Privacy Policy

Last Updated: April 2026

Your privacy is important to us. This policy explains how Phinisi Charter collects, uses, protects, and manages your personal information.

Information We Collect

Personal Information

When you inquire about or book a charter, we collect:

Full name, email address, phone number
Nationality and passport information (for international guests)
Mailing address and country of residence
Date of birth (for age verification if required)
Emergency contact information
Dietary restrictions and health declarations
Special accommodation requests

Booking & Payment Information

To process your charter booking, we collect:

Payment method details (credit card, bank account)
Transaction history and payment records
Charter dates, preferences, and itinerary selections
Group composition and guest names
Previous charter experiences with us

Usage Information

We automatically collect:

IP address and device information
Pages visited on our website
Time spent on each page
Referral source (how you found us)
Browser type and operating system
Search queries used on our site

Cookie Information

We use cookies to enhance your browsing experience, remember preferences, and analyze website performance. See our Cookies section below for details.

How We Use Your Information

We use collected information for:

Charter Fulfillment: Processing bookings, communicating itinerary details, coordinating logistics, and crew preparation
Customer Service: Responding to inquiries, resolving issues, and providing support
Payment Processing: Securely handling deposits, final payments, and refunds
Safety & Compliance: Health declarations, emergency procedures, and legal requirements
Marketing Communications: Newsletters, offers, and updates (only with your consent)
Website Improvement: Analytics to enhance user experience and functionality
Legal Obligations: Tax records, accounting, and compliance with Indonesian regulations

Data Sharing & Third Parties

We only share your information with trusted partners necessary for charter operations:

Payment Processors

PCI-compliant payment gateways handle credit card transactions. We never store full card numbers on our servers.

Charter Crew

Your name, preferences, emergency contacts, and health information are shared with our crew for safety and service delivery.

Service Providers

Email services, analytics platforms, and website hosts may process data. All are contractually obligated to protect your privacy.

We NEVER: Sell, rent, trade, or share your personal information with third parties for marketing purposes. Your trust is paramount.

Data Security

We implement comprehensive security measures:

SSL Encryption: All data transmitted between your browser and our servers is encrypted
Access Controls: Only authorized staff can access personal information
Secure Servers: Data stored on protected servers with firewalls and intrusion detection
Regular Backups: Information backed up securely and redundantly
Staff Training: Employees trained in data protection and privacy practices

While no system is 100% secure, we continuously improve our security practices to protect your information.

Cookies & Tracking

Essential Cookies

Required for website functionality: login sessions, security, and navigation preferences.

Analytics Cookies

Help us understand how visitors use our website, which pages are popular, and where improvements are needed. This data is aggregated and anonymous.

Marketing Cookies

Allow us to show relevant content and offers. You can opt-out of marketing cookies while still using our website.

Cookie Preferences: Most browsers allow you to refuse cookies or alert you when cookies are being sent. Disabling essential cookies may impact website functionality.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Review their privacy policies before sharing information.

Children’s Privacy

Our services are not directed to children under 13. We do not knowingly collect information from minors without parental consent. If we become aware of such collection, we delete it immediately.

Data Retention

We retain your information for as long as necessary:

Active Bookings: During your charter and for one year after for service records
Financial Records: 7 years for tax and accounting compliance (Indonesian law requirement)
Marketing Lists: Until you opt-out
Analytics Data: Aggregated and anonymized, retained indefinitely

You can request deletion of non-essential data anytime, subject to legal retention requirements.

Your Rights

You have the following rights regarding your personal information:

Right to Access

Request a copy of personal information we hold about you.

Right to Correction

Update or correct inaccurate information in your profile.

Right to Deletion

Request deletion of your data (subject to legal or operational requirements).

Right to Opt-Out

Unsubscribe from marketing communications anytime via email links or by contacting us.

To exercise these rights, contact us at info@phinisicharter.com with “Privacy Request” in the subject line.

International Data Transfers

Your information is processed and stored in Indonesia. If you access our website from outside Indonesia, you consent to your data being transferred, processed, and stored in Indonesia subject to this privacy policy.

Policy Updates

We may update this privacy policy periodically. The “Last Updated” date at the top reflects the most recent revision. Continued use of our website constitutes acceptance of updated terms. We encourage you to review this policy regularly.

Contact Us

For privacy questions or to exercise your rights:

Email: info@phinisicharter.com

WhatsApp: +62 813 3908 5552

Address: Labuan Bajo, Flores, Nusa Tenggara Timur, Indonesia

International Data Transfers

As an Indonesian company serving international guests, your personal data may be processed in Indonesia and stored on servers located in various jurisdictions. By making a booking with Phinisi Charter, you consent to the transfer of your information to Indonesia and any other countries where our service providers operate. We ensure that appropriate safeguards are in place wherever your data is processed, maintaining security standards equivalent to those described in this policy regardless of geographic location.

For guests residing in the European Economic Area, your data is transferred under standard contractual clauses approved by the European Commission, ensuring GDPR-compliant protection throughout the transfer and processing chain.

Frequently Asked Questions

What personal information do you collect?

We collect your name, email, phone number, nationality, payment details, passport information (for non-Indonesian guests), and any preferences or dietary restrictions you share during booking.

How is my data protected?

We use SSL encryption for all data transmission, maintain strict access controls, and comply with data protection standards. Payment information is processed securely by PCI-compliant third parties.

Do you sell my information?

Absolutely not. We never sell, trade, or share guest data with third parties for marketing purposes. Data sharing is limited to operational partners like payment processors and crew for charter fulfillment.

How long do you keep my data?

We retain booking information for 7 years for accounting and legal compliance. You can request data deletion after charter completion, subject to legal requirements.