Privacy Policy

Privacy Policy

Last Updated: April 3, 2026 | Effective Date: April 3, 2026

1. Introduction and Scope

This Privacy Policy applies to all services provided by Labuan Bajo Liveaboard through the website www.labuanbajoliveaboard.com, including but not limited to liveaboard charter bookings, Komodo island hopping tours, diving experiences, sunset cruises, private charters, and all related tourism services. By using our website or services, you consent to the practices described in this policy. This policy is designed to comply with Indonesian data protection regulations (Government Regulation No. 71 of 2019 concerning the Implementation of Electronic Systems and Transactions) and international privacy standards including GDPR for our European guests.

2. Information We Collect

2.1 Personal Information You Provide

When you make a booking inquiry, reserve a liveaboard charter, or contact us through our website, we may collect the following personal information: your full name as it appears on your passport or identification document, email address for booking confirmations and communications, phone number including WhatsApp contact for trip coordination, nationality and passport details for Komodo National Park entry permits and Indonesian immigration requirements, dietary restrictions and allergies for onboard meal preparation, diving certification level and experience for safety compliance at Komodo dive sites, physical health information relevant to maritime activities and diving safety, travel insurance details, and payment information for booking transactions.

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information including your IP address and geographic location, browser type and version, device information (desktop, mobile, tablet), pages visited and time spent on each page, referring website or search engine query, language preferences, and cookies and similar tracking technologies. This information helps us improve our website performance, understand visitor behavior, and optimize our content for luxury travel seekers researching Komodo liveaboard experiences.

2.3 Information from Third Parties

We may receive information about you from third-party sources including travel agents and tour operators who arrange bookings on your behalf, payment processors handling your transactions, social media platforms when you interact with our pages or content, review platforms where you leave feedback about your Komodo liveaboard experience, and analytics services that help us understand website traffic patterns and user demographics.

3. How We Use Your Information

We use the personal information we collect for the following purposes: processing and managing your liveaboard bookings and charter reservations across our Komodo and Labuan Bajo services, communicating with you about your upcoming trips including itinerary details, departure times, and packing recommendations for your Komodo sailing adventure, ensuring your safety during maritime activities including diving at sites like Manta Point, Castle Rock, and Batu Bolong, complying with Indonesian maritime regulations and Komodo National Park entry requirements, processing payments and managing financial transactions securely, sending you relevant offers and promotions about our liveaboard packages (with your consent), improving our website content and user experience based on visitor behavior analytics, responding to your inquiries through our contact form, WhatsApp, email, or phone, and personalizing your onboard experience based on your preferences and requirements.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds: contractual necessity when processing is required to fulfill your booking and provide liveaboard services, legitimate interests in improving our services and marketing our Komodo tourism experiences, legal compliance with Indonesian maritime safety regulations, tourism laws, and Komodo National Park entry requirements, and your explicit consent for marketing communications and non-essential cookies. For our guests from the European Economic Area, we ensure all processing complies with GDPR requirements and you may exercise your rights as described in Section 8 of this policy.

5. Data Sharing and Disclosure

We may share your personal information with the following categories of recipients: our liveaboard crew and captains who need your information for safety and service delivery during your Komodo sailing experience, Komodo National Park authorities for entry permit processing and conservation fee collection, Indonesian immigration and maritime authorities as required by law, payment processors and financial institutions for secure transaction processing, our technology service providers including website hosting, email services, and booking management systems, travel insurance companies when claims need to be processed, and marketing and analytics partners who help us optimize our digital presence (in anonymized form where possible). We never sell your personal data to third parties for their independent marketing purposes. All third-party service providers are contractually obligated to protect your data and use it only for the purposes we specify.

6. Data Security

We implement comprehensive security measures to protect your personal information including SSL/TLS encryption for all data transmitted through our website, secure payment processing through PCI-DSS compliant payment gateways, access controls limiting employee access to personal data on a need-to-know basis, regular security audits and vulnerability assessments of our digital infrastructure, encrypted storage for sensitive personal information including passport details and health data, secure backup procedures with encrypted offsite storage, and staff training on data protection and privacy best practices. While we take every reasonable precaution to protect your data, no method of internet transmission or electronic storage is completely secure. We continuously review and improve our security practices to maintain the highest standards of data protection for our guests.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website performance. Essential cookies are required for the website to function properly including session management and security features. Analytics cookies help us understand how visitors interact with our website, which pages about Komodo liveaboard experiences are most popular, and how users navigate between our destination guides and booking pages. Marketing cookies may be used to deliver relevant advertisements about our liveaboard packages on third-party platforms. You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect your ability to use some features of our website including the booking inquiry form and live chat functionality. We use Google Analytics to analyze website traffic and user behavior, with IP anonymization enabled to protect your privacy.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data: the right to access and receive a copy of the personal data we hold about you, the right to rectify inaccurate or incomplete personal data, the right to erasure (right to be forgotten) under certain circumstances, the right to restrict processing of your personal data, the right to data portability allowing you to receive your data in a structured format, the right to object to processing based on legitimate interests or direct marketing, the right to withdraw consent at any time for processing based on consent, and the right to lodge a complaint with a supervisory authority. To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 12. We will respond to your request within 30 days and may request additional information to verify your identity before processing your request.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy. Booking and transaction records are retained for seven years in compliance with Indonesian tax and accounting regulations. Guest health and safety information is retained for five years after your last trip with us. Marketing consent records are retained until you withdraw your consent. Website analytics data is retained in anonymized form for up to 26 months. Passport and immigration data is securely deleted within 12 months after your trip unless required longer by law. When personal data is no longer needed, we securely delete or anonymize it using industry-standard methods.

10. International Data Transfers

As a luxury tourism provider serving international guests, your personal data may be transferred to and processed in countries outside your country of residence. We ensure that any international data transfers are protected by appropriate safeguards including standard contractual clauses approved by relevant data protection authorities, adequacy decisions where applicable, and your explicit consent for transfers to countries without adequate data protection frameworks. Our primary data processing occurs in Indonesia, with backup and hosting infrastructure maintained through reputable international providers who maintain equivalent data protection standards.

11. Children’s Privacy

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16 without parental consent. If we become aware that we have collected personal data from a child under 16 without appropriate parental consent, we will take steps to delete that information promptly. For family bookings that include children, we collect only the minimum information necessary for safety and regulatory compliance during the liveaboard experience, and this information is provided by the parent or legal guardian.

12. Contact Information

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal information, please contact us through the following channels: Email: [email protected], WhatsApp: +62 813-3900-0089, or through the contact form on our website at www.labuanbajoliveaboard.com/contact-us. Our Data Protection team will respond to all inquiries within 30 business days. For urgent data protection matters, please mark your communication as urgent and we will prioritize your request.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on our website with a revised effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. Your continued use of our website and services after any changes to this Privacy Policy constitutes your acceptance of the updated terms. For significant changes that affect how we process your personal data, we will seek your renewed consent where required by applicable law.