Privacy Sovereignty

We adhere to the highest global standards. Whether you are a resident of the European Union (GDPR), California (CCPA), or Indonesia (OJK/PDP), your data is treated with the same military-grade protection.

We use Microsoft Clarity to better understand how you use our website. Clarity captures how you interact with our site using session replays and heatmaps. This information helps us improve your user experience and identify technical friction points. Data is processed in accordance with Microsoft's Privacy Statement.

We collect only what is necessary for a seamless expedition: identity verification for maritime manifest, dietary/medical requirements for onboard safety, and payment orchestration for secure charters.

Your data is encrypted at rest and in transit using industry-leading protocols. Our infrastructure is audited for 'Universal Hegemony' security standards, ensuring no unauthorized access.

You maintain absolute sovereignty over your data. You have the right to request access, rectification, or complete erasure ('Right to be Forgotten') from our global registries at any time.

With your consent, we share certain identifiers — your email and/or phone number, irreversibly hashed (SHA-256) — with Google and Meta solely to measure the effectiveness of our advertising (conversion measurement), alongside technical ad identifiers such as GCLID and fbclid. This is done only on the basis of your consent under Indonesia's Personal Data Protection Law (UU No. 27 of 2022) and applicable GDPR rules. You may withdraw your consent at any time via the privacy banner; withdrawal applies going forward and does not affect our service, availability, or pricing. If you decline, we do not share your email or phone number with Google or Meta.

Our internal business systems connect to Google API Services — Google Ads, Google Analytics, Google Search Console, and Google Drive/Google Sheets — through secure OAuth authorization granted by our own company Google accounts. Data accessed: advertising campaign statistics, aggregated website analytics reports, search performance data, and operational spreadsheets (such as vessel schedules) belonging to our company accounts. We do not access, collect, or store the Google account data of website visitors or customers. Data usage: this information is used solely to operate, measure, and improve our own services and advertising campaigns, and for no other purpose. Storage and protection: OAuth credentials are stored server-side in access-restricted configuration, transmitted only over encrypted connections (TLS), and are never exposed in client-side code; access is limited to authorized administrators. Sharing: we do not sell, rent, or transfer Google user data to third parties. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements (developers.google.com/terms/api-services-user-data-policy). You may revoke this access at any time in your Google Account permissions (myaccount.google.com/permissions) or by contacting info@komodoexplorer.com.