Privacy Policy

1. Who We Are

Pulau Asli Tour is a registered tour operator based at Jalan Raya Siteba No. 14, Padang, West Sumatra, Indonesia. We offer surf camps and indigenous tribe cultural tours in the Mentawai Islands, Siberut Island. This policy explains how we collect and use your personal data when you contact us or book a trip.

For any privacy-related questions, contact us at: pulauasli@gmail.com

2. Information We Collect

We collect personal information only when you voluntarily provide it to us — for example, when you send a booking inquiry, fill out our booking form, or contact us via WhatsApp. This may include:

• Full name and nationality
• Email address and WhatsApp / phone number
• Travel dates and group size
• Passport details (required for government and tribal permits)
• Payment information (bank transfer reference only — we do not store card details)
• Any special requests or medical notes relevant to your trip

We also collect anonymous usage data automatically via Google Analytics (page views, session duration, traffic source). This data does not identify you personally.

3. How We Use Your Information

• To process and confirm your booking
• To arrange government and tribal permits required for Siberut Island access
• To coordinate logistics (ferry tickets, transfers, accommodation)
• To communicate with you before, during, and after your trip
• To improve our website and services via anonymous analytics

We do not use your data for marketing without your explicit consent. We do not sell, rent, or share your personal data with third parties for commercial purposes.

4. Third-Party Services

We use a limited number of trusted third-party services to operate our business:

• Google Analytics — anonymous website usage tracking
• WhatsApp (Meta) — direct communication with guests
• GetYourGuide / Viator / Klook — booking platforms with their own privacy policies
• Wise / PayPal — international payment processing
• Indonesian Government (Dinas Pariwisata) — mandatory permit registration

When you book through a third-party platform, their privacy policy also applies to the data you provide on that platform.

5. Cookies

Our website uses cookies for basic functionality and Google Analytics. Cookies are small text files stored on your device. You can disable cookies in your browser settings, though this may affect some website features. By continuing to use our website, you consent to our use of cookies as described here.

6. Data Retention

We retain your booking information for up to 5 years for accounting and legal compliance purposes (Indonesian tax regulations). Analytics data is retained for 26 months as per Google Analytics defaults. You may request deletion of your personal data at any time by contacting us — we will comply unless retention is required by law.

7. Your Rights

Regardless of your location, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for any optional data use
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us using the details below.

8. Data Security

We take reasonable steps to protect your data: SSL encryption on all pages, limited access to booking information (only Andrian Salis and essential trip staff), and no storage of payment card details. We communicate primarily via WhatsApp and email, both of which are encrypted in transit.

9. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of our website after changes constitutes acceptance of the updated policy.

11. Contact Us

For any questions about this privacy policy or how we handle your data: