Gilijet
← Home

Privacy Policy

Last updated: 19 May 2026

PT Gilijet Nusantara ("Gilijet", "we") is committed to protecting your privacy in accordance with Indonesia's Personal Data Protection Law (UU PDP No. 27/2022).

1. Data We Collect

  • Booking data: Names, email, phone, nationality, ID/passport numbers of the booker and passengers.
  • Payment data: Method (QRIS, e-wallet, etc.), amount, timestamp. Card numbers and PINs are handled by Mayar; we never see them.
  • Technical data: Anonymized IP, browser type, and pages visited to improve performance.

2. How We Use Your Data

  • Process bookings and issue e-tickets.
  • Share necessary passenger info with the listed boat operator so they can fulfill the trip.
  • Send transactional emails (booking confirmation, cancellation, refund updates).
  • Respond to customer service queries.
  • Comply with legal and tax obligations.

3. Who We Share With

  • Boat operators: Only the data necessary for transport (passenger names, departure, contact phone in case of disruption).
  • Mayar (payment gateway): Payment details so the transaction can be processed.
  • Email provider (Resend): Recipient email and ticket details to deliver e-tickets.
  • Law enforcement: When required by valid legal request under Indonesian law.

We do not sell your data to advertisers or marketing networks.

4. Data Retention

  • Booking records are retained for 10 years to comply with Indonesian tax law.
  • Marketing email opt-ins can be withdrawn at any time.
  • Anonymized analytics: 24 months.

5. Your Rights (UU PDP)

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion (subject to legal retention requirements).
  • Withdraw consent for marketing communications.
  • Lodge a complaint with the Indonesian data protection authority.

To exercise these rights, contact privacy@gilijet.com.

6. Security

We use industry-standard encryption (HTTPS/TLS) for all data in transit. Database access is restricted, payment data is tokenized via Mayar, and we log every administrative action. Despite this, no internet service can be guaranteed 100% secure.

7. Cookies

We use only essential cookies (session, authentication). We do not use third-party advertising trackers.

8. Children

Gilijet is not intended for users under 18. Minors travel under the booking of a parent or guardian who accepts these terms on their behalf.

9. Changes

Material changes to this policy will be notified by email to active account holders at least 30 days before taking effect.

10. Contact

Data Protection Officer · privacy@gilijet.com
PT Gilijet Nusantara · Jakarta, Indonesia