Privacy Policy

This website is operated by PT. UNIKAT Grup Indonesia, Sunset Road 27x, 80361 Badung, Bali, Indonesia (Tax ID: 53.422.856.4-905.000). We are committed to protecting the privacy of all visitors and customers.

For any privacy-related questions, please contact us at: [email protected]

We collect the following types of personal data:

• Booking & Inquiry Data: Name, email address, phone/WhatsApp number, hotel name, preferred tour dates, group size, and special requests — provided when you make a booking or inquiry.
• Rental Data: Name, contact details, rental period, pickup/delivery location — provided when you rent an e-bike.
• Waiver Data: Name, emergency contact, medical conditions — provided when signing our tour waiver for safety purposes.
• Usage Data: Pages visited, time spent on pages, referral source, device type, and browser type — collected automatically via cookies and analytics tools.
• Communication Data: Messages sent via WhatsApp, email, or contact forms.

We use your personal information for the following purposes:

• Processing and managing your tour bookings and e-bike rentals
• Communicating with you about your booking, changes, or cancellations
• Sending booking confirmations and tour reminders
• Emergency contact in case of an incident during a tour
• Improving our website, services, and customer experience
• Analyzing website traffic and usage patterns (anonymized)
• Complying with legal obligations under Indonesian law

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Our website uses the following technologies:

• Google Analytics (GA4): We use Google Analytics to understand how visitors interact with our website. This collects anonymized data such as pages visited, session duration, and traffic sources. Google may process this data on servers outside Indonesia. Google Privacy Policy
• Google Tag Manager (GTM): Used to manage analytics and marketing tags on our website. GTM itself does not collect personal data.
• Google Translate: We offer an automatic translation feature powered by Google Translate. When activated, Google may process text content and set cookies. Google Privacy Policy
• Essential Cookies: Required for the website to function properly (e.g., session cookies for the partner login area).

You can disable cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website.

We may share your data with the following parties, solely for the purpose of providing our services:

• Hotel Partners: If you book through a hotel partner, we share necessary booking details with that partner for coordination.
• Tour Guides & Staff: Names and relevant details are shared with our tour guides to ensure a safe and personalized experience.
• Cloud Hosting: Our website and data are hosted on secure cloud infrastructure (Amazon Web Services). Data may be stored on servers outside Indonesia.
• WhatsApp / Meta: When you contact us via WhatsApp, your messages are processed by Meta Platforms. WhatsApp Privacy Policy

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by Indonesian law. Typically:

• Booking records: retained for 5 years for tax and legal purposes
• Waiver forms: retained for 2 years after the tour date
• Analytics data: anonymized and aggregated, not linked to individuals
• Communication records: retained for 1 year after last contact

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Objection: Object to the processing of your data for specific purposes.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• SSL/TLS encryption for all data transmitted via our website
• Secure cloud hosting with access controls
• Password-protected partner and admin areas
• Regular security reviews

Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us so we can delete it promptly.

This Privacy Policy is governed by the laws of the Republic of Indonesia, including Law No. 27 of 2022 on Personal Data Protection (UU PDP). Any disputes arising from this policy shall be subject to the jurisdiction of the courts in Bali, Indonesia.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.