Who we are
Tour Pulau is a tour organiser based in Bali, Indonesia, running trips in Bali and Lombok. We are responsible for the personal data described here. Contact us at hello@tourpulau.com.
What we collect
- Booking and enquiry details you send us: name, email, phone or WhatsApp number, country, travel dates, group size, chosen trip and options, pick-up area, hotel or villa name, flight details and any message you write.
- Messages you send us by email or WhatsApp.
- A partner code, if you arrived through one of our affiliate partners' links, so we can thank and pay them for the referral. We tell the partner that a booking was made, not your personal details.
- Technical data our hosting provider records automatically when you visit, such as IP address, browser type and pages requested, kept for security and to keep the site running.
We don't ask for passport numbers or card details on this website. If a supplier needs passport details (for example a boat operator or hotel), we ask for them separately and only share them with that supplier.
How we use it
- To reply to your enquiry, confirm availability and send prices and payment details.
- To arrange your trip: hotels, drivers, guides, boats, tickets and transfers.
- To contact you before and during your trip, including on WhatsApp.
- To keep records required by law, such as payment and accounting records.
- To keep the website secure and working.
We use your data because you asked us to plan or book a trip (to take steps towards and perform a contract), because the law requires it, or for our legitimate interest in running a safe website. We don't send marketing emails unless you've agreed to receive them.
Who we share it with
- Suppliers of your trip — hotels, drivers, guides, boat and activity operators — only the details they need, such as names, group size, dates and pick-up place.
- Service providers who help us run the website: Vercel (hosting) and Supabase (our database, hosted in the European Union). They process data on our instructions.
- Authorities, if the law requires it.
We never sell or rent your personal data.
Maps
Trip pages show route maps from Google Maps. When a map loads, Google receives your IP address and may set its own cookies, under Google's privacy policy. Place photos on our pages are loaded through our own server, so they don't send your data to Google.
How long we keep it
Enquiries that don't become a booking are deleted within 2 years. Booking records are kept for as long as Indonesian tax and accounting rules require. Hosting logs are kept for a short time only.
Your rights
Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and, if you live in the EU or UK, the GDPR, you can ask to see the data we hold about you, correct it, delete it, get a copy, or object to how we use it. Email hello@tourpulau.com and we'll reply within 30 days. You can also complain to your local data protection authority.
Security
Our website uses HTTPS, our database is protected with access controls, and only our team can see booking details.
Cookies
We don't use advertising or analytics cookies. See our cookie policy.
Changes
If we change this policy, we'll update the date at the top of this page.