Privacy Policy

Effective Date: January 1, 2025

At DMB Indonesia Tour (“we,” “us,” or “our”), accesible via https://dmbindonesia.id, we recognize that your privacy is a serious responsibility. When you book a bespoke journey with us, you trust us with your personal information. We are committed to protecting that data and using it transparently.

This Privacy Policy outlines the types of personal information we collect, how we use it, who we share it with, and the measures we take to protect your data. This policy applies to all our services, including our website, mobile communications, and offline tour operations. 

1. Information We Collect

We collect information to provide better services to all our users. The types of data we collect include:

  • A. Personal Information You Provide
    •  When you make a booking, request a quote, or contact us, we may ask for:
      • Identity Data: Name, date of birth, gender, and passport details (required for flight bookings and National Park entry permits).
      • Contact Data: Email address, phone/WhatsApp number, and physical address.
      • Financial Data: Payment details (though we primarily use third-party secure payment gateways, so we do not store full credit card numbers).
      • Travel Preference Data: Dietary requirements, medical conditions (for safety during trekking/diving), and special requests (e.g., anniversaries).
  • B. Automatic Information (Cookies) 
    • We automatically collect certain information when you visit our website, such as your IP address, browser type, and operating system. We use Cookies to improve your browsing experience and analyze site traffic via tools like Google Analytics.

2. How We Use Your Information

We use your data strictly to fulfill the “Contract of Service” regarding your trip. Specifically:

  • Booking Execution: To book hotels, flights, private boats, and secure entrance tickets to destinations like Bromo Tengger Semeru and Komodo National Park.
  • Communication: To send you itineraries, invoices, and emergency updates via WhatsApp or Email.
  • Safety: To ensure our guides are aware of any medical conditions or dietary restrictions (e.g., allergies).
  • Legal Compliance: To comply with Indonesian tourism laws and tax regulations.

3. Sharing Your Information

We do not sell your personal data. However, to execute your trip, we must share specific data with trusted third parties:

  • Service Providers: Hotels, Boat Operators (Phinisi Captains), and Transport Vendors. They strictly receive only the data necessary to provide their specific service.
  • Authorities: National Park Offices and Port Authorities (Syahbandar) for clearance and permits.
  • Payment Processors: Banks and Payment Gateways (e.g., Wise, Midtrans) to process transactions securely.

4. Data Security

We implement international standard security measures to protect your data:

  • SSL Encryption: Our website uses Secure Socket Layer (SSL) technology to encrypt data transmission.
  • Access Control: Only authorized personnel (Booking Managers and Accounting) have access to your sensitive personal information. 
  • Physical Security: Our offices in Malang and Labuan Bajo maintain strict physical document security protocols.

5. Your Data Protection Rights

Depending on your location (including users from the EEA/GDPR jurisdiction), you have the following rights:

  • The Right to Access: You have the right to request copies of your personal data.
  • The Right to Rectification: You can request that we correct any information you believe is inaccurate.
  • The Right to Erasure: You can request that we erase your personal data, under certain conditions (e.g., after the trip is completed and legal tax retention periods have passed).

To exercise these rights, please contact us at contact@dmbindonesia.id.

Our website may contain links to other websites (e.g., Indonesia.travel or UNESCO). Please be aware that we are not responsible for the privacy practices of such other sites.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

7. What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

8. Where your data is sent

Visitor comments may be checked through an automated spam detection service.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us: 

  • Email: contact@dmbindonesia.id
  • Phone/WhatsApp: +62 812 4929 3400
  • Head Office Address: PRA Residence B13 Tambakasri, Malang, East Java, Indonesia
  • Branch Office Address: Waekasambi St 45, Komodo, Labuan Bajo, NTT