Privacy Policy

Last updated: 16 October 2026

This policy explains what personal data DiveTrips.id collects when you browse the site, send an inquiry or book a liveaboard trip, why we need it, who sees it and what you can ask us to do with it.

1. Who we are

DiveTrips.id (Dive Trips Indonesia) arranges sharing trips, private charters and diving charters on Komodo liveaboards. We decide how your data is used, so we are the “controller” of it. Legal entity and address: [TO CONFIRM: company legal name, registration and office address]. Contact: booking@divetrips.id or WhatsApp +62 821 5161 1193.

2. The data we collect

• When you book a cabin: full name, email address, WhatsApp number, country, gender, the number of guests, how many are Indonesian citizens or under 2 years old (used to work out the park fee), your notes (for example dietary needs), the cabins and trip you chose, and how you choose to receive your invoice.
• When you send an inquiry or a private charter request: name, email, WhatsApp number, dates, number of guests, certification level for dive trips, and your message.
• Payments: the amount, date, method and reference of each payment you make by bank transfer, Wise or Revolut. We do not take card payments on this website and we do not store card numbers.
• Technical data: your IP address (used to limit spam and abuse of our forms), browser type and the pages you visit, collected by the website and its security and speed tools.
• Messages: what you write to us by email or WhatsApp.

3. Why we use your data, and on what basis

• To confirm and run your booking, send invoices and payment reminders, and arrange your trip (performance of our contract with you).
• To answer your inquiries and questions (at your request).
• To pay the Komodo National Park entrance fee and give the crew, boat operator and authorities the passenger details they need for your trip (to carry out the contract and to meet legal and safety duties).
• To keep accounting and tax records (legal obligation).
• To keep the website secure, prevent spam and improve it (our legitimate interest).
• To send you service messages about your booking. We do not send marketing email unless you ask for it [TO CONFIRM: confirm: no newsletter or marketing emails at launch].

4. Who receives your data

We share data only as far as needed to run your trip:

• The boat operator, captain and crew of the vessel you book (names, number of guests, nationality counts, dietary needs, contact details, pick-up information).
• Port, harbour and Komodo National Park authorities, where they require a passenger list or fee details.
• Our service providers: our website host, our email service, Google (Google Sheets, where our team keeps the guest database), and the banks and payment services you choose to pay with.
• Authorities, when the law requires it.

We do not sell your personal data.

5. Transfers outside your country

Your data is processed in Indonesia and by service providers whose servers may be in other countries, for example Google. When data leaves your country, we use providers that protect it to a recognised standard [TO CONFIRM: name the hosting and email providers and where their servers are].

6. How long we keep it

We keep booking, invoice and payment records for [TO CONFIRM: retention period, for example 5 years, as required by Indonesian tax and accounting rules]. Inquiries that do not become a booking are deleted after [TO CONFIRM: for example 12 months]. Website security logs are kept for a short time only. After that we delete the data or make it anonymous.

7. Your rights

You can ask us to show you the data we hold about you, correct it, delete it, limit or stop how we use it, or give you a copy you can take elsewhere. You can also withdraw a consent you gave. These rights come from Indonesia’s Personal Data Protection Law (Law No. 27 of 2022) and, if you live in the European Economic Area or the United Kingdom, from the GDPR. To use them, write to booking@divetrips.id. We answer within 30 days. Some records we must keep by law, and we will tell you if so. If you are unhappy with our answer you can complain to the data protection authority of your country.

8. Cookies and analytics

The website uses cookies that it needs to work, for example to keep a booking form going and to protect forms from spam. [TO CONFIRM: if Google Analytics, Search Console tracking or advertising pixels are added at launch, list them here with a cookie banner; at the moment none are active]

9. Children

Bookings are made by adults. We ask for the number of children under 2 only to work out the park fee, and we do not collect other data about children, apart from what a parent tells us in a booking note.

10. Keeping your data safe

Bookings are stored in a protected database, invoice links contain a private key, access to our guest database is limited to our team, and our systems record who changed a booking. No system is completely safe, so please tell us at once if you think your data has been misused.

11. Changes to this policy

If we change how we use data, we update this page and its date. Related pages: Terms & Conditions, Payment Policy and Cancellation Policy.

12. Contact

DiveTrips.id · booking@divetrips.id · WhatsApp +62 821 5161 1193