Privacy policy

Who is responsible

PT KAY FAMILY GROUP BALI, trading as Snorkeling in Bali, of Pelabuhan Banjar Nyuh, Ped, Kec. Nusa Penida, Kab. Klungkung, Bali 80771, Indonesia. Questions about your data go to familytripsbali@gmail.com or WhatsApp +62 877-9285-5999.

What we collect when you book

Only what running the trip needs: the lead guest’s name, email address and phone number, the date and departure you chose, how many of you there are, your answer to the swimming-ability question, your pick-up address if you bought a transfer, and any note you added. That is the whole list.

We do not ask for a passport number, a date of birth, or an address beyond the pick-up point. We never see your card number.

Why we are allowed to hold it

Because you asked us to take you snorkeling. The lawful basis is performance of the contract between us — we cannot put you on a boat without knowing who is coming and how to reach you if the sea turns. The email address is also how your voucher reaches you.

Who else sees it

• Our hosting and database — the site runs on Vercel and the database is Neon, both on servers in the region closest to our guests. They hold the data on our behalf and do nothing else with it.
• No payment provider — online payment is not switched on, so we take no card or account details at all. Bookings are paid in person or by transfer.
• No email provider — automatic email is not switched on, so your confirmation is sent by hand on WhatsApp and no third party sees your address.
• The crew on your boat — your name, party size and swimming-ability answer appear on the day’s manifest, because that is the point of collecting them.

We do not sell your details, and we do not share them with anyone not listed above. We do not send marketing email.

Analytics and advertising

We use Google’s measurement tools to see which trips people look at before they book, and to measure whether our advertising works. The tags running on this site are GT-NML5NJ9T, AW-18207077585, plus Ahrefs Analytics, which measures how the site performs in search. These set cookies in your browser.

If you are in the EEA, the UK or Switzerland, nothing is stored until you accept. Google’s Consent Mode denies advertising and analytics storage by default in those countries, we ask you on your first visit, and your answer is remembered in your own browser. Declining costs you nothing: the site works identically and you can still book. You can change your mind by clearing this site’s data in your browser, which brings the question back.

What these tools tell us is aggregate: which pages were viewed, which trip a booking started from, roughly where in the world the visitor was. They do not receive your name, email address or phone number. See our cookie policy for the detail.

How long we keep it

Bookings are kept for seven years, because Indonesian tax and company law requires us to keep records of what we sold. Payment records are kept for the same period. Sign-in attempts to our own admin are kept for 30 days as a security record. Rate-limiting records are deleted after a day.

A booking that was never paid — a hold that ran out — is kept as an expired record rather than deleted, so that if you come back and ask what happened, we can tell you.

Your rights

Ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Use the email address above and quote your booking reference. We will answer within 30 days.

One limit worth stating plainly: we cannot delete a booking record we are legally required to keep for tax purposes until that period has passed. We can, and will, delete everything not covered by that.

Children

The minimum age for our trips is 10, and a booking is always made by an adult. We do not knowingly collect details directly from children.

Changes

If this policy changes, the date at the top changes with it. We do not make changes retroactive.