Privacy Policy

1. Introduction

BilboTrip (“we”, “our”, “us”) is a travel operator based in East Java, Indonesia. We care about privacy and aim to be clear and practical about our data practices.

This Policy applies to our websites, booking flows, and support channels (e.g., WhatsApp and email). By using our services, you agree to this Policy.

2. Data We Collect

2.1 Data you provide

• Contact details (name, phone/WhatsApp, email)
• Trip preferences (destination, dates, group size, special requests)
• Payment/ billing information (processed by payment partners)
• Messages you send to us (WhatsApp/email/forms)

2.2 Data collected automatically

• Device, browser, and basic analytics events
• Log data (pages viewed, timestamps, referral)
• Approximate location (if enabled on your device/browser)
• Cookies and similar technologies (see section 5)

3. How We Use Data

• Process bookings, manage availability, issue invoices & e-tickets
• Provide customer support and trip updates (WhatsApp/email)
• Improve our website, itineraries, and services (aggregated analytics)
• Prevent fraud, secure accounts, and comply with regulations
• Send optional deals/updates (with your consent; you can opt out)

Legal bases (where applicable): consent, contract performance, legal obligation, and legitimate interests (e.g., service improvements and security).

4. Sharing & Disclosure

We don’t sell your personal data. We may share limited data with:

• Payment providers to process transactions
• Operational partners (licensed guides, jeep operators, national parks) to fulfill your trip
• Messaging tools (e.g., WhatsApp/email) to send confirmations and support
• Authorities when required by law or to protect safety and rights

We use contracts and safeguards with partners to protect your data and use it only for the stated purposes.

5. Cookies & Analytics

We use essential cookies for site functionality. With your consent, we may use analytics cookies to understand usage and improve content.

• Essential: security, preferences, booking steps
• Analytics (optional): page performance, aggregated patterns

6. Security

• Encryption in transit (HTTPS/SSL)
• Restricted staff access based on role
• Administrative, technical, and physical safeguards

No method is 100% secure; we continuously improve controls and recommend you protect your account and devices.

7. Retention

We keep personal data only as long as needed to provide services and meet legal/ tax requirements, then delete or anonymize it.

8. Your Rights

Depending on your location and laws (including Indonesia’s Personal Data Protection Law—UU PDP), you may:

• Request access to your data
• Correct inaccurate or incomplete data
• Request deletion (when applicable)
• Object or restrict certain processing
• Request data portability (where applicable)
• Withdraw consent for optional processing

To exercise rights, email hello@bilbotrip.com or chat our WhatsApp. We may need to verify your identity.

9. International Transfers

Some partners or systems may be located outside your country. We use safeguards (e.g., contractual clauses) to protect your data during transfers.

10. Children

Our services aren’t directed to children under 13. We only process children’s data when a parent/guardian provides it for trip purposes.

11. Changes to This Policy

We may update this Policy. We’ll post the updated version here and revise the effective date above.

Contact Us

Questions or requests regarding this Policy:

• Email: hello@bilbotrip.com
• WhatsApp: 0851840000560 (Bilbotrip admin)
• Address: Jl. Kendedes, Kabupaten Malang 65157, Indonesia