Privacy Policy

Last updated: 17 September 2026

This policy explains what personal information Soulscape Indonesia collects, why we collect it, who we share it with, and the choices you have. It applies to soulscapeindonesia.com and to the correspondence that follows an enquiry.

Planning a private journey requires a certain amount of personal detail — names as they appear on passports, dates, preferences, sometimes health or dietary requirements. We ask for what is needed to arrange the journey properly, and nothing beyond it.

1. Who we are

Soulscape Indonesia is a private travel studio based in Seminyak, Bali, Indonesia (“Soulscape”, “we”, “us”, “our”).

For any question about this policy or about your data, write to info@soulscapeindonesia.com.

2. Information we collect

Information you give us

• Name, email address, telephone number, WhatsApp number

• Country of residence and preferred language

• Travel details: dates, number of travellers, composition of the party, budget range, interests and preferences

• Details of the travellers in your party, where you provide them on their behalf

• Passport details, date of birth and nationality, where these are required to confirm flights, permits, vessels or accommodation

• Dietary requirements, accessibility needs, medical or mobility information, where you choose to share them so that a journey can be arranged safely

• Correspondence with us, including messages on WhatsApp, calls and notes made during planning conversations

Information collected automatically

• IP address, approximate location derived from it, device type, operating system and browser

• Pages visited, time spent on them, referring website or advertisement

• Cookie and similar identifiers (see Section 7)

Information from other sources

• Enquiries forwarded by travel advisors, concierge services or partner agencies acting for you

• Publicly available business contact details, where we approach a partner company

We do not buy personal data from third parties, and we do not build profiles of visitors for sale or exchange.

3. Why we use it, and on what legal basis

Health, dietary and accessibility details are treated as sensitive. We use them only to arrange the journey, share them only with the supplier who needs them, and delete them once they are no longer needed.

We do not currently operate a newsletter. If we introduce one, we will ask for your consent separately and you will be able to withdraw it at any time.

4. Who we share it with

A bespoke journey is delivered by people on the ground. To arrange one, we pass the minimum necessary details to:

• Hotels, villas and resorts

• Drivers, guides, private aviation operators, vessel and yacht operators

• Airlines, ferry operators and transfer providers

• National park, permit and ticketing authorities, where entry requires registration

• Local partner operators who deliver individual parts of a journey

We also use service providers who process data on our behalf: our website host, our email provider, WhatsApp (Meta Platforms) for messaging, and the analytics and advertising tools listed in Section 7. They act on our instructions and may not use your data for their own purposes.

We may disclose information where the law requires it, in response to a valid request from a public authority, or where it is necessary to establish or defend legal claims. If the business is ever sold or restructured, data may transfer with it; we will say so before that happens.

We do not sell your personal information.

5. Payment

The website does not take payments. There is no online booking system and no account to register. Payment is arranged separately once a journey is agreed, using the method set out in your confirmation.

We do not collect, process or store card numbers through this website.

6. International transfers

We operate from Indonesia. If you are in the European Economic Area, the United Kingdom or Switzerland, your data will be transferred outside your jurisdiction, where data protection law differs from your own.

Where we make such a transfer, we rely on Standard Contractual Clauses or on your explicit consent to the transfer for the purpose of arranging your journey, and we take reasonable steps to ensure your data stays protected in transit and at rest.

7. Cookies and analytics

The site uses cookies and similar technologies. Some are necessary for the site to function. Others help us measure traffic and understand which sources bring visitors.

Essential — keep the site working, remember your language, hold form entries and record your cookie choice. These cannot be switched off.

Analytics — Google Analytics 4, deployed through Google Tag Manager. Tells us how many people visit, which pages they read and where they arrived from.

Advertising — Google Ads and Meta Pixel, also deployed through Google Tag Manager. These measure whether an advertisement led to an enquiry and allow us to show relevant advertising to people who have visited the site.

Google Tag Manager itself is a container that loads the tools above; it does not collect personal data on its own.

You can accept or decline non-essential cookies in the banner when you first visit, change your choice at any time, and block or delete cookies in your browser settings. Declining non-essential cookies does not prevent you from using the site or making an enquiry.

You can also opt out of Google Analytics using Google's browser add-on, and adjust advertising preferences in your Google and Meta account settings.

8. How long we keep it

• Enquiries that do not lead to a booking: 24 months from the last contact

• Booking and travel records: 5 years after the journey, or longer where accounting and tax law requires it

• Health, dietary and accessibility details: deleted within 3 months of the journey ending

• WhatsApp correspondence: 24 months from the last message

• Website analytics data: 14 months in Google Analytics; advertising identifiers according to the retention settings of Google and Meta

9. Your rights

Depending on where you live, you may ask us to:

• Confirm what personal data we hold about you and give you a copy

• Correct anything inaccurate or incomplete

• Delete your data, where we have no continuing legal reason to keep it

• Restrict or object to how we use it

• Transfer your data to another provider in a portable format

• Withdraw a consent you previously gave, without affecting what was lawful before

• Withdraw consent to the use of health or dietary details, understanding that this may make a planned arrangement impossible

Write to info@soulscapeindonesia.com. We reply within 30 days. We may ask you to confirm your identity first. If you are in the EEA or the UK, you also have the right to complain to your national data protection authority.

10. Security

We use encrypted connections, access controls and restricted internal permissions, and we limit access to traveller details to the people arranging the journey.

No system is entirely secure. If a breach occurs that is likely to affect your rights, we will notify you and the relevant authority as required by law.

11. Children

Our services are directed at adults. We do not knowingly collect data from anyone under 17 except where a parent or guardian provides it as part of a family booking. If you believe a child has given us data without a guardian's involvement, write to us and we will remove it.

12. Links to other sites

The site may link to other websites — partner hotels, operators, publications. We are not responsible for how they handle your data. Read their policies before sharing anything with them.

13. Changes to this policy

We may update this policy. The revised version will appear on this page with a new date at the top. If a change materially affects how we use your data, we will tell you directly before it takes effect.

14. Contact

Soulscape Indonesia · Seminyak, Bali, Indonesia · info@soulscapeindonesia.com

Trust is the first thing a traveller gives us, and the last thing we are willing to spend carelessly.