Privacy Policy

bintan.indorent.co.id is owned and operated by PT. Indomobil Bintan Corpora (“INDORENT” or “We”). This Privacy Policy explains how we collect, use, disclose, process and protect personally identifiable information (“Personal Data”) that you (the “User”) may provide in connection with the INDORENT services available through the website bintan.indorent.co.id (the “Site”). Personal Data means data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which an organisation has or is likely to have access. References to the Site are taken to include its derivatives, including but not necessarily limited to mobile websites and applications. By visiting or using the Site, you agree and consent to the collection, use, disclosure and processing of your Personal Data in accordance with this Privacy Policy and/or the Terms and Conditions of Use of the Site. If you do not agree with the Privacy Policy below, please leave the Site immediately.

From time to time, INDORENT may revise this Privacy Policy to reflect changes in the law, in our Personal Data collection and use practices, in the features of our Site, or advances in technology. Where we make a revision that changes how we collect or use your Personal Data, the change will be set out in this Privacy Policy and its effective date recorded at the beginning of it. You should therefore review this Privacy Policy periodically so that you are always informed of our current policies and practices. INDORENT will also post any such material change clearly before implementing it. If you do not agree with a change or modification to the Privacy Policy, please do not continue using the Site. You will be deemed to have accepted any modification to the Privacy Policy when you use the Site after the effective date of that modification.

We collect Personal Data about you that you provide to us when using the Site. That Personal Data includes but is not limited to your name, user identification and login credentials, address, phone number and email address. We may ask you to provide information about your travel preferences and feedback about your travel experience through bookings made with us. We also collect non-personal information that cannot be used to identify you, including but not limited to your internet protocol (“IP”) address, geographic location data, operating system type, nationality and search preferences, as well as other general data relating to internet use.

We may use your Personal Data and other information collected through the Site, whether in Indonesia or abroad, for the following purposes:

1. Registering, managing and/or administering use of and/or access to the Site;
2. Managing, operating, administering and providing you with the services offered on the Site;
3. Contacting you about matters relating to your use of and/or access to the Site and the services on the Site, and about any questions and/or requests you submit through the Site or otherwise;
4. Personalising your experience when using the Site;
5. Measuring and improving customer experience and satisfaction;
6. Publishing customer reviews about the Site, our services, travel agents or resort partners in digital and/or printed form for public access;
7. Enforcing the Terms and Conditions;
8. Resolving disputes or complaints, collecting payments or charges, or troubleshooting problems; and/or
9. Any other purpose notified to you at the time of collection.

We may also use your Personal Data and other information collected for social media marketing and for digital and conventional marketing purposes, such as sending you direct email and telling you about new products, special offers or other information we think will interest you. Please note that you may opt out of any marketing material we send you at any time. Please follow the unsubscribe instructions set out in our marketing material if you choose to opt out, and we will respect your wishes.

Your Personal Data will or may be disclosed by us to our affiliated companies. INDORENT and/or its affiliated companies may also disclose your Personal Data to third-party service providers, suppliers or agents for one or more of the purposes above from time to time. Those third-party services include but are not limited to website hosting, data analysis, marketing, payment transaction processing and service delivery.

In some cases, where you transact directly with a third party to obtain a service, or where you use the Site to book or obtain another product or service, we may provide your Personal Data to other third parties.

Depending on your location, INDORENT, its affiliated companies and third-party service providers, suppliers or agents may also transfer your Personal Data abroad.

Please note that INDORENT may disclose your Personal Data in the following situations:

1. To bring or defend any claim or lawsuit;
2. To comply with a court order, judicial process, lawful request, warrant or equivalent issued by law enforcement officials or competent authorities;
3. To investigate fraud or other wrongdoing, or as otherwise required or necessary in order to comply with applicable law, or to protect our legitimate interests;
4. To a purchaser in connection with the sale, assignment or other transfer of all or part of our business or company;
5. To enforce or apply the terms and conditions that apply to our products and services;
6. To protect the rights, property or safety of INDORENT, of other Users of the Site, or of any other person, at INDORENT's discretion; and
7. In any other situation permitted by law.

As stated above, by browsing and using the Site, or by booking a product from the Site, or by registering for or using a service on the Site, or by clicking the “Confirm” button or its equivalent when you create a new account on the Site, you:

1. Consent to INDORENT and/or its affiliated companies collecting, using, disclosing and/or processing the personal data referred to above for the purposes described above; and
2. Consent to INDORENT and/or its affiliated companies transferring your personal data out of Indonesia to the location where such other INDORENT affiliated company is situated, and to the third-party service providers, suppliers or agents of INDORENT or its affiliated companies, for the purposes described above.

You may withdraw your consent to our collection, use or disclosure of your personal data at any time by giving us reasonable notice. If you wish to withdraw your consent, please notify us using the contact details set out below. We will stop collecting, using or disclosing your personal data after that notice, unless required by law or where we have a legitimate business or legal purpose for retaining it. Please note that if you withdraw your consent, we may no longer be able to continue providing our services to you, and you agree that we will not be liable to you for any loss or damage arising from or relating to that discontinuation.

A “cookie” is an alphanumeric identifier we transfer to your device through your web browser when you visit our Site. It allows our systems to recognise you when you return to the Site and to improve our service to you. This information is used to track visitor use of the Site and to compile statistical reports on Site activity, including aggregate information about which areas of our Site are visited most often. That traffic information may be used to improve our Site's content and make it easier for you to use. If you wish to refuse our cookies, you can configure your browser to do so. However, some features of our Site may not function if you delete cookies from your browser; if you do not enable cookies, you may not be able to access important functions or features on this Site and may only be able to use it in a limited way.

When you give us your Personal Data, please make sure it is accurate and complete. If you believe that information of yours that we hold or control contains an error or an omission, please correct it through your account on the Site. Please also update your Personal Data through your account in a timely manner whenever there are any changes.

If you wish to correct an error or omission in any Personal Data in our possession or under our control that cannot be corrected through our Site, or to access your Personal Data in our possession or under our control, or as otherwise provided by applicable law, please send your request to our contact details set out below. We may charge you a reasonable fee for access to Personal Data, in order to recover the additional costs incurred in responding to that access request.

To protect your privacy and security, we will verify your identity before granting access to or making changes to your Personal Data. We will endeavour to answer a request for access to or correction of your Personal Data as soon as possible, unless an exception applies.

We protect Personal Data in our possession or under our control by maintaining reasonable security arrangements, including physical, technical and organisational procedures, to prevent unauthorised access, collection, use, disclosure, copying, modification or deletion, and similar risks.

Our Site may contain links to other sites of interest. Once you have used such a link to leave our Site, however, you should be aware that we have no control over such other websites. Please note that we are not responsible for the privacy practices of such other websites, and we encourage you to read the privacy statement of each website you visit that collects personal information.

This Site allows you to create one user account by registering for membership on the basis of the data you provide. By providing data, registering and creating an account, you warrant that:

1. You are at least 17 years of age;
2. The information about you is true and accurate, current and complete as required in the registration form on the Site (the “Registration Data”); and
3. You will update this Registration Data so that it remains true, accurate and complete at all times.

You further agree that INDORENT is not liable for any loss or damage that may be suffered by us, by you or by any third party as a result of the inaccuracy or incompleteness of information you provided. On registering, you will receive a password and a user identification (a “Username”). You are responsible for keeping the password and Username confidential, and you are fully responsible for all activities connected with that Username or password. You may use only one Username and password at a time and may not use more than one Username. Your password is for your own use alone, and you agree to keep it confidential. You agree to notify INDORENT immediately of any unauthorised use of your password or account, or any other breach of security. For better security, please make sure you sign out of your account after each use of this Site. You agree that INDORENT will not be liable for any loss or damage suffered by us, by you or by a third party arising from your failure to comply with this provision.

In the event of a change of control or a change of ownership of all or part of the INDORENT business or company, including the Site, Users' Personal Data may or will form part of that transfer of assets.

By using the Site or the services we provide, you agree to the collection, use, disclosure and processing of your Personal Data as set out in this Privacy Policy. Further, where you use our services, we are entitled to collect, use, disclose and process your Personal Data in accordance with this Privacy Policy. From time to time, INDORENT may change this Privacy Policy; as explained at the beginning of it, we will display the change on this Site for your information.

Where you have accepted our Terms and Conditions of Use of the Site, and there is a difference between those Terms and Conditions of Use and this Privacy Policy, the Terms and Conditions of Use prevail.

1. The User is responsible for the security of, and for mitigating breaches of, the User's own account — for example by applying appropriate safeguards, restricting access, creating a strong password and keeping that password safe.
2. We are not responsible for the exchange or provision of the User's personal data and information carried out by the User themselves, including between Users. This provision covers each and every error by the User that results in a leak of the User's data.
3. We are responsible for Our System, including the protection and safeguarding of the confidentiality of personal data, and for notifying the User in the event of a failure in the protection of personal data — at minimum by email to the address registered in Our System — and for reporting it to law enforcement or to the relevant supervisory and sectoral regulatory authority. In the event of a data leak, the party responsible for informing the User is the party or institution where that data is processed under this Privacy Policy.
4. We are not responsible for the genuineness, authenticity, truth, accuracy or completeness of the personal data the User enters into Our System.
5. By giving consent, the User waives the right to any claim, loss, demand or suit that may arise over the obtaining, storage, use, exploitation and/or disclosure of data, including personal data, in Our System.
6. Where the User is a minor, We are not responsible for the input of that minor User's personal data, and We encourage parents or guardians to monitor children's internet use so that a minor User's personal data is provided under the supervision of a parent or guardian as the competent party.
7. We are not responsible for a data leak occurring as a result of, and/or during, an event of Force Majeure. Force Majeure includes, among others:
   1. Strikes, company lockouts and other industrial action;
   2. Riot, civil unrest, invasion, terrorist attack or threat of one, war (whether declared or not) or the threat or preparation of war;
   3. Fire, explosion, storm, flood, earthquake, epidemic or other natural disaster;
   4. The unavailability or disruption of telecommunications, information technology and/or electricity networks;
   5. A system failure caused by a third party occurring outside Our authority;
   6. The malfunction of banking systems and/or networks; and
   7. Any act, judgment, statute, regulation or restriction issued by the government. In the event of Force Majeure, We will notify the User no later than 14 (fourteen) calendar days after it occurs and will use Our best commercial efforts to meet Our obligations under this Privacy Policy.

If you have any question or request relating to this Privacy Policy, please contact our Data Protection Officer using the details below, or any other person INDORENT may appoint by informing you through a letter, an invoice, an email or the Site: bintan@indorent.co.id, or WhatsApp +62 853 1504 8473.

PT. Indomobil Bintan Corpora — Bandar Bentan Telani Ferry Terminal Kav. 1, Lagoi, Kepulauan Riau 29155, Indonesia.