates by email or WhatsApp.

To communicate with you about your trip, including schedule changes, cancellations, or refunds.

To share the minimum necessary details (name, passenger count, travel date) with the licensed vessel operator so they can prepare your check-in.

To comply with legal or regulatory obligations, and to improve our services based on aggregated, non-identifying usage data.

4. Payment Data

All online payments are processed by our licensed third-party payment gateway, iPaymu. We do not collect or store your card, e-wallet, or bank account credentials on our servers — this information is handled directly by iPaymu under its own security standards and privacy policy.

We only receive the payment status and transaction reference needed to confirm your booking.

5. Data Sharing

We do not sell your personal data. We share it only with parties directly involved in fulfilling your booking: the licensed vessel operator for your trip, and our payment gateway (iPaymu) for processing payment.

We may disclose information if required by law, regulation, or a valid request from Indonesian authorities.

6. Data Retention

We retain booking and customer data for as long as necessary to fulfil your booking, handle any post-trip disputes or refunds, and meet our tax and accounting obligations, after which it is deleted or anonymized.

7. Your Rights

You have the right to request access to, correction of, or deletion of your personal data held by us, subject to any legal retention requirements. You may also withdraw consent to non-essential communications at any time.

To exercise these rights, contact us using the details in the Contact Us section below.

8. Data Security

We use industry-standard measures, including HTTPS encryption on our website, to protect your personal data from unauthorized access, alteration, or disclosure. No method of transmission over the internet is completely secure, but we work to protect your information to the best of our ability.

9. Cookies

Our website may use cookies and similar technologies for basic site functionality and analytics. You can control or disable cookies through your browser settings; some website features may not function properly if cookies are disabled.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date below indicates when this policy was last revised.

11. Contact Us

If you have any questions about this Privacy Policy or how your data is handled, please reach out to our team. The fastest way to get in touch is via WhatsApp — we typically reply within a few minutes during operating hours.