Privacy Policy

Bali Exotic Travel is a locally based tour operator in Lovina, North Bali, Indonesia. We are the controller of the personal data described in this policy. For any privacy question, write to info@baliexotictravel.com.

When you make an enquiry or booking we collect your name, email address, phone number (for example your WhatsApp number), travel dates, number of guests and any details you share with us about your trip.

If you contact us through a form, live chat or social media we keep the conversation so we can answer you properly.

We use your data to confirm and deliver your bookings, communicate before and during your trip, process payments, respond to questions and, only with your consent, send you occasional travel inspiration from North Bali.

We never sell your personal data to anyone.

We process your data to perform the contract with you (delivering your booking), on the basis of our legitimate interest in answering enquiries and running our business, and, for marketing emails, on the basis of your consent which you can withdraw at any time.

Only the service providers that make your trip possible: guides, drivers and activity partners who deliver the tour you booked, and our hosting, payment and email providers under data processing agreements. They may only use your data for that purpose.

Some of these providers are located outside the EEA; we rely on standard contractual clauses or equivalent safeguards for those transfers.

Booking records are kept for the period required by Indonesian tax and accounting law. Enquiries that never become bookings are deleted after 12 months. Marketing consent data is kept until you unsubscribe.

Our website uses only the cookies strictly necessary for it to function — for example to keep your session or your booking form working. We do not run advertising trackers.

You can ask us at any time for a copy of your data, a correction, deletion, restriction of processing or a portable export, and you can object to marketing. Write to info@baliexotictravel.com and we will answer within 30 days.

If you are in the EEA/UK you also have the right to complain to your local data protection authority.

We protect your data with encrypted connections (HTTPS), access limited to team members who need it, and reputable hosting providers. No method of transmission is perfectly secure, but we work continuously to keep your data safe.

If this policy changes we publish the new version on this page with an updated date. Significant changes affecting how we use your data will be communicated directly to you.