Privacy Policy
This policy explains what happens when you visit resgianbalitour.com or get in touch with Resgian Bali Tour. It follows Indonesia's Personal Data Protection Law (Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi, "UU PDP") and, for visitors from the European Union, the EU General Data Protection Regulation (GDPR).
Who is responsible
I Komang Resgiantana Putra
Resgian Bali Tour
H8RC+HM5, Manukaya, Tampaksiring, Gianyar Regency, Bali 80552, Indonesia
WhatsApp: +62 877-6252-7048
This website stores no personal data
This website itself does not collect or store any personal data. It has no database, no contact form that sends data to a server, no user accounts, no analytics, no advertising pixels, no newsletter, and it sets no cookies of its own and stores nothing in your browser. All buttons simply forward you to WhatsApp or Instagram.
What happens when you contact us
When you send an inquiry with the WhatsApp button or the form, the form opens WhatsApp on your own device with your message filled in. Nothing is sent to us until you press send in WhatsApp. The details you choose to share (name, email, travel dates, group size, wishes) then reach us through WhatsApp. We do not store them on this website or in any database.
Why we use your data (legal basis)
We use your details because you ask us to: to answer your inquiry and to prepare and carry out a tour you request (UU PDP Article 20; GDPR Article 6(1)(b), fulfilling a request and a contract). We delete WhatsApp and Instagram chats with you no later than 12 months after your tour, or 12 months after your last message if no tour takes place. We only keep information longer if the law requires it, for example for tax records, and only for as long as required. You can ask us to delete your messages earlier at any time.
Sharing your details is voluntary. Without a way to reach you, we simply can't plan a tour with you. We do not use automated decision-making or profiling.
Sharing
We do not sell, rent or share your personal data for marketing. If you book a tour, we only share what is needed (for example your name and hotel) with the driver from our team who picks you up.
Transfer outside Indonesia
WhatsApp and Instagram are run by Meta Platforms, which processes messages on servers outside Indonesia. Our web host Optivanta Agency LLC and its provider Cloudflare are in the United States (see Website hosting). If you write to us from the European Union, your messages travel to us in Indonesia and through Meta's servers, including in the USA. There is no EU adequacy decision for Indonesia. The transfer is necessary to answer your request and plan your tour, and you start it yourself (GDPR Article 49(1)(b)). By contacting us through these services you choose to use them; their privacy policies apply: WhatsApp, Instagram.
Instagram feed on the gallery page
Our gallery page can show our Instagram feed. It only loads after you click "Show Instagram feed". From that moment, Instagram (Meta Platforms) receives your IP address and browser data and may set cookies. Before you click, no connection to Instagram is made. The legal basis is your consent, given by the click (UU PDP Article 20; GDPR Article 6(1)(a)). You can withdraw it at any time by simply not loading the feed again. For the moment of loading the feed, we and Meta Platforms Ireland Ltd. are jointly responsible (CJEU judgment C-40/17, Fashion ID); everything Instagram does with the data afterwards is Meta's sole responsibility. The feed is shown in an isolated frame (sandbox) and the website itself stores nothing from it.
Website hosting
This website is hosted by Optivanta Agency LLC, a company based in the United States, on behalf of Resgian Bali Tour, on servers of Cloudflare, Inc. (Cloudflare Pages). Optivanta acts only as our processor: it handles technical data strictly on our instructions and under a data processing agreement, and Cloudflare works for Optivanta as a sub-processor. Cloudflare is certified under the EU-US Data Privacy Framework and runs a worldwide network, so pages are delivered from a server close to you. Because Optivanta and Cloudflare are in the United States, this technical data may be processed there. We protect this transfer with a data processing agreement that includes the EU Standard Contractual Clauses and the safeguards required by UU PDP Article 56. Like every web host, the servers briefly process technical data such as your IP address to deliver the pages securely (GDPR Article 6(1)(f), our legitimate interest in a safe, working website). We do not use these server logs ourselves and do not combine them with other data. Fonts, images and videos are served from that same host, so loading this site does not send your data to font, video or analytics providers.
Photos of people
We only publish photos in which people can be recognised when those people have agreed. If you see yourself on this website and want a photo removed, send us a short message and we will take it down.
Payments
We never collect payment details online. You pay after the tour, in person and in cash, in Indonesian rupiah.
AI-generated images and videos
Images and videos labelled "AI-generated" were created with artificial intelligence. The people shown in some of these videos do not exist. All other photos, such as our host and the gallery, are real. More on our AI transparency page.
Your rights
Under UU PDP and the GDPR you can ask what data we hold about you, get a copy, have it corrected or deleted, limit its use, take it with you (data portability), object to its use, or withdraw your consent. Send your request via WhatsApp or Instagram. We answer within three days (3 × 24 hours), as UU PDP requires. You can also complain to the Indonesian data protection authority, and visitors from the EU to the data protection authority in their own country.
Website design and hosting
This website was designed and programmed by Optivanta Agency LLC (United States), which also hosts it for us. For hosting, Optivanta is our processor, not a controller: it does not use visitor data for its own purposes and only handles the technical data needed to deliver the pages. Optivanta is not responsible for the content of this website or for our tours. The only responsible party is Resgian Bali Tour, named above.
Changes to this policy
We may update this policy when the site or the law changes. The current version is always on this page.
Last updated: 17 October 2026.