Bali Trip Point is operated by PT AURA AGENT AGENCY · NIB 2105260050389
Home/Privacy Policy

Privacy Policy

This policy explains what personal data Bali Trip Point collects, why, who receives it, how long it is kept and how you can use your rights. It follows Law No. 27 of 2022 on Personal Data Protection.

Last updated: 16 October 2026PT AURA AGENT AGENCY · NIB 2105260050389

1. Who is responsible

The personal data controller is PT AURA AGENT AGENCY, which operates Bali Trip Point.

Company
PT AURA AGENT AGENCY (brand: Bali Trip Point)
NIB
2105260050389
NPWP
1000000009571170
Registered address
Promenade Shop Unit S11, Jalan Kayu Tulang No. 82, Canggu, Kuta Utara, Badung, Bali 80363, Indonesia
Operational office
Jl. Sahadewa, Munggu, Kec. Mengwi, Kabupaten Badung, Bali 80351, Indonesia
WhatsApp
+62 896-7183-6304
Email
btpinfobali@gmail.com

2. Data we collect

  • Contact data: name, WhatsApp number, email address.
  • Booking data: dates, experiences, number and ages of guests, pickup address or hotel, special requests.
  • Data the operator needs for a specific activity, only when required: names of all guests, passport or ID number, weight or health information for safety, diving certificate, driving licence for self-drive cars.
  • Payment data: amount, date, payer name, bank or payment reference. For online payments we receive the payment status and reference from our payment partner; we do not receive or store full card numbers.
  • Correspondence: messages and files you send us on WhatsApp or by email.
  • Website data: our web server keeps standard technical logs (IP address, browser, pages requested) for security. The website does not use advertising or analytics cookies. Fonts are loaded from Google Fonts, and the Contact page shows a Google map; these services receive your IP address when the page loads.

3. Why we use it and on what basis

PurposeLegal basis
Answering your request, checking availability, preparing the offer and invoiceSteps you asked for before a contract; your consent
Booking the service with the operator and performing the bookingPerformance of the contract
Receiving payments, refunds, invoices and accounting recordsContract; legal obligations (tax and accounting)
Support, changes, complaints and disputesContract; legitimate interest
Safety requirements of the operatorContract; vital interests
Offers and news from Bali Trip PointOnly with your separate consent, which you can withdraw at any time

We do not make decisions about you based only on automated processing and we do not build profiles for advertising.

4. Who receives your data

  • Operators that perform your booking (boat companies, drivers, car rental companies, dive centres, activity providers): only the details they need.
  • Our payment partner, a licensed payment service provider, when you pay through an online payment link; and banks that process transfers and refunds.
  • Communication providers we use to talk to you: WhatsApp (Meta) and Gmail (Google).
  • Government authorities, only when Indonesian law requires it.

We do not sell personal data and do not give it to third parties for their own marketing.

5. Transfers outside Indonesia

WhatsApp, Gmail and Google Fonts may store or process data on servers outside Indonesia. We use these services only to communicate with you and to run the website, under their own security and privacy terms, and we share through them only what is needed for your booking.

6. How long we keep data

  • Bookings, invoices and payment records: for as long as Indonesian tax and accounting rules require (generally up to 10 years).
  • Requests that did not become a booking: up to 24 months after our last contact.
  • Documents for a specific activity (ID, licence, certificate): until the booking is completed and any dispute is closed.
  • Marketing consent: until you withdraw it.

After these periods we delete the data or make it anonymous.

7. Security

Access to customer data is limited to staff who handle your booking. We never ask for card numbers, PINs or one-time codes in chat. If a personal data breach happens, we notify the affected people and the authorities as required by Law No. 27 of 2022.

8. Your rights

Under Law No. 27 of 2022 you have the right to:

  • get information about how your data is processed;
  • access your data and get a copy;
  • correct or update your data;
  • have your data deleted or destroyed;
  • withdraw your consent;
  • restrict or postpone processing;
  • receive your data in a commonly used format;
  • object to decisions based only on automated processing;
  • file a complaint and claim compensation for a breach.

How to use them: write to btpinfobali@gmail.com or +62 896-7183-6304 with the subject "Personal data request". We may ask you to confirm your identity. We answer requests for access and correction within 3 × 24 hours of receiving them, and other requests within the time limits set by Law No. 27 of 2022. Some records (invoices, payments) must be kept by law even if you ask for deletion; we tell you if this applies.

9. Children

Bookings for children are made by a parent or guardian. We collect a child's name and age only when the operator needs them.

BrowseWhatsApp us