隱私主權

我們遵循最高的全球標準。無論您是歐盟 (GDPR)、加利福尼亞 (CCPA) 還是印尼 (OJK/PDP) 居民，您的數據都受到同等軍事級別的保護。

我們使用 Microsoft Clarity 更好地了解您如何使用我們的網站。Clarity 透過會話回放和熱力圖捕捉您與網站的互動方式。這些資訊幫助我們改善您的用戶體驗並識別技術摩擦點。數據根據 Microsoft 的隱私聲明進行處理。

我們只收集無縫遠征所需的資訊：海上清單的身份驗證、船上安全的飲食/醫療要求和安全包船的支付編排。

您的數據在靜止和傳輸過程中都使用行業領先的協議進行加密。我們的基礎設施經過 '普遍霸權' 安全標準審計，確保未經授權的存取。

您保留對數據的絕對主權。您有權隨時要求存取、更正或完全刪除（'被遺忘權'）我們全球記錄中的數據。

To request deletion of the personal data we hold about you — including data collected through WhatsApp — please follow the instructions at https://www.komodoexplorer.com/data-deletion.html. You may also contact us directly using the details in the Privacy Contact section below.

在取得您同意的情況下，我們會將特定識別碼——即經不可逆雜湊處理（SHA-256）的您的電子郵件及/或電話號碼——連同 GCLID 與 fbclid 等技術性廣告識別碼，僅為衡量我們廣告成效（轉換衡量）之目的與 Google 及 Meta 共享。此項處理僅以您依印尼《個人資料保護法》（UU No. 27 of 2022）及適用之 GDPR 規定所為之同意為依據。您可以隨時透過隱私權橫幅撤回同意；撤回僅向將來生效，且不會影響我們的服務、可預訂性或價格。若您拒絕同意，我們不會與 Google 或 Meta 共享您的電子郵件或電話號碼。

我們的內部業務系統透過由本公司自有 Google 帳戶授予的安全 OAuth 授權，連接至 Google API 服務——Google Ads、Google Analytics、Google Search Console 以及 Google Drive/Google Sheets。所存取的資料：廣告活動統計資料、彙總的網站分析報告、搜尋成效資料，以及屬於本公司帳戶的營運試算表（例如船舶航班表）。我們不會存取、蒐集或儲存網站訪客或客戶的 Google 帳戶資料。資料用途：上述資訊僅用於營運、衡量及改善我們自身的服務與廣告活動，不作任何其他用途。儲存與保護：OAuth 憑證以存取受限的設定形式儲存於伺服器端，僅透過加密連線（TLS）傳輸，絕不會暴露於用戶端程式碼中；存取權限僅限於獲授權的管理員。共享：我們不會向第三方出售、出租或移轉 Google 使用者資料。我們對自 Google API 取得之資訊的使用，均遵守 Google API Services User Data Policy（Google API 服務使用者資料政策），包括其中的 Limited Use（有限使用）要求（developers.google.com/terms/api-services-user-data-policy）。您可以隨時於您的 Google 帳戶權限設定（myaccount.google.com/permissions）中撤銷此存取授權，或透過 info@komodoexplorer.com 與我們聯繫。

To operate our booking, communication, and payment services, we share limited personal data with the following third-party service providers, each for a specific purpose. Meta Platforms, Inc. operates the WhatsApp Business Cloud API channel you use when you message us on WhatsApp, and processes advertising identifiers (hashed email/phone, click identifiers) for ad conversion measurement described in Section 6. Cerebras Systems, Inc. (United States), an AI inference provider, may process WhatsApp message text to help our team draft or route a reply — see the Automated Processing and AI Assistance section below. Xendit (PT Xendit, Indonesia) and PayPal process your email address as part of creating and completing a payment for your booking. Brevo (formerly Sendinblue) sends transactional emails on our behalf, such as booking confirmations and account-related notices, using your name and email address. Google LLC, in addition to the Google API access described in Section 7, also maintains an off-site backup of our operational database — which may include your booking and message records — for disaster-recovery purposes; see the Backups section below. Cloudflare, Inc. provides content delivery, DNS, and security infrastructure in front of our website and WhatsApp integration, handling encrypted network traffic without independently storing your personal data for its own purposes. We do not sell your personal data to any third party. We enter into these relationships on the basis of performing our contract with you, our legitimate interest in operating and securing our services, or your consent for advertising measurement as described in Section 6 — consistent with Indonesia's Personal Data Protection Law (UU No. 27 of 2022) and, for EEA visitors, the GDPR. Some of these providers are located outside Indonesia, including in the United States. Where we transfer personal data internationally, we rely on each service provider's own data-protection commitments and contractual safeguards.

When you contact us through WhatsApp, we receive and store your phone number, profile name, and the content of your messages through the WhatsApp Business Cloud API, operated by Meta Platforms, Inc. We use this data to respond to your inquiry, manage your booking, and provide customer service; your conversation may be mirrored into our internal customer-relationship system so our team can see conversation history when assisting you. We do not currently apply a fixed maximum retention period to WhatsApp conversation history — it is retained as part of our customer-service and booking records unless you ask us to delete it. You can ask us to delete the data we hold about your WhatsApp conversations at any time (see Data Deletion Requests above); doing so does not delete your own copy of the conversation on your device, or Meta's own copy, which is governed by Meta's policies and managed separately through WhatsApp.

Some of your messages to us may be processed by an AI inference provider, Cerebras Systems, Inc. (United States), to help our team understand your request and draft or route a reply more quickly — for example, when a message does not match our standard automated responses, or to prepare a first-touch welcome message. This automated processing helps prepare a response; it does not make any decision that produces legal effects or similarly significantly affects you, such as accepting or rejecting a booking or setting a price, without a human being involved. Automated drafts are intended to support — not replace — our customer-service team, and a human is involved in your booking and in any decision that affects your reservation or its price.

We maintain regular backups of our operational database — which can include booking details and WhatsApp conversation records — for disaster-recovery purposes. These backups are stored in an access-restricted Google Drive folder used by our company, and we keep a limited number of recent backups, automatically removing older ones.

If you have questions about this policy or how we handle your personal data, or wish to exercise any of the rights described above, please contact PT Komodo Explorer Indonesia at info@komodoexplorer.com, or by mail at Jl. Kerta Dalem Sari IV No.2, Desa/Kelurahan Sidakarya, Kec. Denpasar Selatan, Kota Denpasar, Provinsi Bali, Kode Pos: 80224 (PT Komodo Explorer Indonesia, NIB 1805260128363).