Privacy Policy

Last updated: 2026

This Privacy Policy explains how Investbuleleng (“we”, “us”, “our”) collects, uses, stores, and shares personal data. Investbuleleng is an independent Buleleng, North Bali, Indonesia guide and concierge website operated by Bali Premium Trip and published by Juara Holding Group.

We are committed to protecting your privacy and handling your personal data in accordance with applicable laws, including Indonesia’s Personal Data Protection Law (Undang-Undang Perlindungan Data Pribadi / UU PDP No. 27/2022) and, where applicable, the EU and UK General Data Protection Regulation (GDPR).

By using our website or contacting us, you agree to the practices described in this Privacy Policy.

Who We Are and Contact Details

Website: Investbuleleng – an independent guide and concierge website for Buleleng, North Bali, Indonesia.

Operator: Bali Premium Trip

Publisher: Juara Holding Group

If you have any questions about this Privacy Policy or your personal data, you can contact us at:

Email: sales@balipremiumtrip.com

Personal Data We Collect

Data You Provide to Us

Contact form data:
- Name
- Email address
- Phone number or WhatsApp number (if you choose to provide it)
- Country or region (if you provide it)
- Any message or inquiry you write in free-text fields
- Preferred travel dates, interests, and other trip details (if you share them)
Direct email or messaging data:
- Information you send to us by email or messaging apps (such as WhatsApp), including contact details and any personal data contained in your messages.

Data Collected Automatically

Server logs:
- IP address
- Browser type and version
- Device type and operating system
- Referring and exit pages
- Date and time of visits
- Pages viewed and time spent on each page
- Technical error information
Cookies and similar technologies:
- Unique identifiers (where set by cookies)
- Information about how you use the website (pages visited, clicks, scrolls)
- Approximate location based on IP address (e.g., country, city)
Analytics data:
- Aggregated statistics on website traffic and user behavior, collected through analytics tools such as Google Analytics or similar services.

How We Use Your Personal Data

We use your personal data for the following purposes:

To respond to inquiries and provide services:
- Answer your questions about Buleleng and North Bali.
- Provide concierge information and guidance.
- Prepare suggested itineraries or travel options when requested.
- Communicate with you about your requests and any follow-up information.
To manage our relationship with you:
- Send you important information about our website, terms, or privacy updates.
- Maintain records of your communications with us.
To improve our website and services:
- Analyze how visitors use our website so we can improve content, navigation, and user experience.
- Monitor website performance, security, and stability.
To ensure security and prevent misuse:
- Detect and prevent spam, fraud, abuse, or security incidents.
- Protect our legal rights and comply with applicable laws.
Marketing and updates (limited and optional):
- With your consent, we may send occasional updates about Buleleng, new content on the website, or related services. You may opt out at any time.

Legal Bases for Processing (EU/UK Visitors)

For visitors from the EU/EEA and UK, we process personal data under the following legal bases:

Contractual necessity: to respond to your inquiries and provide requested information or services.
Legitimate interests: to maintain and improve our website, ensure security, manage our relationship with you, and keep records (where these interests are not overridden by your rights).
Consent: for the use of non-essential cookies and, where required, for sending marketing communications. You may withdraw your consent at any time.
Legal obligations: to comply with applicable laws and regulations.

Third Parties and Data Sharing

We do not sell your personal data. We may share your personal data with the following categories of third parties, only as necessary and in line with this Policy:

Web hosting provider:
- Hosts our website and stores server logs.
- May process IP addresses, technical data, and some contact form submissions stored on the server.
Analytics providers:
- Such as Google Analytics or similar services.
- Receive pseudonymous or aggregated data on your device, behavior on the website, and approximate location.
Email and communication providers:
- Our email service provider processes data contained in emails you send to us.
- If you contact us through WhatsApp or other messaging platforms, those services process your contact details and messages according to their own privacy policies.
Professional advisers and legal authorities:
- Lawyers, accountants, or authorities, where necessary to comply with legal obligations, defend our rights, or respond to lawful requests.

We only share personal data with third parties who have a legitimate need to access it and who are subject to appropriate confidentiality and data protection obligations.

International Data Transfers

Our website is operated from Indonesia, but some service providers (such as hosting, analytics, or email services) may process data in other countries, including those outside Indonesia, the EU/EEA, or the UK.

Where we transfer personal data across borders, we take steps to protect it, which may include:

Using service providers that implement appropriate security measures.
Relying on standard contractual clauses or similar safeguards, where required by GDPR.
Limiting the amount and type of personal data shared.

Data Retention

We keep personal data only for as long as needed for the purposes explained in this Policy, or as required by law.

Contact form and inquiry data: generally retained for as long as necessary to handle your request and for a reasonable period afterward for reference, service improvement, or legal purposes.
Email and messaging correspondence: retained as business records for as long as reasonably necessary and in line with our legal obligations.
Server logs: retained for a limited period to maintain security, troubleshoot issues, and generate basic statistics.
Analytics data: retained according to the settings of the analytics provider (for example, Google Analytics data retention periods).

When data is no longer needed, we will delete or anonymize it, unless a longer retention period is required by applicable law.

Cookies and Similar Technologies

Cookies are small text files placed on your device when you visit our website. We use:

Necessary cookies: required for the basic functioning and security of the website.
Analytics cookies: to understand how visitors use our site so we can improve content and usability.

You can control cookies through your browser settings, including blocking or deleting them. Note that some parts of the website may not function properly if you disable certain cookies.

For EU/UK visitors, we use non-essential cookies only where permitted by law, which may include obtaining your consent through a banner or settings tool.

Data Security

We take reasonable technical and organizational measures to protect your personal data from loss, misuse, unauthorized access, disclosure, alteration, and destruction. These measures may include:

Using secure connections (HTTPS) where appropriate.
Limiting access to personal data to authorized personnel and service providers who need it for their work.
Using passwords and other access controls.

No method of transmission over the internet or electronic storage is completely risk-free, and we cannot guarantee absolute security. However, we aim to reduce risks and respond to incidents appropriately.

Your Rights Under Indonesian Law (UU PDP)

Under Indonesia’s Personal Data Protection Law (UU PDP No. 27/2022), you may have rights including:

Right to obtain information about the processing of your personal data.
Right to access your personal data.
Right to correct or update inaccurate or incomplete personal data.
Right to delete your personal data in certain circumstances.
Right to withdraw consent, where processing is based on consent.
Right to object to or limit certain forms of processing, in line with the law.

To exercise these rights, please contact us at sales@balipremiumtrip.com. We may ask you to provide information to confirm your identity before fulfilling your request, and we will respond within a reasonable time in accordance with applicable law.

Your Rights Under the GDPR (EU/UK Visitors)

If you are in the EU/EEA or UK, GDPR may give you additional rights, including:

Right of access: to know whether we process your data and to request a copy.
Right to rectification: to have inaccurate or incomplete data corrected.
Right to erasure: to request deletion of your data in certain situations.
Right to restriction of processing: to limit how we use your data in certain cases.
Right to data portability: to receive your data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
Right to object: to processing based on our legitimate interests, including profiling, and to direct marketing.
Right to withdraw consent: where processing is based on your consent.
Right to lodge a complaint: with your local data protection authority if you believe your rights have been violated.

To exercise these rights, contact us at sales@balipremiumtrip.com. We will handle your request as required under GDPR.

Children’s Data

Our website and services are not aimed at children under the age of 18. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data without appropriate consent, please contact us, and we will review and, where appropriate, delete the data.

Links to Other Websites

Our website may contain links to third-party websites or services, such as tourism providers, partners, or social media platforms. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing them with personal data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or website features. The “Last updated” date at the top of this page indicates when the latest changes came into effect.

Significant changes may be communicated through our website or by direct notice where appropriate. Your continued use of the website after any changes means you accept the updated Policy.

How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: sales@balipremiumtrip.com