Privacy Policy

This policy explains how Gili Bali Boat ("GiliBaliBoat", "we", "us") handles personal data collected through gilibaliboat.com. For any privacy question, contact us at booking@gilibaliboat.com.

To process a booking, we collect:

• Contact details — the name, email address and WhatsApp/phone number of the person making the booking.
• Passenger details — each passenger's full name and nationality, and, where required by the operator, identification type and number.
• Booking details — the route, date, operator, number of passengers and any pickup or special requests you provide.
• Payment information — handled directly by our payment gateway, Xendit. We do not receive or store your full card or bank account numbers; we only receive the payment status and a transaction reference.
• Technical data — basic server logs (such as IP address and request time) generated automatically when you use the Site.

• To create and confirm your booking and issue your e-ticket.
• To pass the necessary passenger and trip details to your chosen boat operator so they can carry you.
• To take payment and, where applicable, process a refund.
• To contact you about your booking — confirmations, e-tickets, and schedule changes or cancellations.
• To provide customer support and keep records required for accounting and legal purposes.

We share personal data only where needed to deliver your booking, with:

• Boat operators — the passenger and trip details required to fulfil the crossing you booked.
• Xendit — our payment gateway, to process your payment securely.
• Resend — our email provider, to deliver your e-ticket and booking emails.
• Supabase — our database and hosting provider, which stores booking data on our behalf.
• Authorities or professional advisers — where we are legally required to do so.

We do not sell your personal data, and we do not use it for third-party advertising.

We keep booking records for as long as needed to provide the service and to meet our legal, accounting and tax obligations, after which they are deleted or anonymised.

The Site uses only the minimal storage needed to work — for example, temporarily holding your in-progress booking in your browser so you don't lose it between steps. We do not use third-party advertising or cross-site tracking cookies. If we add analytics in future, this policy will be updated first.

Subject to applicable law, you may ask us to access, correct or delete the personal data we hold about you. To make a request, email booking@gilibaliboat.com. Note that we may need to retain certain records to comply with legal obligations even after a deletion request.

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and restricted access to booking records. No online service can be guaranteed 100% secure, but we work to keep your information safe.

Bookings must be made by an adult. Where a booking includes children or infants, the adult making the booking is responsible for providing their details and for their travel.

We may update this policy from time to time. The current version is always published on this page, with the date it last changed shown above.

Questions about your privacy? Email booking@gilibaliboat.com or use the Contact page.