PRIVACY POLICY
Last updated: June 2025
1. Who We Are
Book Nusa ("we", "us", "our") operates the accommodation booking platform at booknusa.com. We are committed to protecting your personal information in accordance with applicable data-protection law, including Indonesia's Personal Data Protection Law (UU PDP).
2. Information We Collect
We collect information in the following ways:
Information you provide directly
- Account registration details (name, email address, password).
- Booking information (check-in/out dates, number of guests, special requests).
- Payment information — processed securely by our payment partners; we do not store full card numbers.
- Messages you send to properties or our support team.
Information collected automatically
- Log data: IP address, browser type, pages visited, referral URL, timestamps.
- Device data: operating system, screen resolution, language settings.
- Cookies and similar technologies (see Section 7).
3. How We Use Your Information
- To process and manage your bookings and send confirmation and reminder emails.
- To create and maintain your account.
- To process payments and handle refunds.
- To provide customer support.
- To improve our platform, personalise search results and detect fraud.
- To send transactional and, where you have consented, marketing communications.
- To comply with legal obligations.
4. How We Share Your Information
We do not sell your personal data. We may share it with:
- Property owners — to fulfil your booking (name, contact details, arrival time).
- Payment processors — to handle transactions securely.
- Service providers — hosting, email delivery, analytics and customer-support tools, all bound by data-processing agreements.
- Law enforcement or regulators — where required by law or to protect our rights.
5. Data Retention
We retain account and booking records for as long as your account is active and for up to 5 years afterwards for accounting and legal purposes. You may request deletion of your account at any time (see Section 8).
6. International Transfers
Our servers and third-party service providers may be located outside Indonesia. Where personal data is transferred internationally we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent measures.
7. Cookies
We use cookies and similar technologies to:
- Keep you logged in between sessions.
- Remember your currency and filter preferences.
- Measure site traffic and feature usage (via privacy-friendly analytics).
You can control cookies through your browser settings. Disabling cookies may affect the functionality of the site.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data ("right to be forgotten").
- Object to or restrict certain types of processing.
- Withdraw consent at any time (where processing is based on consent).
- Lodge a complaint with the relevant data-protection authority.
To exercise any of these rights, email us at [email protected]. We will respond within 30 days.
9. Security
We use industry-standard measures — including TLS encryption, access controls and regular security reviews — to protect your personal data. No method of transmission over the internet is 100% secure; you use the platform at your own risk.
10. Children
Our platform is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can delete it.
11. Changes to This Policy
We may update this policy periodically. Material changes will be communicated by email or a notice on the site at least 14 days before they take effect. The "last updated" date at the top of this page reflects the most recent revision.
12. Contact Us
For any privacy-related questions or requests, contact us at [email protected].