At PT Atourin Expediso Nusantara (“Expediso”, “we”, “our”), we respect your privacy and are committed to protecting your personal data. This policy explains what we collect when you use our website, book a journey with us, or contact our team.
1. Information We Collect
We collect the following types of information:
- Contact data — name, email, WhatsApp number, organization name when you submit an inquiry.
- Trip planning data — preferred destinations, dates, group size, budget, and notes you share.
- Technical data — IP address, device type, browser, pages visited, and basic analytics events.
- Newsletter data — email address if you subscribe to our updates.
2. How We Use Your Data
- To respond to your inquiry with a custom proposal.
- To coordinate logistics for journeys you book.
- To send the occasional newsletter (only if you opted in).
- To understand how our website is used and improve it.
- To comply with legal and tax obligations.
3. Cookies & Analytics
We use first-party essentials cookies (session, language preference) and optional analytics tools to measure traffic. The analytics services we may use include Google Analytics 4 and Microsoft Clarity. These tools may set cookies and collect anonymized usage data. You can decline non-essential cookies via the banner that appears on your first visit.
4. Sharing Your Data
We do not sell your data. We share it only with:
- Service providers strictly necessary for delivering your trip (DMC, lodging, transport).
- Government authorities when legally required (e.g. immigration).
- Our infrastructure providers (Supabase for data, Resend for email, Vercel for hosting).
5. Data Retention
We retain inquiry and booking records for up to 5 years after the last interaction for accounting and customer-service continuity. Newsletter subscriptions are kept until you unsubscribe.
6. Your Rights
You have the right to:
- Request a copy of your data.
- Ask us to correct or delete it.
- Withdraw consent for marketing communications at any time.
To exercise any of these rights, email us at info@expediso.id.
7. Security
We use industry-standard encryption (HTTPS), Supabase row-level security, and least-privilege access controls for our admin panel. Despite our best efforts, no method of transmission over the internet is 100% secure.
8. Children
Our services are not directed to children under 13. If a school books a journey on behalf of minors, the responsible educational institution acts as data controller for participant information.
9. Updates to this Policy
We may update this policy from time to time. Material changes will be announced on this page with a new “Last updated” date.
10. Contact
Questions about this policy? info@expediso.id or via WhatsApp: MinSo · 0811-990-1090.