Last updated: November 19, 2025

PT BALI BIKE HOUSE ("we", "our", "us") is committed to protecting your personal data. This policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://balibikehouse.com and use our services.

1. Legal Basis

This policy complies with:

Law No. 27 of 2022 on Personal Data Protection (UU PDP) (Indonesia)
General Data Protection Regulation (GDPR) for users from the EU, where applicable

Where GDPR applies, our legal bases for processing personal data include:

Performance of a contract (processing your rental booking)
Compliance with legal obligations (Indonesian regulations requiring valid ID for rentals)
Legitimate interests (fraud prevention and safety)

2. Data Controller

The data controller is:

PT BALI BIKE HOUSE Jl. Uluwatu II No. 10, Jimbaran, Kuta Selatan, Kab. Badung, Bali, Indonesia, 80361 Email: info@balibikehouse.com

3. What Data We Collect

We may collect the following personal data:

a. Identification Data

Full name
Nationality
Passport number (required for foreign customers under Indonesian rental regulations)
Date of birth (optional)

b. Contact Information

Email address
Phone number
Address (for billing and service)

c. Booking and Transaction Data

Rental preferences
Booking details (unit, price, duration)
Payment details (partially, through secure third parties)

d. Device and Usage Data

IP address
Browser type and version
Operating system
Pages visited and time spent

e. Communication Data

Messages and inquiries sent via our forms or messaging tools

f. ChatGPT Assistant and Third-Party AI Interfaces

If you use a BaliBikeHouse assistant through ChatGPT or another third-party AI interface, we may receive the rental search details or questions you choose to share, such as dates, vehicle preferences, budget, destination area, or rental requirement questions. We use this information only to return public BaliBikeHouse catalog, availability, guide, policy, contact, and booking-link information.

The assistant does not create bookings, process payments, access private customer accounts, or request passport, driver license, payment card, or other sensitive document details. Booking and checkout continue on https://balibikehouse.com.

Your use of ChatGPT or another third-party AI interface is also subject to that provider's own terms and privacy policy.

4. How We Use Your Data

We use your personal data for the following purposes:

To process bookings and transactions
To verify your identity, including using your passport number as required by Indonesian rental regulations
To provide customer support
To send booking confirmations and service updates
To improve our website and services
To prevent fraud or abuse
For marketing (with your consent)
To comply with legal obligations

We may share your data with:

Rental Partners (to fulfill your booking)
Payment Providers (e.g., Xendit, Stripe)
IT and Analytics Service Providers (e.g., hosting, analytics)
Government authorities when legally required

We do not sell your personal data to third parties.

6. International Data Transfers

If we transfer your data outside Indonesia (e.g., for hosting or analytics), we ensure appropriate safeguards such as Standard Contractual Clauses or equivalent protection measures.

7. Data Retention

We keep your data only for as long as necessary to fulfill the purposes outlined above, or as required by law (e.g., tax and financial reporting).

8. Your Rights

You have the right to:

Access and correct your data
Withdraw consent (where applicable)
Request deletion of your data
Object to processing
File a complaint with Indonesia's Personal Data Protection Authority

To exercise your rights, contact us at: info@balibikehouse.com

9. Security

We implement reasonable administrative, technical, and physical safeguards to protect your data, including encryption, secure hosting, and restricted access.

10. Cookies and Tracking

We use cookies and similar technologies for:

Website functionality
Analytics and performance
Advertising (with your consent)

See our Cookie Policy for more details.

11. Updates

We may update this policy from time to time. The latest version will always be posted on our website.

OpenAI advertising measurement

When enabled, we use the OpenAI Ads Pixel and server-side Conversions API to measure how OpenAI ads lead to website visits, product views, checkout actions and confirmed bookings. Measurement may include ad click and browser references, campaign details, booking status and booking value. A confirmed booking does not mean payment has been received. We do not use automatic advanced matching or collect contact details from page fields for this integration. Passport, driving licence and uploaded documents are excluded.

You can disable marketing measurement in Cookie settings. Your saved marketing denial also applies to OpenAI measurement. Where permitted, measurement may begin before you save a choice. Our own ad-touch record expires after 90 days before a booking request; a record attached to a booking is retained under our booking data retention policy. The Pixel’s attribution cookie has a separate 30-day lifetime. A saved withdrawal remains in effect for OpenAI measurement; enabling marketing again does not restore it for linked bookings.

privacy policy