隐私主权

我们遵循最高的全球标准。无论您是欧盟 (GDPR)、加利福尼亚 (CCPA) 还是印度尼西亚 (OJK/PDP) 居民，您的数据都受到同等军事级别的保护。

我们使用 Microsoft Clarity 更好地了解您如何使用我们的网站。Clarity 通过会话回放和热力图捕捉您与网站的互动方式。这些信息帮助我们改善您的用户体验并识别技术摩擦点。数据根据 Microsoft 的隐私声明进行处理。

我们只收集无缝远征所需的信息：海上清单的身份验证、船上安全的饮食/医疗要求和安全包船的支付编排。

您的数据在静止和传输过程中都使用行业领先的协议进行加密。我们的基础设施经过 '普遍霸权' 安全标准审计，确保未经授权的访问。

您保留对数据的绝对主权。您有权随时要求访问、更正或完全删除（'被遗忘权'）我们的全球记录中的数据。

To request deletion of the personal data we hold about you — including data collected through WhatsApp — please follow the instructions at https://www.komodoexplorer.com/data-deletion.html. You may also contact us directly using the details in the Privacy Contact section below.

在征得您同意的情况下，我们会将某些标识符——即经不可逆哈希处理（SHA-256）的您的电子邮箱和/或电话号码——连同 GCLID 和 fbclid 等技术性广告标识符，仅为衡量我们广告效果（转化衡量）之目的与 Google 和 Meta 共享。此项处理仅以您根据印度尼西亚《个人数据保护法》（UU No. 27 of 2022）及适用的 GDPR 规则作出的同意为依据。您可以随时通过隐私横幅撤回同意；撤回仅对将来发生效力，且不会影响我们的服务、可预订性或价格。如果您拒绝同意，我们不会与 Google 或 Meta 共享您的电子邮箱或电话号码。

我们的内部业务系统通过由本公司自有 Google 账号授予的安全 OAuth 授权，连接至 Google API 服务——Google Ads、Google Analytics、Google Search Console 以及 Google Drive/Google Sheets。所访问的数据：广告系列统计数据、汇总的网站分析报告、搜索效果数据，以及属于本公司账号的运营电子表格（例如船舶航期表）。我们不会访问、收集或存储网站访客或客户的 Google 账号数据。数据用途：上述信息仅用于运营、衡量和改进我们自身的服务及广告活动，不用于任何其他目的。存储与保护：OAuth 凭据以访问受限的配置形式存储于服务器端，仅通过加密连接（TLS）传输，绝不会暴露在客户端代码中；访问权限仅限于经授权的管理员。共享：我们不会向第三方出售、出租或转让 Google 用户数据。我们对从 Google API 接收的信息的使用遵守 Google API Services User Data Policy（Google API 服务用户数据政策），包括其中的 Limited Use（有限使用）要求（developers.google.com/terms/api-services-user-data-policy）。您可以随时在您的 Google 账号权限设置（myaccount.google.com/permissions）中撤销该访问授权，或通过 info@komodoexplorer.com 与我们联系。

To operate our booking, communication, and payment services, we share limited personal data with the following third-party service providers, each for a specific purpose. Meta Platforms, Inc. operates the WhatsApp Business Cloud API channel you use when you message us on WhatsApp, and processes advertising identifiers (hashed email/phone, click identifiers) for ad conversion measurement described in Section 6. Cerebras Systems, Inc. (United States), an AI inference provider, may process WhatsApp message text to help our team draft or route a reply — see the Automated Processing and AI Assistance section below. Xendit (PT Xendit, Indonesia) and PayPal process your email address as part of creating and completing a payment for your booking. Brevo (formerly Sendinblue) sends transactional emails on our behalf, such as booking confirmations and account-related notices, using your name and email address. Google LLC, in addition to the Google API access described in Section 7, also maintains an off-site backup of our operational database — which may include your booking and message records — for disaster-recovery purposes; see the Backups section below. Cloudflare, Inc. provides content delivery, DNS, and security infrastructure in front of our website and WhatsApp integration, handling encrypted network traffic without independently storing your personal data for its own purposes. We do not sell your personal data to any third party. We enter into these relationships on the basis of performing our contract with you, our legitimate interest in operating and securing our services, or your consent for advertising measurement as described in Section 6 — consistent with Indonesia's Personal Data Protection Law (UU No. 27 of 2022) and, for EEA visitors, the GDPR. Some of these providers are located outside Indonesia, including in the United States. Where we transfer personal data internationally, we rely on each service provider's own data-protection commitments and contractual safeguards.

When you contact us through WhatsApp, we receive and store your phone number, profile name, and the content of your messages through the WhatsApp Business Cloud API, operated by Meta Platforms, Inc. We use this data to respond to your inquiry, manage your booking, and provide customer service; your conversation may be mirrored into our internal customer-relationship system so our team can see conversation history when assisting you. We do not currently apply a fixed maximum retention period to WhatsApp conversation history — it is retained as part of our customer-service and booking records unless you ask us to delete it. You can ask us to delete the data we hold about your WhatsApp conversations at any time (see Data Deletion Requests above); doing so does not delete your own copy of the conversation on your device, or Meta's own copy, which is governed by Meta's policies and managed separately through WhatsApp.

Some of your messages to us may be processed by an AI inference provider, Cerebras Systems, Inc. (United States), to help our team understand your request and draft or route a reply more quickly — for example, when a message does not match our standard automated responses, or to prepare a first-touch welcome message. This automated processing helps prepare a response; it does not make any decision that produces legal effects or similarly significantly affects you, such as accepting or rejecting a booking or setting a price, without a human being involved. Automated drafts are intended to support — not replace — our customer-service team, and a human is involved in your booking and in any decision that affects your reservation or its price.

We maintain regular backups of our operational database — which can include booking details and WhatsApp conversation records — for disaster-recovery purposes. These backups are stored in an access-restricted Google Drive folder used by our company, and we keep a limited number of recent backups, automatically removing older ones.

If you have questions about this policy or how we handle your personal data, or wish to exercise any of the rights described above, please contact PT Komodo Explorer Indonesia at info@komodoexplorer.com, or by mail at Jl. Kerta Dalem Sari IV No.2, Desa/Kelurahan Sidakarya, Kec. Denpasar Selatan, Kota Denpasar, Provinsi Bali, Kode Pos: 80224 (PT Komodo Explorer Indonesia, NIB 1805260128363).