Privacy Policy
Last updated: April 2025
1. Information We Collect
When you use GiorBaliTour services, we may collect the following information:
- Name and email address when you register an account
- Reviews and ratings you submit
- Communication history via WhatsApp or email
- IP address and browser information for security purposes
2. How We Use Your Information
- To manage your account and authenticate your identity
- To respond to booking inquiries and customer service requests
- To display reviews publicly on our website
- To improve our services and website experience
- To protect against fraud and unauthorized access
3. Data Security
We take data security seriously. Your password is stored using bcrypt hashing and is never stored in plain text. Authentication tokens are secured using industry-standard JWT encryption. We use HTTPS for all data transmission. Access to your personal data is restricted to authorized personnel only.
4. Data Sharing
We do not sell, trade, or share your personal information with third parties for marketing purposes. Your data may be shared only with service providers necessary to operate our website (such as Vercel for hosting and Resend for transactional emails) and only to the extent required to provide our services.
5. Cookies
We use an httpOnly authentication cookie to maintain your login session. This cookie is essential for the functioning of our website and cannot be disabled if you wish to use account features. We do not use tracking or advertising cookies.
6. Your Rights
- Request access to the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Withdraw consent at any time
To exercise these rights, contact us via WhatsApp at +62 858 5496 5523 or email at giorginomalik@gmail.com.
7. Contact
If you have any questions about this Privacy Policy, please contact GiorBaliTour: