Privacy Policy

1. Who We Are

OpenTripKomodo is a curated open-trip Komodo platform based in Labuan Bajo, Flores, owned and operated by PT Komodo Liveaboard Dwipantara. We connect travellers with sharing liveaboard trips, phinisi sailing, speedboat day trips, and private charters around Komodo National Park, and we own the customer relationship end-to-end on behalf of our boat-operator partners.

OpenTripKomodo is purely transactional. You do not need to create an account to book a trip. Simply send an inquiry through the website or WhatsApp.

For any privacy-related questions, contact us at admin@opentripkomodo.net or via WhatsApp at +62 813 5347 7978.

2. Information We Collect

We collect the following categories of information:

• Identity information: your full name, as provided during a booking inquiry.
• Contact information: WhatsApp number and email address used to confirm bookings and send updates. Your WhatsApp number serves as our primary customer identifier.
• Booking details: trip dates, selected vessels or packages, number of guests, and any special requests.
• Payment information: transaction references processed through DOKU. We do not store full card or bank account numbers on our servers.
• Usage data: IP address, browser type, pages visited, referral source, and session duration, collected via website analytics tools.
• Communication records: messages sent through our live chat or WhatsApp, for service quality purposes.

3. How We Use Your Information

We use the information we collect to:

• Process and confirm your trip bookings.
• Send booking confirmations, updates, and support messages via WhatsApp and email.
• Coordinate with our fulfilment partners to deliver your trip.
• Process payments and issue receipts through DOKU.
• Improve our platform, listings, and customer experience based on aggregated usage data.
• Send marketing communications (promotions, seasonal offers) where you have provided consent or where permitted under applicable law. You may opt out at any time.
• Comply with legal obligations under the laws of the Republic of Indonesia.

4. Cookies

We use cookies and local storage to maintain your preferences and support our analytics tools. The cookies we set include your language preference (Indonesian or English), your selected display currency, and analytics cookies that measure page views and ad performance.

You can disable cookies through your browser settings. Disabling analytics or marketing cookies will not affect your ability to make a booking.

Chat assistant cookie (`otk_chat_vid`). When you open the chat assistant, we set one random code in your browser for 180 days. It has one purpose: letting you reopen your chat history on the same device and browser, even if you come back days later. The code contains no name, number, or email, and your history can only be opened from the browser that holds it. We never open chat history by WhatsApp number or email.

What we keep on our server: that random visitor code, the chat messages, their time, language, and general device info (browser type, country). The chat assistant never asks for a WhatsApp number or email to keep your history. A number only reaches us two ways: the "leave your WhatsApp" form in the chat, and when you ask to be connected to our team. It is used to reply to your question and kept as booking data (see section 2). How long: chat content is deleted automatically 180 days after the last message; chats we have already removed in our panel are permanently deleted 30 days later. A conversation idle for more than 30 minutes counts as a new one.

How to delete it: clear this site's cookies in your browser, and the history is no longer linked to your device. To delete the chat content from our server, email admin@opentripkomodo.net or WhatsApp us with roughly when you chatted.

5. Third-Party Services

We use the following third-party services, each operating under their own privacy policies:

• DOKU: payment gateway for processing transactions. PCI DSS compliant. Full card details are never transmitted to or stored on our servers.
• Supabase: database infrastructure. Data stored in the Singapore (ap-southeast-1) region.
• Vercel: website hosting and serverless functions. Processes request headers including IP addresses.
• Website analytics provider: measures website usage. Data is anonymised and aggregated.
• WhatsApp messaging service: used to send booking confirmations and alerts to our team.

We do not sell your personal data to any third party.

6. Data Retention

Booking records, customer contact details, and transaction data are retained for business continuity, financial record-keeping, and legal compliance purposes. Usage analytics are retained according to the default retention settings of those platforms.

If you request deletion of your personal data, we will remove or anonymise your information from our active systems within 30 days, subject to any legal retention obligations. Note that anonymised aggregate data (such as analytics summaries) may be retained after deletion.

7. Your Rights

You have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: request that inaccurate data be corrected.
• Deletion: request that your personal data be deleted, subject to legal retention obligations.
• Data portability: request an export of your data in a machine-readable format.
• Opt out of marketing: unsubscribe from promotional communications at any time by replying "STOP" to any WhatsApp message or contacting us directly.

To exercise any of these rights, contact us at admin@opentripkomodo.net. We will respond within 14 business days.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data, including:

• HTTPS encryption for all data transmitted between your browser and our servers.
• Row-level security (RLS) policies on our database to restrict data access by role.
• Payment data processed exclusively through DOKU’s PCI DSS-compliant infrastructure, and full card details are never transmitted to or stored on our servers.
• Access to production systems restricted to authorised team members only.

No method of transmission over the internet is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

9. Children’s Privacy

Our platform is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal information without parental consent, please contact us and we will delete that data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our platform after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please reach out:

Company: PT Komodo Liveaboard Dwipantara (trading as OpenTripKomodo)

Address: Labuan Bajo, Flores, Nusa Tenggara Timur, Indonesia

Website: opentripkomodo.net

Email: admin@opentripkomodo.net

WhatsApp: +62 813 5347 7978