Kedaulatan Privasi

Kami mematuhi standar global tertinggi. Baik Anda penduduk Uni Eropa (GDPR), California (CCPA), atau Indonesia (OJK/PDP), data Anda diperlakukan dengan perlindungan tingkat militer yang sama.

Kami menggunakan Microsoft Clarity untuk memahami bagaimana Anda menggunakan situs web kami. Clarity menangkap interaksi Anda melalui pemutaran ulang sesi dan peta panas (heatmaps). Informasi ini membantu kami meningkatkan pengalaman pengguna dan mengidentifikasi hambatan teknis.

Kami mengumpulkan hanya apa yang diperlukan untuk ekspedisi yang mulus: verifikasi identitas untuk manifes maritim, kebutuhan diet/medis untuk keselamatan di kapal, dan orkes pembayaran untuk carter yang aman.

Data Anda dienkripsi saat diam dan saat transit menggunakan protokol industri terkemuka. Infrastruktur kami diaudit untuk standar keamanan 'Hegemoni Universal', memastikan tidak ada akses yang tidak sah.

Anda memegang kedaulatan mutlak atas data Anda. Anda memiliki hak untuk meminta akses, perbaikan, atau penghapusan total ('Hak untuk Dilupakan') dari sistem kami kapan saja.

To request deletion of the personal data we hold about you — including data collected through WhatsApp — please follow the instructions at https://www.komodoexplorer.com/data-deletion.html. You may also contact us directly using the details in the Privacy Contact section below.

Dengan persetujuan Anda, kami membagikan identifier tertentu — alamat email dan/atau nomor telepon Anda yang di-hash satu arah (SHA-256, tidak dapat dikembalikan) — kepada Google dan Meta semata-mata untuk mengukur efektivitas iklan kami (pengukuran konversi), beserta identifier iklan teknis seperti GCLID dan fbclid. Hal ini dilakukan hanya atas dasar persetujuan Anda sesuai UU Pelindungan Data Pribadi Indonesia (UU No. 27 Tahun 2022) dan aturan GDPR yang berlaku. Anda dapat menarik persetujuan kapan saja melalui banner privasi; penarikan berlaku untuk ke depan dan tidak memengaruhi layanan, ketersediaan, atau harga. Jika Anda menolak, kami tidak membagikan email atau nomor telepon Anda kepada Google atau Meta.

Sistem bisnis internal kami terhubung ke Layanan Google API — Google Ads, Google Analytics, Google Search Console, serta Google Drive/Google Sheets — melalui otorisasi OAuth yang aman, yang diberikan oleh akun Google milik perusahaan kami sendiri. Data yang diakses: statistik kampanye iklan, laporan analitik situs web dalam bentuk agregat, data performa penelusuran, dan spreadsheet operasional (seperti jadwal kapal) milik akun perusahaan kami. Kami tidak mengakses, mengumpulkan, maupun menyimpan data akun Google milik pengunjung situs web atau pelanggan. Penggunaan data: informasi ini digunakan semata-mata untuk mengoperasikan, mengukur, dan meningkatkan layanan serta kampanye iklan kami sendiri, dan tidak untuk tujuan lain apa pun. Penyimpanan dan perlindungan: kredensial OAuth disimpan di sisi server dalam konfigurasi dengan akses terbatas, hanya ditransmisikan melalui koneksi terenkripsi (TLS), dan tidak pernah diekspos dalam kode sisi klien; akses hanya diberikan kepada administrator yang berwenang. Pembagian data: kami tidak menjual, menyewakan, atau mengalihkan data pengguna Google kepada pihak ketiga. Penggunaan informasi yang kami terima dari Google API mematuhi Google API Services User Data Policy (Kebijakan Data Pengguna Layanan Google API), termasuk ketentuan Limited Use (Penggunaan Terbatas) di dalamnya (developers.google.com/terms/api-services-user-data-policy). Anda dapat mencabut akses ini kapan saja melalui pengaturan izin Akun Google Anda (myaccount.google.com/permissions) atau dengan menghubungi info@komodoexplorer.com.

To operate our booking, communication, and payment services, we share limited personal data with the following third-party service providers, each for a specific purpose. Meta Platforms, Inc. operates the WhatsApp Business Cloud API channel you use when you message us on WhatsApp, and processes advertising identifiers (hashed email/phone, click identifiers) for ad conversion measurement described in Section 6. Cerebras Systems, Inc. (United States), an AI inference provider, may process WhatsApp message text to help our team draft or route a reply — see the Automated Processing and AI Assistance section below. Xendit (PT Xendit, Indonesia) and PayPal process your email address as part of creating and completing a payment for your booking. Brevo (formerly Sendinblue) sends transactional emails on our behalf, such as booking confirmations and account-related notices, using your name and email address. Google LLC, in addition to the Google API access described in Section 7, also maintains an off-site backup of our operational database — which may include your booking and message records — for disaster-recovery purposes; see the Backups section below. Cloudflare, Inc. provides content delivery, DNS, and security infrastructure in front of our website and WhatsApp integration, handling encrypted network traffic without independently storing your personal data for its own purposes. We do not sell your personal data to any third party. We enter into these relationships on the basis of performing our contract with you, our legitimate interest in operating and securing our services, or your consent for advertising measurement as described in Section 6 — consistent with Indonesia's Personal Data Protection Law (UU No. 27 of 2022) and, for EEA visitors, the GDPR. Some of these providers are located outside Indonesia, including in the United States. Where we transfer personal data internationally, we rely on each service provider's own data-protection commitments and contractual safeguards.

When you contact us through WhatsApp, we receive and store your phone number, profile name, and the content of your messages through the WhatsApp Business Cloud API, operated by Meta Platforms, Inc. We use this data to respond to your inquiry, manage your booking, and provide customer service; your conversation may be mirrored into our internal customer-relationship system so our team can see conversation history when assisting you. We do not currently apply a fixed maximum retention period to WhatsApp conversation history — it is retained as part of our customer-service and booking records unless you ask us to delete it. You can ask us to delete the data we hold about your WhatsApp conversations at any time (see Data Deletion Requests above); doing so does not delete your own copy of the conversation on your device, or Meta's own copy, which is governed by Meta's policies and managed separately through WhatsApp.

Some of your messages to us may be processed by an AI inference provider, Cerebras Systems, Inc. (United States), to help our team understand your request and draft or route a reply more quickly — for example, when a message does not match our standard automated responses, or to prepare a first-touch welcome message. This automated processing helps prepare a response; it does not make any decision that produces legal effects or similarly significantly affects you, such as accepting or rejecting a booking or setting a price, without a human being involved. Automated drafts are intended to support — not replace — our customer-service team, and a human is involved in your booking and in any decision that affects your reservation or its price.

We maintain regular backups of our operational database — which can include booking details and WhatsApp conversation records — for disaster-recovery purposes. These backups are stored in an access-restricted Google Drive folder used by our company, and we keep a limited number of recent backups, automatically removing older ones.

If you have questions about this policy or how we handle your personal data, or wish to exercise any of the rights described above, please contact PT Komodo Explorer Indonesia at info@komodoexplorer.com, or by mail at Jl. Kerta Dalem Sari IV No.2, Desa/Kelurahan Sidakarya, Kec. Denpasar Selatan, Kota Denpasar, Provinsi Bali, Kode Pos: 80224 (PT Komodo Explorer Indonesia, NIB 1805260128363).