Privacy Policy

Last updated: 2026

This Privacy Policy explains how Labuanbajoinvestment (“we”, “us”, “our”) collects, uses, shares, and protects your personal data when you visit or use our website and services. Labuanbajoinvestment is an independent Labuan Bajo, Flores, Indonesia guide & concierge website operated by Bali Premium Trip and published by Juara Holding Group.

By using this website, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the website.

Data Controller and Contact Details

The main controller of your personal data for this website is:

Labuanbajoinvestment
Operated by: Bali Premium Trip
Published by: Juara Holding Group
Email: sales@balipremiumtrip.com

For any questions about this Privacy Policy or your personal data, you may contact us by email.

Personal Data We Collect

1. Data You Provide Voluntarily

Contact form data: When you fill out a contact or enquiry form, we may collect your name, email address, phone/WhatsApp number, travel dates, destination interests, budget, and any other information you choose to share in your message.
Direct communications: If you contact us by email, WhatsApp, or other channels listed on our site, we will process the content of your communication and any contact details you provide.

2. Data Collected Automatically

Cookies and similar technologies: When you visit our website, cookies and similar tools may collect information such as your IP address, browser type and version, device type, operating system, language settings, pages viewed, links clicked, and the date, time, and duration of your visit.
Analytics data: We may use web analytics services (for example, Google Analytics or similar) to gather aggregated information about how visitors use the site, which pages are popular, and how users reach the site.
Server logs: Our hosting provider may automatically record technical data in server logs, including IP address, browser information, referring URL, pages visited, and error codes, to ensure the security and proper functioning of the website.

3. Data from Third-Party Sources

In some cases, we may receive limited personal data from third-party platforms when you interact with our content there (for example, social media profile name or contact if you message us via those platforms), subject to your privacy settings on those platforms.

How We Use Your Personal Data

We process your personal data for the following purposes and on the following legal bases:

To respond to enquiries and provide concierge guidance
We use your contact details and enquiry information to respond to your questions, provide travel guidance, and, where requested, discuss potential services or itineraries.
Legal basis (GDPR for EU/UK visitors): performance of a contract or taking steps at your request before entering into a contract; and/or your consent where required.
To provide and improve our website
We use analytics data and cookies to understand how visitors use our site, improve content, fix technical issues, and enhance user experience.
Legal basis (GDPR): our legitimate interests in managing and improving our services and website, and your consent where required for non-essential cookies.
To maintain security
Server logs and technical data are used to monitor, detect, and prevent malicious activity, fraud, or misuse of our services, and to ensure network and information security.
Legal basis (GDPR): our legitimate interests in ensuring the security and integrity of our systems and services, and compliance with legal obligations.
To comply with legal and regulatory obligations
We may process and retain data where required by Indonesian law, EU/UK law (for visitors from those regions), or other applicable regulations, including accounting, tax, and data protection rules.
To communicate with you
With your permission or where otherwise allowed by law, we may send service-related messages, replies, follow-ups to your requests, and administrative notices. We do not send bulk marketing emails without a valid legal basis and an option to unsubscribe.

Cookies and Similar Technologies

Cookies are small text files placed on your device when you visit a website. They can be “session” cookies (which expire when you close your browser) or “persistent” cookies (which stay on your device for a set period or until you delete them).

Types of Cookies We May Use

Strictly necessary cookies: Required for basic website functions such as page navigation, security, and session management. The site cannot function properly without these cookies.
Analytics and performance cookies: Help us understand how visitors interact with the site, which pages are visited most often, and if users encounter errors. This information is generally aggregated and does not identify you directly.

Depending on your location, you may be shown a cookie banner that allows you to accept or reject certain categories of cookies. You can also configure your browser to block or delete cookies; however, some site features may not work correctly if essential cookies are disabled.

Third-Party Recipients and International Transfers

We may share your personal data with the following categories of recipients, only to the extent necessary for the purposes described above:

Web hosting and IT service providers: Companies that host our website, store data, provide security, and support our technical infrastructure.
Analytics providers: Providers of analytics services that process information about your use of our site in an aggregated or pseudonymised way.
Email and communication providers: Email hosting services, and where applicable, messaging platforms such as WhatsApp when you choose to contact us that way.
Professional advisers and authorities: Lawyers, accountants, or government authorities where required by law, for the protection of our legal rights, or to respond to lawful requests.

Because we operate in Indonesia and work with service providers that may be located in other countries (including within and outside the European Economic Area and the United Kingdom), your data may be transferred internationally.

For transfers out of Indonesia, we follow the requirements of Indonesia’s Personal Data Protection Law (UU PDP No. 27/2022), including, where applicable, ensuring that the receiving country has an adequate level of protection, using appropriate contractual safeguards, or obtaining your consent.

For visitors in the EU/UK, where personal data is transferred to a country that the European Commission or UK authorities have not considered to provide an adequate level of protection, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms, or we ensure that transfers are otherwise permissible under the GDPR.

Data Retention

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected or to meet legal, accounting, or reporting requirements.

Contact and enquiry data: Stored for as long as needed to handle your enquiry, manage any ongoing communications or services, and for a reasonable period thereafter for record-keeping and dispute resolution, unless a longer retention period is required by law.
Analytics data: Retained in accordance with the policies and settings of our analytics providers, generally in aggregated form and for a limited period.
Server logs: Kept for a limited time necessary to ensure security and maintain the integrity of our systems, unless a longer period is required for investigation or legal reasons.

When data is no longer needed, we will delete it or anonymise it so that it can no longer be linked to an identifiable individual.

Your Rights Under Indonesian Law (UU PDP No. 27/2022)

Under Indonesia’s Personal Data Protection Law, you have certain rights in relation to your personal data, including:

The right to obtain information about the clarity of identity, legal basis, and purpose of processing your personal data.
The right to access and obtain a copy of your personal data in our possession, subject to lawful limitations.
The right to correct or update inaccurate or incomplete personal data.
The right to end processing, erase, or anonymise your personal data, subject to legal retention requirements and our legitimate interests.
The right to delay or restrict the processing of your personal data in certain situations.
The right to withdraw your consent at any time where processing is based on consent, without affecting prior processing that took place before withdrawal.
The right to object to decisions based solely on automated processing that significantly affect you, if and when such processing is used.

To exercise these rights, please contact us at sales@balipremiumtrip.com. We may need to verify your identity before fulfilling your request. We will respond within the timeframes set by applicable law.

Your Rights Under the GDPR (EU/UK Visitors)

If you are located in the European Economic Area or the United Kingdom, you also have the following rights under the GDPR, subject to conditions and exceptions:

Right of access: To obtain confirmation whether we process your personal data and, if so, access to that data and related information.
Right to rectification: To have inaccurate or incomplete personal data corrected.
Right to erasure (“right to be forgotten”): To request deletion of your personal data in certain circumstances.
Right to restriction of processing: To request limited processing of your data in specific situations.
Right to data portability: To receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller, where technically feasible and where processing is based on consent or contract.
Right to object: To object to processing based on our legitimate interests, and to object at any time to processing for direct marketing.
Right to withdraw consent: Where we rely on consent, you may withdraw it at any time.
Right to lodge a complaint: You may lodge a complaint with your local data protection authority if you believe your rights have been infringed.

To exercise any of these rights, please contact us at sales@balipremiumtrip.com.

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include secure hosting, access controls, and regular monitoring of our systems.

However, no method of transmission over the internet or method of electronic storage is completely secure. While we aim to protect your data, we cannot guarantee absolute security.

Children’s Data

Our website and services are intended for adults and are not directed to children under 18 years of age. We do not knowingly collect personal data from children under 18. If you are a parent or guardian and believe that a child has provided us with personal data, please contact us so that we can delete it.

Links to Other Websites

Our website may contain links to third-party websites, services, or social media platforms. We are not responsible for the privacy practices, content, or security of those external sites. We encourage you to review the privacy policies of any third-party services you visit or use.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make changes, we will revise the “Last updated” date at the top of this page.

We encourage you to review this Privacy Policy periodically. Your continued use of the website after any changes means that you accept the updated policy.

How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact us at:

Email: sales@balipremiumtrip.com