OnBali

Privacy Policy

At ONBALI, we care about your privacy. That’s why we’ve written this Privacy Policy. We want to show you exactly how we collect, use, and protect your personal information.

About Us

This Privacy Policy uses the words “we”, “us”, and “our” to refer to ONBALI, whose address is located at Jl. PT. Raya Andong, Peliatan, Ubud, Gianyar, Bali 80571. This is the controller of any personal data processed under this Privacy Policy.

Respecting Your Privacy

As an online tourism review site, ONBALI understands that the information you share with us can be very personal. Whether you’re booking a place or just looking at our site, we handle your data with great care and responsibility. Our promise to you is unwavering: we will protect your privacy, be transparent about data usage, and provide you with choices.

What Information Do We Collect?

To provide you with comprehensive review and customer support services, we may need certain personal information. We collect this information primarily to ensure the best experience possible and to meet your needs and preferences.

Your Identity and Contact Details

These include your full name, date of birth, nationality, email address, phone number, and physical mailing address. These core identity and contact details allow us to identify you as a person and communicate with you.

Information About Your Travels

For the best possible website experience, we collect:

  • Specifics about any links you have clicked for bookings, reservations, and purchases made through our platform. This data allows us to fulfil and manage your overall website experience.

  • Any special requests or information you opt to share with us through customer support, such as information about or preferences of your travel companions. Collecting this helps us make your website experience unique and suited to your specific requirements and preferences.

Usage Data

We may collect certain usage data, such as:

  • Details about how you interact with our ONBALI internet site, along with the precise pages you go to, the searches you carry out, and the links you click. This behavioural information allows us to recognise the way you navigate our platform, wherein we can improve your experience.

  • Technical information associated with your device and internet connection, which includes your IP address, net browser type, and working system.

  • Any location data that can be derived from your IP address or the GPS on your device.

Communications with Us

Your interactions are valuable to us. Here’s what we will collect during our communications with you:

  • Any facts you choose to provide while you contact our customer service team, whether by phone, email, or our online chat feature. This lets us deal with your enquiries or concerns correctly.

  • Records of our communications, along with any remarks, questions, or problems you may have. Maintaining those statistics allows us to improve our products and services over time, primarily based on direct customer input.

Sensitive Information

In a few cases, you could determine to give us the right of entry to more private information, which includes health-associated records (e.g., dietary restrictions or accessibility needs) or economic statistics past primary charge information.

We will carefully gather and use this type of sensitive information with your explicit permission. Our goal is to better serve you and customise your journey so that you can enjoy it to the fullest. Your privacy and safety are of the utmost importance to us.

How Do We Use Your Information?

We use the data you provide for a variety of important purposes. All our work is centred around delivering the best possible travel experience and ensuring the safety and security of our platform.

Providing Our Travel Services

Here at ONBALI, we gather your details to enhance your travel experience with us. Your information helps us in many ways:

  • Matching you with bookings and reservations.

  • Continuously improving our products and services.

  • Responding promptly to your questions, concerns, or requests for assistance and working to resolve any issues you encounter.

  • Personalising your experience on our ONBALI platform by analysing your preferences, interests, and past behaviours. This allows us to tailor our offerings, recommendations, and messaging to best suit your individual needs and desires.

Customisation

Through usage data, we carry out several performance-based tasks, such as:

  • Your interactions on our website are recorded and used for analysis purposes. This data on user behaviour assists us in grasping your interactions with our platform and pinpointing areas for enhancing and tailoring the user experience.

  • Details regarding your device and internet connectivity allow us to optimise our website’s performance and ensure it is compatible with the version you’re using.

  • Any location details (IP address or device GPS) help us in delivering relevant location-based content to you.

Marketing and Promotions

We want to design our efforts to match your preferences. We engage with our customers in the following ways:

  • If you’ve given us permission, we may send you newsletters, special offers, and other promotional communications that we believe will be of interest based on your travel history and preferences.

  • Analysing aggregated data about our customer base helps us better understand booking trends, purchasing behaviours, and popular destinations. This, in turn, informs our marketing strategies and improves the relevance of the offers we present.

Improving Our Platform

To gain insights into the customer experience, we do the following:

  • We monitor and analyse how our customers use the ONBALI website and services. This helps us to identify areas for improvement. We’re constantly working to improve the user experience through updates, optimisations, and new feature development.

  • We conduct research and development initiatives. These include user testing and data-driven analysis. Using these methods, we introduce innovative capabilities that make travel planning and booking even easier and more enjoyable for our customers.

Compliance and Legal Obligations

Security is very important for us, that is why:

  • We use the information you provide us to comply with all applicable laws, regulations, and legal processes. These may include responding to court orders or cooperating with law enforcement investigations when necessary.

  • Your data is used to protect the rights, property, and safety of ONBALI, our users, and the general public, as required by relevant laws and our own internal security protocols.

How Do We Protect Your Information?

Safeguarding the security and privacy of your personal data is a top priority for us. We employ a variety of robust measures to protect your information from unwanted access, misuse, or disclosure, including:

Encryption and Access Controls

We make sure that your data is shielded. Here’s how we do it:

  • Critical data is encrypted using widely accepted protocols to prevent unauthorised access.

  • We restrict access to your information to our employees and trusted partners who need it to perform their jobs.

Secure Data Storage and Handling

Maintaining confidentiality at all levels is also our priority:

  • Your personal data is stored on secure servers in carefully controlled facilities.

  • We have strict policies and procedures in place for how our team members can access and work with your information.

Should a security or data breach occur that might cause the leaking of personal data, we have carefully designed procedures for crisis management that include assessment, containment, and the notification of clients and authorities, as mandated by law.

Partnerships with Third Parties

We carefully review our partners because ensuring trust with our customers is important for our integrity:

  • We only collaborate with reputable, privacy-focused vendors and service providers who maintain comparable security standards.

  • These partners are contractually obligated to protect the confidentiality and integrity of any data we share.

Regulatory Compliance

We follow these practices to maintain regulatory compliance:

  • ONBALI adheres to all applicable data protection laws and regulations in the jurisdictions where we operate.

  • We keep track of continuous developments in the legal landscape so that we can make sure that our privacy policies adhere to the most recent regulations.

When we receive a legal request or an investigation query, we will scrutinise the circumstances and the legitimacy of the request before deciding whether to disclose any information. We will provide only that minimum amount of data required by law to protect our users, our company, and society in general.

If we are asked to disclose your personal information, we will notify you in advance, subject to certain exceptions, including where disclosure of the notice could jeopardise an ongoing investigation. Furthermore, we will strive to save your information to the fullest possible extent according to the law.

Incident Response and Monitoring

We maintain vigilance and readiness through:

  • Detailed incident response plans to quickly address any suspected breaches or vulnerabilities.

  • Our systems are continuously monitored for suspicious activity to detect and prevent potential threats.

Transparency and User Control

To uphold the principles of transparency and user control:

  • We promise to be completely open about how we collect and use data.

  • We recognise the importance of keeping your information secure, so we put a lot of effort into protecting it.

However, it’s important to understand that no method of data protection is 100% foolproof. While we use commercially acceptable means to protect your information, we cannot guarantee absolute security against all potential threats.

Data Retention

We will keep your personal information for as long as needed to fulfil the purposes outlined in this Privacy Policy unless a longer retention period is required or allowed by law. This may include maintaining your data to comply with our legal and regulatory obligations, resolving any disputes that may arise, and enforcing the agreements and terms of service you’ve accepted with ONBALI.

Legal Basis for Data Processing

We have several sound legal reasons for collecting and processing your data, all of which comply with relevant privacy regulations:

Consent

In some instances, you may be asked to approve us to use your information for particular reasons. For example, it can be used to provide promotional emails or offers. An agreement based on informed consent is considered a legal reason for data processing.

Legal Obligation

This means that sometimes we have to use or share your information because we are required to by law.

Legitimate Interests

We have a legitimate business interest in your data processing. We aim to improve our services and our website’s security while managing the overall operations of the platform. We are always ready to warrant that these interests should not have priority over your fundamental rights and freedom.

Sensitive Information

The management of more sensitive personal data, such as health-related details, will only take place with your specific permission or on the grounds of important public interest reasons as per the law.

Sharing Your Information

Our aim is to offer our premium tourism review services and carry on improving the traveller experience at ONBALI. So, in some cases, we may share your personal data with third parties. We only do this when it’s really necessary, and very strict data protection policies are in place with recipients.

Affiliated Companies

We may share your information with other companies related to the ONBALI group to the extent that this is necessary for improving our operations and products/services.

Legal and Safety Reasons

Sometimes, we have to give access to your information to judicial bodies, law enforcement agencies, or third parties. We only do this if it’s necessary to comply with the law, protect our own rights and legitimate interests, or prevent harm to you or others.

Service Providers

We may engage with reliable companies that carry out work on our behalf, including web hosting, data tracking, and customer service. Consequently, these service providers are seen as accountable and obligated to maintain the confidentiality and safety of customer data when they access or handle it in compliance with the terms of the contract.

Google Analytics Usage

The ONBALI website uses Google Analytics. It is a tool that Google offers to businesses to measure how people use their websites. It works by storing cookies, which are small files on your computer that track your movements within a site. The bits of data from these cookies, such as your computer’s IP address, are sent to Google’s servers in the United States. The data allows Google to see how the website is used. It creates data reports for those who operate the website. The reports will be additional measures related to the information, security, and privacy of our services, which will be in agreement with your preferences.

Google may need to reveal the information if the law mandates it. However, it will separate your IP address from your other personal information.

If you dislike the idea of cookie tracking, then you can simply adjust your browser settings to not accept them. However, if you do this, some parts of the website might not work properly. By using the website, you agree to permit Google to collect and make use of your data the way the company has described.

For those wanting to learn more about how Google processes data, please see the Privacy Policy at www.google.com/intl/en/policies/privacy/. If you don’t want Google Analytics to track you at all, you can get an add-on for your browser at https://tools.google.com/dlpage/gaoptout.

Google AdWords Advertising

Another marketing channel that ONBALI uses is Google AdWords. Our AdWords campaigns will be designed to display ads to those who have previously visited our website or belong to a pre-defined group, such as a specific demographic or interest category.

When a user gets access to our site, Google ad service takes records of the pages viewed and, in turn, uses this information to target visitors with relevant ads.

You can opt out of interest-based advertising by downloading the Opt-Out Browser Add-On. Please be advised that disabling the essential cookies or particular cookies might influence the functionality or performance of our site.

Facebook, Telegram, X, YouTube, and Instagram

ONBALI features some integration parts from various third-party platforms such as Facebook, Telegram, X (previously Twitter), YouTube, and Instagram. These integrations, in particular, enable users to connect with our site using different actions, like sharing content or using embedded media.

When you take advantage of the integrated functions on our webpage, the information, such as what webpage you’ve visited or what content you’ve interacted with, may be collected by these social platforms on your behalf. They may associate this information with your account and use it for their own purposes in accordance with their respective data policies.

The privacy policies of these platforms outline the type of information collected, how it is used, and the options users have to control their data.

For that reason, we have no authority or access to the data these social platforms collect through such integration. We encourage you to take time to familiarise yourself with their policies. You will be able to learn how your personal data is collected and used when you interact with our website via these respective platforms.

When we use these third-party platforms, we ultimately do not have control over the data they collect nor how it can be used. They aren’t part of the internal policy about data protection of ONBALI. If you are anxious about the information collection and use of these platforms, you might want to modify your account settings or avoid their features while you browse our website.

Third-Party Websites

While using ONBALI, you may come across certain links or redirections to entities that are not affiliated, owned, or controlled by our company, such as other websites, online services, or applications. They, for instance, could be the portals for online bookings, menu displays, and other links to those travel-related locations which are being reviewed. By clicking these links, you will be transferred from our website to the corresponding third-party site. As all of these are external and third-party entities, we are not accountable for their privacy, content, and security.

Check the privacy policies carefully of every website or third-party service that you visit that is linked to ONBALI. Go through them even if you access them from our platform. Knowing how data is collected and used by each website will make your decision to engage with their offers easier.

Some key things to look for when reviewing a third party’s Privacy Policy include:

  • Why they need it, and what information they gather from users.

  • How they withhold, share, and shield personal data.

  • What your rights and choices regarding your information are.

  • If you need further information or have something to clarify, how you can get in touch.

Security and customer privacy are top priorities for ONBALI. However, when you choose to leave our site and go to other sites, the respective third parties gain full control and accountability over the data. We suggest you exercise care and continuously take preventive measures to protect your personal data whenever you are on the internet. The responsibility of ONBALI for privacy does not include the third-party sites that are mentioned on our website.

Transfer of Data

The data from your personal computers may be sent to computers in other regions and the corresponding law on personal data protection may be different from those in your country.

When you accept this Privacy Policy and data transfer, you are committed to the fact that the information will be transferred to other countries.

GDPR Compliance

As ONBALI works in the EU territory, we value our customers and their data and commit to the GDPR. The core principles of the GDPR that guide our data practices include the following:

Lawfulness, Fairness, and Transparency

We gather and manage your personal data in accordance with the legislation, applying moral principles of strength, balance, and straightforwardness. Transparency is something we always stand for. As a result, you will always know why and how we use your information.

Purpose Limitation

We only use your data with permission that you give us for specific, legitimate purposes, which we clearly communicate. We don’t put it to other uses which do not conform to the original plan we had.

Data Minimisation

The personal data that we record is restricted only to that information that is useful for travel business objectives. We only collect data that is undisputedly required.

Accuracy

We exert all attempts to maintain the accuracy, completeness, and correctness of the personal information that we maintain about you. You can have citations revised at any time if something does not seem right.

Storage Limitation

We don’t retain your personal information for longer than it is needed to complete the data processing activities for the purposes for which it was collected. The data retention time is defined based on statutory and commercial requirements.

Integrity and Confidentiality

The security of your data depends on the integrity, confidentiality, and robustness of the system, which are the key elements. We adopt technical and organisational measures to protect data from accidental loss, unauthorised access, and unlawful processing.

Your Privacy Rights

We understand that your privacy is vital. That is why we try to be as clear as possible and disclose to you not only how we collect but also how we use and share your personal information. You have several key rights when it comes to the data we hold about you:

Access: You can ask us for access to the records containing personal data related to you. We will provide you with a copy of this information.

Rectification: If you’re aware of erroneous details, you can request to change the data to ensure that it is correct and complete.

Erasure: In certain cases, you have a right to request the removal of your personal information from our systems.

Restriction: You may decide whether and to what extent we may use this data about you, for example, by opting out of our marketing communications.

Portability: You can also demand that a digital copy of your personal data be handed out to you. This data can then be transferred to another service provider.

Objection: You have the right to object to the processing of your information. For example, if it’s for direct marketing purposes.

Our Support Centre is easily accessible if you need to implement your rights, find out about privacy-related rights, or have any other concerns that require more clarification. Our response to your request will be sent within the stated deadline and will be subject to the legal framework.

However, note that the rights mentioned above may be subject to some conditions or exceptions that are provided in pertinent data protection laws.

Cookies and Similar Technologies

To make your visit to ONBALI pleasant, we use cookies and similar technologies to help us gather information about your behaviour on our website. Cookies are small text files that will be stored on your device (e.g. computers, mobile phones, tablets, etc.) while you’re browsing through our site. They tell us what a website visitor prefers, record how they use our website, and help us tailor the content and functionality of the site to fit their needs.

There are different types of cookies that serve various purposes:

Session Cookies: These cookies do not remain on the browser and get deleted each time you close it. Details are collected on your device to keep you logged in, store your shopping cart with you during your browsing session or help with any other behavioural activities carried out during your visit.

Persistent Cookies: Unlike session cookies, persistent cookies continue to exist on your device long after an actual session has terminated. They help to track and retain your previously set preferences and settings.

First-Party Cookies: These cookies belong to the domain of the website that you are accessing at that moment (in this case, ONBALI). They gather intel regarding the pages (or sections) of our website that you have viewed.

Third-Party Cookies: These cookies help classify third-party services that are embedded in the web pages you land on. For example, if we insert a video from YouTube on our home page, it may eventually generate a cookie to monitor your viewership.

Essential Cookies: These cookies are a necessity for the website to operate efficiently. They are often already in place, and you are not able to disable them easily. For example, you should be able to log in and access secure pages to continue working on the website.

Analytical Cookies: The cookies are used to gather information about how you use the website, including the pages visited and the time on each of them. This data is used to optimise the health of the website and user experience.

Advertising Cookies: These cookies will show you personalised advertisements that are relevant to your browsing activities or interests. Outside entities, such as advertising networks, usually set them up.

Our website, ONBALI, may employ a snippet of a variety of cookie types to enable an enjoyable experience while on our platform. A cookie consent banner will appear when you visit our website to give you the option to control your cookie settings. You can accept all cookies, reject all cookies, or choose which cookie groups you agree to.

Cookie rejection can lead to the inability of the website to perform basic functions correctly. The use of cookies helps websites store information about your preferences and settings, which can be used to improve the user experience. However, if you block essential cookies, you may not be able to access certain features or pages. Analogically, we will not have the ability to gather usage data when you turn off analytical cookies, and thus, we cannot alter or improve your experience.

It should be a matter of thought that disabling cookies which are in use on other sites you visit can also compromise your browsing experience. This is because preferences are commonly stored on the device and can be applied across different sites.

Managing Your Privacy Preferences

In addition to adjusting your cookie settings, there are several other ways to manage your privacy preferences and the use of your personal information on ONBALI:

Email and Marketing Communications

You can request that we remove you as a recipient of our promotional emails, newsletters, or marketing communications. You can click on the ‘Unsubscribe’ option in the email, or you can communicate with our customer support team.

Data Subject Requests

In accordance with the existing privacy laws of your respective location, you may exercise certain actions concerning your data. For example, viewing, editing, or deleting it or restricting usage to a limited amount.

We will deal with these requests for you, and our team will be promptly accessible. One of the things we care about most as a company is to maintain open lines of effective communication with you while at the same time respecting your privacy.

Children’s Privacy

ONBALI’s review services are not intended for users under the age of 18. We do not intentionally collect or store the personal information of the people in this group without consent from their parents or guardians.

If you think that our collection of consumers’ data may include, by chance, a child whose age is below 18, please immediately get in touch with our customer support representatives. As soon as the issue comes to our attention, we will take action to remove their information from our systems.

Also, we never knowingly target or campaign our services to children. Our marketing and advertising strategies are meant for adult travellers. If we learn that personal information has been provided by a child, we will delete it as soon as possible.

Protecting children’s privacy and safety is one of our most crucial priorities. We strongly recommend that parents and guardians pay close attention to and supervise their children’s online engagements, including dealing with them via our services.

Updating This Privacy Policy

The business landscape, technologies, and legal systems may change from time to time. These changes may require us to improve our Privacy Policy by keeping with the new trends in the market, technologies, and laws. We will put up the revised version on our website and put the revision date underneath the title of the policy.

We recommend that our users review this Privacy Policy on a regular basis to stay up-to-date with our current data collection process and practices. Even a seemingly small alteration in how we manage your data can be important.

If you have selected email as your preferred channel to receive policy updates, you can receive them using that channel. This way, you will be in a position to analyse the modifications and reach out to us if there are questions or doubts.

Whatever development we may be undertaking, we will always stay within the bounds of the law and follow privacy regulations. Additionally, we will refrain from any alterations in which core principles like transparency, security, and user control are undermined.

Parenting For Your Privacy

We see privacy and the security of our user’s private information as our number one priority, and it is our duty to keep this information safe. It’s important to understand that this is a shared responsibility—we need your active participation and trust to build a truly secure, privacy-focused ecosystem.

Users of our sites should review this Privacy Policy carefully since they have the right to learn and control the use of their personal details as data subjects. It is necessary to be aware of the methods we use to gather, handle, and protect your personal data. Doing this will enable you to make informed decisions before agreeing or declining to use our platform.

We review thoughts on our privacy policies. You can raise your concerns about data handling activities, give suggestions on improvements, or ask questions about exercising your rights with our customer care team.

Feedback, Enquiries, and Complaints

We value your opinion highly and would like to design policies that minimise privacy issues and secure your personal information. We have a customer support team that deals with all the customer feedback, enquiries, and complaints.

Your reports will help us to implement more rigorous measures related to information security and privacy that conform to your guidelines. We are devoted to being reactive and transparent to users with the support of great relationships built on cooperative, open dialogue and teamwork to help solve problems.

In addition to accepting user feedback, we also monitor changes which can appear in laws related to privacy, industry best practices, and the introduction of new technologies. We take advantage of this knowledge to stay at the forefront by proactively reviewing and updating the Privacy Policy and data protection tools.

Contact Us

If you have any questions about the Privacy Policy or the way your personal data is being processed, contact ONBALI’s customer care team.

You can do this in the following ways:

Email: info@onbali.com

Postal Address: Jl. Raya Andong, Peliatan, Kecamatan Ubud, Kabupaten Gianyar, Bali 80571

Phone: +62 823 4016 4020