Legal
Privacy Policy
Last updated: April 2026
This privacy policy applies to the website ohana-agency.com and the travel planning services operated by Regina Priscillia, a micro/small enterprise (UMKM) registered in Indonesia, represented by Regina Priscillia ("Ohana Bali", "we", "us"). We are the data controller for the personal data described below and process it in accordance with Law No. 27 of 2022 on Personal Data Protection (UU PDP) and, where applicable, the EU General Data Protection Regulation (GDPR).
Information We Collect
We collect information you provide directly — name, email address, phone or WhatsApp number, travel dates, group composition, preferences, and any details you share in your message — when you use our contact form, WhatsApp, or email. We also automatically collect limited technical data (IP address, browser type, device, referring page, pages viewed) through server logs and analytics cookies. We do not collect payment card details on this website; any payment is processed by our payment partners or handled directly by bank transfer.
How We Use Your Information
We use your data to (i) respond to your inquiry and prepare a personalised travel proposal, (ii) arrange your trip with suppliers (guides, drivers, hotels, activity providers), (iii) send you transactional messages about your booking, (iv) comply with Indonesian tax, accounting, and tourism regulations, and (v) improve the website and our services. Legal bases: performance of a contract, your consent (marketing, cookies), our legitimate interest in running the business, and compliance with legal obligations.
Information Sharing
We never sell or rent your personal data. We share it only with (i) the travel suppliers needed to deliver your trip, (ii) our service providers (email delivery via Resend, hosting via Vercel, analytics, accounting), and (iii) Indonesian authorities when required by law. Some providers are located outside Indonesia (EU, US); where relevant we rely on Standard Contractual Clauses or equivalent safeguards. We retain booking and accounting records for up to 10 years as required by Indonesian law; enquiry data with no booking is deleted within 24 months.
Cookies & Analytics
The site uses strictly necessary cookies (routing, language) and, with your consent, analytics cookies (Google Analytics) to measure audience and improve content. No advertising or cross-site tracking cookies are used. You can withdraw consent or clear cookies at any time via your browser settings or our cookie banner.
Your Rights
Under UU PDP and, where applicable, GDPR, you have the right to access, rectify, erase, or port your data, to object to or restrict processing, and to withdraw consent at any time. You may also lodge a complaint with the Indonesian Personal Data Protection Authority (once operational) or, for EU residents, your national data protection authority. To exercise any right, email [email protected] with proof of identity; we respond within 30 days.
Contact Us
Data controller: Regina Priscillia. For privacy questions, requests, or complaints, email [email protected] or message us on WhatsApp.