Privacy Policy
PRIVACY POLICY
PT Lila Buana Wisata
At PT Lila Buana Wisata, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how PT Lila Buana Wisata ("Lila Buana", "we", "us", or "our") collects, uses, stores, protects, and otherwise processes personal data when you visit, use, or communicate with us through our corporate website and related digital platforms.
This Privacy Policy applies to:
Corporate Website: lilabuana.com
Lila Travel: travel.lilabuana.com
Lila Tour DMC: dmc.lilabuana.com
Gangga MICE: ganggamice.lilabuana.com
Gangga Cruise: ganggacruise.lilabuana.com
Gangga Trans: ganggatrans.lilabuana.com
Nusa Go: nusago.lilabuana.com
Together, these websites and business units are referred to in this Privacy Policy as the "Lila Buana Websites".
1. WHO WE ARE
The Lila Buana Websites are operated by:
PT Lila Buana Wisata
Komplek Ruko Wayang Sanur Jl. Bypass Ngurah Rai, Sanur Kaja, Denpasar Selatan Bali 80227, Indonesia
Telephone: +62 361 761555
Website: lilabuana.com
Email: info@lilabuana.com
PT Lila Buana Wisata operates an integrated tourism business covering travel services, destination management, MICE, cruise services, transportation, and tourism products and activities.
2. OUR COMMITMENT TO PRIVACY
We collect and process personal data responsibly, fairly, transparently, and only for legitimate and relevant purposes.
Our approach is designed to comply with applicable privacy and personal-data protection laws, including Law of the Republic of Indonesia No. 27 of 2022 concerning Personal Data Protection (UU PDP), as applicable to our activities.
Where applicable, we may also consider privacy requirements in other jurisdictions when providing services to international customers, business partners, suppliers, or visitors.
3. PERSONAL DATA WE MAY COLLECT
Depending on how you interact with us and which business unit you use, we may collect different categories of personal data.
A. Contact Information
This may include:
Full name
Email address
Telephone or mobile number
Company or organization
Job title or position
Business address
Country of residence
B. Travel and Booking Information
When you request or purchase travel-related services, we may collect information necessary to arrange your booking, including:
Travel dates
Destination
Accommodation preferences
Flight information
Passenger information
Booking and reservation details
Special travel requirements
Dietary requirements
Other information necessary to deliver the requested service
C. Identification and Travel Documents
For certain services, we may need information from documents such as:
Passport
National identity card
Visa-related information
Other identification or travel documents
We will request such information only where reasonably necessary for the service requested or where required by law.
D. Payment and Transaction Information
Depending on the service and payment method, we may process information relating to:
Transaction details
Payment status
Billing information
Invoice information
Where payment is processed through a third-party payment provider, payment information may be processed directly by that provider according to its own privacy policy.
E. Business-to-Business Information
For overseas travel agents, wholesalers, corporate clients, MICE buyers, cruise partners, suppliers, and other business partners, we may collect:
Name
Business email
Company information
Job title
Business telephone number
Business address
Contract and commercial information
Communication history
Meeting and business-development information
F. Website and Technical Information
When you visit our websites, certain technical information may be collected automatically, such as:
IP address
Browser type
Device type
Operating system
Pages visited
Date and time of access
Referring website
General website usage information
4. HOW WE COLLECT PERSONAL DATA
We may collect personal data:
Directly from you when you submit an enquiry or booking;
When you contact us by email, telephone, WhatsApp, social media, or other communication channels;
When you complete an online form;
When you request a quotation or itinerary;
When you make or manage a reservation;
When you subscribe to marketing communications;
From your company or organization where you are acting as a business contact;
From travel agents, tour operators, wholesalers, corporate clients, or other authorized partners;
Automatically through your use of our websites and digital services; and
From third-party service providers where legally permitted and necessary to provide our services.
5. HOW WE USE PERSONAL DATA
We may use personal data for legitimate business and service purposes, including to:
Respond to enquiries and requests;
Prepare quotations and travel proposals;
Process bookings and reservations;
Arrange flights, accommodation, transportation, tours, cruises, MICE programs, activities, and other travel services;
Process visa or travel-document requirements where requested;
Communicate with customers, agents, suppliers, and business partners;
Manage customer and business-partner relationships;
Process payments, invoices, and accounting records;
Provide customer service and operational support;
Improve our products, services, websites, and customer experience;
Conduct internal administration and business operations;
Prevent fraud, misuse, unauthorized access, or other security incidents;
Comply with legal, regulatory, tax, accounting, immigration, aviation, tourism, or other applicable obligations;
Send relevant marketing communications where permitted and, where required, with your consent; and
Protect the rights, property, safety, and legitimate interests of Lila Buana, our customers, employees, partners, and service providers.
We will not use personal data for purposes that are incompatible with the purpose for which it was collected unless permitted or required by applicable law.
6. LEGAL BASIS FOR PROCESSING
Depending on the circumstances, we may process personal data based on one or more lawful grounds permitted under applicable law.
These may include:
Your valid consent;
Taking steps at your request before entering into a contract;
Performing a contract or providing services you have requested;
Complying with legal or regulatory obligations;
Protecting vital interests where applicable;
Performing a task carried out in the public interest where applicable; or
Pursuing legitimate interests, where permitted by applicable law and balanced against your rights.
Under Indonesia's Personal Data Protection Law, controllers are required to have an appropriate legal basis for processing personal data and, where relying on consent, to provide information concerning the purpose, type of data, retention period, processing period, and data-subject rights.
7. SHARING PERSONAL DATA
To provide travel and tourism services, we may need to share relevant personal data with selected third parties.
Depending on the service, these parties may include:
Airlines and aviation service providers;
Hotels, resorts, villas, and accommodation providers;
Transportation companies and drivers;
Cruise lines and cruise service providers;
Tour operators and destination partners;
Local guides and activity providers;
Visa and immigration service providers;
Insurance providers;
Payment service providers;
Technology and IT service providers;
Professional advisers;
Government authorities or regulatory bodies where required; and
Other suppliers or partners necessary to deliver the service you have requested.
We aim to share only information that is reasonably necessary for the relevant purpose.
We do not sell personal data as a commercial product.
8. INTERNATIONAL DATA TRANSFERS
Because tourism is an international business, your personal data may sometimes need to be transferred to or processed by service providers or business partners located outside Indonesia.
For example, this may occur when arranging:
International flights;
Overseas hotels;
International tours;
Visas;
Travel insurance;
International transportation;
Cruise services; or
Other travel arrangements outside Indonesia.
Where required by applicable law, we will take appropriate measures for international transfers and the protection of personal data.
9. DATA SECURITY
We take reasonable organizational, technical, and administrative measures to protect personal data against:
Unauthorized access;
Unauthorized disclosure;
Loss;
Misuse;
Alteration;
Destruction; and
Other unlawful or unauthorized processing.
However, no website, electronic transmission, or storage system can be guaranteed to be completely secure.
Where we use third-party technology or service providers to process personal data on our behalf, we expect them to implement appropriate security and confidentiality measures.
Indonesia's PDP Law requires controllers to protect personal data and prevent unauthorized access and processing.
10. DATA RETENTION
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including:
Providing requested services;
Maintaining business and transaction records;
Meeting contractual obligations;
Meeting legal, tax, accounting, immigration, or regulatory requirements;
Resolving disputes; and
Protecting our legitimate business interests.
When personal data is no longer required, we will take reasonable steps to delete, destroy, anonymize, or otherwise dispose of it in accordance with applicable law and our internal retention procedures.
11. YOUR PRIVACY RIGHTS
Subject to applicable law and any applicable limitations, you may have rights relating to your personal data, including the right to:
Know whether we process your personal data;
Obtain information about how your personal data is processed;
Request access to your personal data;
Request correction or updating of inaccurate or incomplete information;
Request restriction or suspension of certain processing;
Withdraw consent where processing is based on consent;
Request deletion or destruction of personal data where legally applicable;
Object to certain processing where applicable;
Request transfer of personal data where applicable; and
Submit a complaint concerning the processing of your personal data.
The specific rights available to you may depend on applicable law and the circumstances of the processing.
Under Indonesia's PDP Law, data subjects have legally recognized rights concerning their personal data, while controllers have corresponding obligations regarding processing, security, and requests from data subjects.
12. WITHDRAWING CONSENT
Where we process your personal data based on your consent, you may withdraw that consent by contacting us.
Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.
Please note that withdrawing consent may affect our ability to provide certain services where the information is necessary to fulfil your booking, contract, legal obligation, or other legitimate purpose.
13. MARKETING COMMUNICATIONS
We may occasionally send information about:
Travel products;
Holiday packages;
Promotions;
New services;
Destination programs;
MICE programs;
Cruise products;
Transportation services;
Events; and
Other Lila Buana services that may be relevant to you.
Where required by applicable law, we will obtain your consent before sending certain marketing communications.
You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism provided or by contacting us.
14. COOKIES AND SIMILAR TECHNOLOGIES
Our websites may use cookies and similar technologies to:
Enable website functionality;
Remember preferences;
Understand website usage;
Improve website performance;
Measure website traffic; and
Support relevant communications and marketing activities where permitted.
You may configure your browser to refuse or restrict cookies. However, certain website functions may not operate correctly if cookies are disabled.
Where required, we will provide appropriate cookie choices or consent mechanisms.
15. THIRD-PARTY WEBSITES AND SERVICES
Our websites may contain links to third-party websites, booking platforms, social-media platforms, payment services, or other external services.
Those third parties may have their own privacy policies and terms.
Lila Buana is not responsible for the privacy practices of third-party websites or services that are outside our control.
We encourage you to review the relevant privacy policy before providing personal information to any third party.
16. CHILDREN'S PERSONAL DATA
Our websites and services are generally intended for adults and business users.
Where services involve children or minors, we will handle their personal data in accordance with applicable laws and may require appropriate authorization or consent from a parent or legal guardian.
Indonesia's PDP Law provides specific requirements concerning the processing of children's personal data.
17. CONFIDENTIALITY OF TRAVEL INFORMATION
Travel information can contain sensitive and commercially important information.
We will take reasonable measures to maintain the confidentiality of customer and business-partner information and will only disclose information to parties who reasonably need it for service delivery, legal compliance, or other legitimate purposes.
Customers should also take reasonable care when sending passports, identification documents, payment information, or other confidential information through email, messaging applications, or other communication channels.
18. DATA BREACHES AND SECURITY INCIDENTS
If we become aware of a personal-data security incident that requires notification under applicable law, we will take appropriate steps to investigate, contain, mitigate, and respond to the incident and provide notifications where legally required.
19. PRIVACY ENQUIRIES AND REQUESTS
If you wish to exercise your privacy rights, ask a question about this Privacy Policy, or make a personal-data request, please contact:
Privacy Contact
PT Lila Buana Wisata
Komplek Ruko Wayang Sanur Jl. Bypass Ngurah Rai, Sanur Kaja Denpasar Selatan, Bali 80227 Indonesia
Email: info@lilabuana.com
For security reasons, we may need to verify your identity before processing certain requests.
We will respond to valid requests within the period required by applicable law.
20. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect:
Changes in our business operations;
Changes to our websites or digital services;
Changes in technology;
Changes in applicable laws or regulations; or
Improvements to our privacy practices.
The updated version will be published on this page with the revised "Last Updated" date.
We encourage you to review this Privacy Policy periodically.
21. GOVERNING LAW
This Privacy Policy is principally governed by the laws of the Republic of Indonesia, including applicable personal-data protection legislation.
Where our services are subject to mandatory privacy requirements in another jurisdiction, applicable additional rights or obligations may also apply.
22. CONTACT US
If you have any questions regarding this Privacy Policy or the way we handle personal data, please contact:
PT Lila Buana Wisata
Komplek Ruko Wayang Sanur. Jl. Bypass Ngurah Rai, Sanur Kaja, Denpasar Selatan, Bali 80227, Indonesia
Tel: +62 361 761555
Website: lilabuana.com
Privacy Email: info@lilabuana.com
© 2026 PT Lila Buana Wisata. All Rights Reserved.