Privacy policy: what we keep about your group and why

A group file holds more than a single traveller's. It holds the lead contact, whose name, phone number and email we need to quote and to invoice. It holds the manifest: every guest's name exactly as on the passport or ID, with the passport or ID number where the sailing permit and the park tickets require it, and a marker for Indonesian or foreign visitors, because the park fee differs.

It holds the dietary and medical lines you send so that the chef and the crew can plan, the flight times for the pickup and the return, and the invoices and receipts that belong to the payment. It holds the messages you write to us.

We collect these because a booking cannot be made without them, and we ask for nothing else. A first message needs none of it: a head count and a date are enough to start. Medical notes are used by the crew and for the pickup, and for nothing else; send only what they need to know.

Four groups of people see part of a manifest, and each sees only the part its job needs.

• The booking desk at PT Komodo Explorer Indonesia sees the whole file, because it prepares the quote, the invoice and the pickup.
• The operator group and the crew of the boat you booked see the names, the diets and the cabin allocation, so that the boat can be prepared.
• The park and the harbour authorities receive names and ID data, as the sailing permit and the park tickets are issued against them.
• Payment services see what a payment needs and nothing of the rest.

We do not sell personal data, and we do not hand a guest list to anyone who is not on that list of four. A diet or a medical line is not shown to the authorities unless the law requires it.

When you write to us on WhatsApp, we receive your phone number, your profile name and the content of your messages through the WhatsApp Business service of Meta Platforms. Email reaches the inbox at info@komodoexplorer.com. Both are kept in our records so that the producer who answers sees the history of the file. No fixed retention period is applied to that history, and a deletion request removes it from our systems.

Site statistics and ad measurement run only with your consent, given on the consent banner of this site, and you can withdraw it later. If you decline, the site works the same and the price is the same. We send no marketing to a guest list, and we do not add an address to a mailing list without consent.

Some message text can be processed by an AI service to help our team understand a request and draft or route a reply. A person decides everything that matters, including the quote, the booking and any refusal. We make no claim of special protection for this data beyond what the law and ordinary good practice require.

Write to info@komodoexplorer.com, from the address or the phone number you used when you booked, and say what you want: a copy of what we hold, a correction, or deletion. Put "Data deletion request" in the subject line for the last. We confirm that we have the request, check that you are who you say you are, so that nobody else can erase your record, and then do what you asked or tell you which part cannot be done and why.

Indonesian law requires us to keep invoices and payment records for a statutory period. Where your data is part of such a record we keep the minimum required and remove the rest. No retention figure is typed here, because the period is the one the law sets and not one we choose.

Your own copy of a WhatsApp conversation stays on your device, and Meta keeps its own copies under its own terms. PT Komodo Explorer Indonesia (NIB 1805260128363) is the party responsible for the data, and Indonesian law governs this policy.