Last updated: 3 August 2026
This Privacy Policy explains how we collect, use, store and protect personal data when you use phinisitripindonesia.com (the “Site”). We are committed to handling your data in accordance with Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Pelindungan Data Pribadi) of the Republic of Indonesia.
1. Who we are
phinisitripindonesia.com is a destination and route guide for traditional phinisi liveaboard voyages in Indonesia. The Site is owned and operated by:
- Company: PT Pesona Muda Nusantara
- Registered office: 18 Office Park Building, 21st Floor, Unit C, Jl. TB Simatupang Kav. 18, Pasar Minggu, South Jakarta 12520, Indonesia
- Email: [email protected] / [email protected]
- Phone / WhatsApp: +62 811 9600 3034
The same company operates phinisitrip.com, where reservations, contracts and payments are completed. This Site does not process payments.
For the purposes of the Personal Data Protection Law, PT Pesona Muda Nusantara is the Personal Data Controller.
2. What data we collect
2.1 Data you give us directly
When you submit the enquiry form on this Site, we collect:
- First name and last name
- Email address
- Subject line and the content of your message
When you subscribe to our newsletter, we collect your email address.
If you continue the conversation on WhatsApp, we will receive your WhatsApp phone number and profile name, plus whatever you choose to tell us — typically travel dates, group size, budget range and destination preferences.
If you go on to make a booking, further details (passenger names, nationality, passport details required for national park permits, dietary requirements, diving certification level, emergency contact) are collected by our booking team through phinisitrip.com, not through this Site.
2.2 Data collected automatically
- IP address and approximate location derived from it
- Browser type, device type and operating system
- Pages viewed, time on page and referring URL
- Cookies and similar technologies (see section 6)
2.3 What we do not collect
We do not collect payment card numbers, bank account details or government ID numbers through this Site. We never ask for your passwords. We do not knowingly collect data from children under 18 without parental consent.
3. Why we use your data
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry and preparing a quotation | Your consent / steps prior to entering a contract |
| Arranging national park permits and vessel bookings on your behalf | Performance of a contract |
| Sending newsletters and trip announcements | Your consent (withdrawable at any time) |
| Improving the Site and understanding how visitors use it | Legitimate interest |
| Meeting tax, tourism licensing and maritime safety obligations | Legal obligation |
We do not sell your personal data. We do not share it with advertising networks for profiling.
4. Who we share data with
We share the minimum necessary data with:
- phinisitrip.com booking team — the same company, to complete your reservation.
- Vessel operators and crew — passenger manifests are required by Indonesian maritime regulations before departure.
- Park and permit authorities — where we arrange permits on your behalf, such as Komodo National Park and the Raja Ampat Marine Park Authority. Note that you may also register directly with these authorities yourself; we will tell you when this is the case.
- Service providers — hosting, email delivery, form processing and analytics providers acting on our instructions.
Some of these providers operate servers outside Indonesia. Where personal data is transferred abroad, we ensure the receiving country or organisation provides an adequate level of protection, as required under Article 56 of the Personal Data Protection Law.
5. How long we keep it
- Enquiries that do not lead to a booking: 24 months, then deleted.
- Booking records: 5 years from the end of the trip, to meet tax and accounting obligations.
- Newsletter subscriptions: until you unsubscribe.
- Analytics data: 14 months.
6. Cookies
This Site uses cookies for essential functions (page caching, form security tokens, language preference) and for analytics. Essential cookies cannot be disabled without breaking the Site. You can block or delete other cookies through your browser settings; the Site will still work.
7. Your rights
Under the Personal Data Protection Law you have the right to:
- Access the personal data we hold about you
- Correct data that is inaccurate or incomplete
- Request deletion of your data
- Withdraw consent at any time
- Object to processing and request that we restrict it
- Receive your data in a structured format, or have it transferred to another controller
- Lodge a complaint with the supervisory authority
To exercise any of these rights, email [email protected] with the subject line “Data Request”. We will respond within 3 x 24 hours and complete the request within 30 days.
8. Security
The Site is served over HTTPS. Access to enquiry data is limited to authorised staff. We use a web application firewall and keep the platform patched. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and the supervisory authority within 3 x 24 hours if a breach affecting your personal data occurs, as required by law.
9. Third-party links
This Site links to phinisitrip.com and to external authorities such as the Raja Ampat Marine Park Authority. Once you leave this Site, this policy no longer applies. Please read the privacy policy of any site you visit.
10. Changes to this policy
We may update this policy. The “last updated” date at the top will change, and material changes will be announced on this page.
11. Contact
Questions about this policy or about how we handle your data:
PT Pesona Muda Nusantara
18 Office Park Building, 21st Floor, Unit C
Jl. TB Simatupang Kav. 18, Pasar Minggu
South Jakarta 12520, Indonesia
Email: [email protected]
Phone / WhatsApp: +62 811 9600 3034