verified_user Data Governance & Privacy Standards

Privacy Policy

Effective Date: August 14, 2026 • Version 2.4 • Governed under Indonesian Law (UU PDP No. 27/2022) & Global Privacy Standards.

mail Contact Privacy Team
corporate_fare Section 1

1. Scope & Data Controller

Female Guide Bali ("we," "our," or "us"), operating as a curated female-led travel platform in Bali, Indonesia, respects your fundamental privacy rights. This Privacy Policy governs all personal data collected when you visit our website (femaleguidebali.com), book tour experiences, communicate with our concierge, or engage with our female guides.

We adhere strictly to the Indonesian Personal Data Protection Law (Undang-Undang No. 27 Tahun 2022 tentang Perlindungan Data Pribadi / UU PDP) as well as internationally recognized data protection principles (including the European Union General Data Protection Regulation / GDPR standards where applicable).

dataset Section 2

2. Information We Collect

To provide safe, personalized, and seamless tour services, we collect the following categories of information:

person A. Personal & Contact Identifiers

Full legal name, email address, WhatsApp/mobile phone number with international country code, hotel/villa pickup address in Bali, travel dates, guest count, and optional dietary or physical accessibility preferences.

receipt_long B. Booking & Transaction Metadata

Unique Booking Codes (e.g. FGB-XXXXXXXX), DOKU Jokul Invoice Numbers, chosen payment plan (30% Down Payment vs 100% Full Payment), timestamps, payment channel (Credit Card, QRIS, Virtual Account), and settlement verification logs.

lock C. Google Identity & Authentication

When utilizing Google One-Tap or Sign in with Google (Google Identity Services / GIS), we securely receive your verified Google account name, primary email, and profile avatar URL to authenticate your user session.

devices D. Technical & Preference Telemetry

IP address, approximate geographic location, browser type, device resolution, and client-side saved tour wishlist preferences maintained via browser localStorage.

gavel Section 3

3. Purpose of Processing & Legal Basis

We process your data strictly under lawful bases specified by applicable data protection legislation:

Processing Purpose Data Categories Lawful Basis
Tour Booking & Guide Dispatch Name, Phone, Hotel Pickup, Tour Selection Contract Performance
Payment Invoicing & DOKU Processing Invoice Number, Amount, Channel, Transaction ID Contract & Legal Compliance
Digital Invoices & E-Vouchers via Brevo Customer Email, Name, Itinerary details Contract Performance
Guest Safety & Emergency Support Phone, Emergency Contact, Pickup Details Vital Interests & Safety
share Section 4

4. Third-Party Disclosures & Service Providers

We operate a zero-tolerance policy against selling, leasing, or trading personal data. Disclosures are strictly limited to authorized service providers bound by confidentiality and data processing agreements:

  • Assigned Female Guides & Professional Drivers: Provided solely with your name, contact phone, pickup address, and tour schedule to execute logistics safely.
  • Payment Gateway (PT Nusa Satu Inti Artha / DOKU): Processes transaction authentication, checkout links, and settlement verification under Bank Indonesia supervision.
  • Email Infrastructure (Brevo / Sendinblue SAS): Transmits transactional payment invoices and official booking vouchers.
  • Database Infrastructure (MongoDB Atlas): Encrypted cloud database hosting with automated snapshots and access controls.
credit_card Section 5

5. Payment Security & Cardholder Protection

shield PCI-DSS Level 1 Compliant Checkout

Female Guide Bali never collects, sees, or stores complete Credit/Debit Card Primary Account Numbers (PAN), CVV/CVC security codes, or banking PINs. All payment transactions occur inside DOKU Jokul’s encrypted hosted checkout interface featuring 3D-Secure multi-factor authentication.

storage Section 6

6. Data Retention & Storage Security

Personal data is retained only for as long as necessary to fulfill the tour services or satisfy mandatory legal, accounting, and tax compliance requirements:

  • Completed Booking Records: Retained for up to 5 years pursuant to Indonesian commercial tax regulations.
  • Wishlist & Session Data: Persisted on client devices via localStorage until manually cleared by the user.
  • Technical Server Logs: Automatically rotated and purged after 90 days.
manage_accounts Section 7

7. Your Legal Privacy Rights

Under Indonesian UU PDP and international standards, you hold specific enforceable rights regarding your personal information:

✓ Right to Access & Portability Request a complete copy of the personal data we hold about your bookings and account.
✓ Right to Rectification Correct inaccurate or incomplete contact, pickup, or schedule details.
✓ Right to Erasure Request the deletion of your account and customer records, subject to statutory tax retention limits.
✓ Right to Restrict Processing Object to or limit how your information is processed for communications.
cookie Section 8

8. Cookie & Browser Storage Policy

Our web platform uses minimal, privacy-centric browser storage mechanisms:

  • Essential Session Cookies: Used for secure user authentication and Google OAuth session management.
  • Browser localStorage: Saves your favorite tours locally so you can revisit your Wishlist without requiring an account.
contact_mail Section 9

9. Inquiries & Data Protection Officer

If you have questions, complaints, or wish to exercise any of your statutory privacy rights, please contact our designated Data Protection Officer:

Entity: Female Guide Bali (PT Female Guide Bali)

Primary Privacy Email: privacy@femaleguidebali.com

General Inquiries: hello@femaleguidebali.com

WhatsApp Support: +62 812-3456-7890

Location: Denpasar, Bali 80237, Indonesia