Privacy Policy

1. Who we are

Angga's Hidden Bali ("we", "us", "our") is a Bali-based private tour operator with a US LLC registered in Los Angeles, California, and operating offices in Buleleng Regency, Bali, Indonesia. Our primary website is anggashiddenbali.com.

2. What data we collect

Information you give us directly: your name, email, phone number, hotel or pickup address, WhatsApp handle (if you contact us there), and any dietary or accessibility requirements you share when you enquire or book a tour.

Information we collect automatically: basic analytics data via Plausible (cookieless, anonymised) — the pages you visit, roughly where you visited from (country-level), and which referring site or search term sent you. We do not build visitor profiles.

Payment information: when you book direct, your card is processed by Stripe. We never see, store, or receive your full card number. Only a transaction reference.

3. How we use it

• To operate your tour — pickup coordination, guide briefing, and any dietary or medical accommodations you've shared.
• To reply to enquiries and send booking confirmations and reminders.
• To improve the site, based on anonymised, aggregated analytics.
• If you've opted in, to send the monthly newsletter. You can unsubscribe in one click from any email.

4. Who we share it with

Only the third parties strictly needed to deliver your tour or operate the site:

• Stripe — processing your card payment.
• Viator, Klook, Tripadvisor, GetYourGuide — if you booked via one of these platforms, the booking flow routes through their systems.
• Bokun — our booking system; stores your reservation details.
• MailerLite — if you subscribe to the newsletter (sends the emails; does not share your address).
• Plausible — cookieless analytics provider; receives anonymised page-view events only.
• Our Bali-based tour team — the guide and driver assigned to your tour.

We do not sell your personal data. We do not share it with advertising networks.

5. How long we keep it

Enquiry emails: 3 years. Booking records: 7 years (Indonesian and US tax record-keeping). Newsletter subscription: until you unsubscribe, then immediately deleted. Anonymised analytics data: indefinitely, but cannot be traced to you.

6. Your rights

You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Email [email protected] with the subject line "Data request" and we'll respond within 30 days.

If you are in the EU or UK, you also have the right to lodge a complaint with your national data protection authority.

7. Cookies

We use the minimum necessary. Plausible is cookieless. If you enable the optional GA4 integration (we do not, by default), Google may set analytics cookies — a consent banner would appear first. Third-party booking platforms may set their own cookies once you cross into their flow; their privacy policies apply there.

8. International transfers

Our data is stored on servers located in the EU and the US (via Bokun, Stripe, MailerLite, and Cloudflare). Where data leaves your home jurisdiction, we rely on standard contractual clauses or equivalent safeguards.

9. Children

Our service is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us so we can remove it.

10. Changes

We'll update this page when our practices change. The "last updated" date at the top reflects the most recent revision. Material changes will be flagged on the site for at least 30 days.

11. Contact

Questions about this policy or your data: [email protected].