Privacy Policy
Last updated: 2026
This Privacy Policy explains how Kekmandalikainvestment, an independent Mandalika, Lombok, Indonesia guide and concierge website operated by Bali Premium Trip and published by Juara Holding Group (“we”, “us”, or “our”), collects, uses, stores, and protects your personal data when you visit or interact with our website and services.
By using this website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please stop using our website and services.
Who We Are and Contact Details
Kekmandalikainvestment is an online guide and concierge service focused on Mandalika, Lombok, Indonesia. The website is operated by Bali Premium Trip and published by Juara Holding Group.
If you have any questions about this Privacy Policy or about your personal data, you can contact us at:
Email: sales@balipremiumtrip.com
Scope and Applicable Laws
This Privacy Policy applies to personal data collected through our website, contact channels, and related online services.
We aim to comply with:
- Indonesia’s Personal Data Protection Law (Undang-Undang Perlindungan Data Pribadi / UU PDP No. 27/2022), and
- The European Union General Data Protection Regulation (GDPR) and the United Kingdom GDPR (UK GDPR), where they apply to visitors from the EU/EEA and the UK.
Personal Data We Collect
Data You Provide Directly
- Contact form data: When you use our online forms (for example, to request information, concierge services, or investment guidance), we may collect:
- Name
- Email address
- Phone number or WhatsApp number (if you choose to provide it)
- Country of residence
- Travel or investment preferences and any other information you include in your message
- Email or WhatsApp communications: If you contact us directly by email or through WhatsApp, we will process the content of your message and the contact details you provide.
Data Collected Automatically
When you visit our website, certain data is collected automatically:
- Server logs: Our hosting provider may collect and store:
- IP address
- Browser type and version
- Operating system
- Referring and exit pages
- Date and time of access
- Device identifiers and general location based on IP address
- Analytics and cookies: We use cookies and similar technologies to collect information about:
- Pages visited and time spent on the site
- Links clicked and navigation paths
- Approximate geographic region (based on IP address)
- Device type (desktop, tablet, mobile)
How We Use Your Personal Data
We use your personal data for the following purposes:
- Providing and managing our services:
- Responding to your enquiries
- Providing concierge-related information and recommendations
- Assisting with bookings or introductions to local partners, where requested
- Communication:
- Replying to your emails or WhatsApp messages
- Sending you information you requested about Mandalika, Lombok, or related services
- Sending service-related notifications or updates
- Analytics and improvement:
- Measuring website traffic and usage patterns
- Understanding which content and services are most relevant to visitors
- Improving website design, functionality, and performance
- Security and fraud prevention:
- Protecting our site and systems from misuse, spam, or attacks
- Diagnosing technical issues and maintaining server integrity
- Legal and regulatory compliance:
- Complying with obligations under applicable laws
- Responding to lawful requests from authorities where required
Legal Bases for Processing (EU/UK Visitors)
For visitors from the EU/EEA and the UK, we rely on the following legal bases under the GDPR/UK GDPR:
- Consent: For placing non-essential cookies and for certain types of marketing communications, if any.
- Contractual necessity: To process your data when it is necessary to provide the services or information you request.
- Legitimate interests: To improve our website, understand visitor interests, secure our systems, and communicate with you about our services, where those interests are not overridden by your rights.
- Legal obligation: To comply with applicable legal or regulatory requirements.
Cookies and Similar Technologies
Cookies are small text files stored on your device when you visit a website. We use cookies and similar technologies for the following purposes:
- Essential cookies: Needed for the basic functioning and security of the website.
- Analytics cookies: To understand how visitors use our website, measure traffic, and improve content. These may be provided by third-party analytics services.
You can manage or disable cookies through your browser settings. If you choose to block certain cookies, some features of the website may not function as expected.
Third Parties and Data Sharing
We do not sell your personal data. We may share your personal data with the following categories of third parties, only as necessary for the purposes described above:
- Web hosting providers: To host and operate our website and store server logs and some forms of data.
- Analytics providers: To help us understand website use and performance (for example, through tools such as Google Analytics or similar services).
- Email and communication services: To send and receive emails and, if used, to manage communication tools or contact forms.
- WhatsApp and messaging providers: If you contact us via WhatsApp or similar platforms, your personal data will also be handled according to those providers’ privacy policies.
- Professional advisors and legal authorities: Where necessary to protect our rights, comply with legal obligations, or respond to lawful requests.
Where third-party service providers process personal data on our behalf, they act as data processors and are required to handle the data securely and only for the purposes we specify.
International Data Transfers
Our website and service providers may be located in different countries. As a result, your personal data may be transferred to and stored in countries outside of Indonesia, the EU, or the UK.
When we transfer personal data across borders, we aim to ensure that an adequate level of protection is in place. For visitors in the EU/EEA or the UK, where required by law, we rely on appropriate safeguards, such as:
- Transfers to countries recognized as providing an adequate level of data protection, or
- Standard contractual clauses or similar contractual protections approved by relevant authorities.
Data Retention
We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law. Retention periods may vary depending on the type of data and the context of collection. In general:
- Contact form and email enquiries are retained as long as needed to handle your request and maintain a record of our communications, then deleted or anonymized when no longer necessary.
- Analytics data is retained in accordance with the policies of the analytics providers and only in an aggregated or pseudonymized form where possible.
- Server logs are kept for a limited time to ensure security and troubleshoot technical issues.
Data Security
We take appropriate technical and organizational steps to protect your personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include:
- Using secure servers and encrypted connections where appropriate
- Limiting access to personal data to personnel and service providers who need it for the purposes described
- Using passwords and other safeguards to protect systems and accounts
No system can guarantee absolute security, but we strive to keep your data as safe as reasonably possible in light of the nature of our services and the data we handle.
Your Rights
Rights Under Indonesia’s UU PDP
Under Indonesia’s Personal Data Protection Law (UU PDP No. 27/2022), you may have the right to:
- Obtain information about the processing of your personal data
- Access the personal data we hold about you
- Request correction or updating of inaccurate or incomplete data
- Request deletion of your personal data, subject to legal or contractual obligations
- Withdraw consent where processing is based on your consent
- Object to or restrict certain processing activities as permitted by law
Rights Under the GDPR / UK GDPR
If you are in the EU/EEA or the UK, you may have additional rights under the GDPR/UK GDPR, including:
- The right to access your personal data and receive a copy
- The right to correct inaccurate data
- The right to request erasure of your data (“right to be forgotten”), subject to legal limits
- The right to restrict or object to certain processing, including processing for direct marketing
- The right to data portability, in some circumstances, allowing you to obtain and reuse your data in a structured, commonly used, machine-readable format
- Where we process data based on your consent, the right to withdraw that consent at any time
- The right to lodge a complaint with a data protection authority in your country of residence, place of work, or place of the alleged infringement
How to Exercise Your Rights
To exercise any of your rights or to request more information, please contact us at:
Email: sales@balipremiumtrip.com
We may need to verify your identity before fulfilling your request. We will respond within the timeframes required by applicable law.
Children’s Data
Our website and services are intended for adults and are not directed to children under the age of 18. We do not knowingly collect personal data from children under 18. If you believe that a child has provided us with personal data without appropriate consent, please contact us and we will take steps to remove such data.
Links to Other Websites
Our website may contain links to third-party websites, services, or content. We are not responsible for the privacy practices, content, or security of such third-party sites. We encourage you to review the privacy policies of any external websites you visit.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make changes, we will revise the “Last updated” date at the top of this page. We encourage you to review this Policy regularly to stay informed about how we handle your personal data.
Your continued use of our website after any changes to this Privacy Policy will be considered acceptance of those changes.