What we keep when you message us, and for how long

Anything you send us on WhatsApp arrives with your phone number and profile name attached. Meta's WhatsApp Business service carries the messages, and we can copy the conversation into our booking system, so the colleague who picks up next reads the whole thread.

A booking adds the details the trip needs, namely names, ages, dates, the cabin plan and the guest count. Later we ask for passport names, because the harbour and the park need them on their lists. If a guest has a health need that the crew should know, you can tell us, and you decide what to share.

We keep payment references and amounts. No chat message ever has to contain a card number. Pay through the payment link that comes with the invoice.

Your details run your booking and answer your questions. Names and ages feed into the price and the cabin plan. The dates decide which sailing we offer. We use your phone number to reply and to send the pickup details.

Our team gets help from an AI service that reads some messages in order to draft or route replies. Anything that affects your booking or its price is decided by a person. The service prepares a draft and does not accept or refuse a booking.

Other companies see only what their part of the work needs. When a payment is created and again when it completes, Xendit and PayPal receive your email address. Brevo, which sends our booking emails, receives your name and the address each email goes to, and nothing beyond what sending needs. Traffic to this site passes through Cloudflare, and a backup copy of our booking records is stored in a restricted Google Drive folder. Selling personal data is something we never do.

Only with your consent do Google and Meta receive a hashed email address or phone number, which lets us measure our advertising. If you decline, we share nothing, and your service and your fare stay the same.

Asking what we hold on you, asking for corrections and asking for deletion are all open to you. Write to either of our two WhatsApp lines, name the booking, and write from the same phone number as before. First we ask you to prove who you are, which keeps anyone else from deleting your data.

Your request is acknowledged within a few business days and completed within 30 days of your identity being confirmed. We delete your contact details, your conversation history and the notes on your profile. Records the law obliges us to keep, invoices and payment records among them, stay for the period the law sets. Where such a record contains your data, we hold the minimum and anonymise what remains.

No fixed maximum period applies to WhatsApp history. It stays in our records until you ask for it to be deleted. Your own copy of a chat, and Meta's copy, are outside our reach.

Indonesian law governs this policy, including the Personal Data Protection Law. It is written in plain words and is not legal advice. A legal question can be put to us as well.