Summary: Manna Vacations does not collect any personal data through this website except for information you voluntarily submit via the enquiry form. We do not use advertising trackers, sell your data, or share it with third parties except as necessary to respond to your enquiry. This policy complies with Indonesia's Undang-Undang Pelindungan Data Pribadi (UU PDP) No. 27 Tahun 2022.
1. Who We Are
Data Controller: Manna Vacations, a sole proprietorship owned and operated by Silvia Stevi Sandy.
Registered Address: Dalung Permai Blok B3/46, Lingkungan Bumi Kerta Kerobokan, Kuta Utara, Denpasar, Bali 80361, Indonesia
NIB Number: 2704240000578
TDUP License: No. 503/…/BPPT (Tanda Daftar Usaha Pariwisata, Kabupaten Badung).
Privacy Contact: mannavacations@proton.me
"Manna Vacations," "we," "us," or "our" refers to the entity above. "You" refers to any person who visits our website or submits an enquiry.
2. Data We Collect
2.1 Data You Voluntarily Provide
We collect personal data only when you choose to complete and submit the enquiry form on our website. This may include:
- First name and last name
- Email address
- Phone number / WhatsApp number (optional)
- Planned travel date (optional)
- Number of travellers (optional)
- Service of interest (optional)
- Any additional information included in your message
2.2 Data We Do NOT Collect
We do not collect payment card data, government ID numbers, biometric data, advertising/tracking data, browsing history, behavioural profiles, or GPS/IP-based location data through this website.
2.3 Automatically Collected Technical Data
Our web server may retain standard access logs (IP address, browser type, timestamp) for up to 30 days solely for security monitoring. This data is never linked to enquiry submissions and is deleted automatically.
3. How We Use Your Data
We use submitted information exclusively to:
- Respond to your travel enquiry and provide a quote or itinerary proposal
- Communicate about the services you have expressed interest in
- Follow up once if we have not received a reply within 7 days
- Comply with Indonesian legal or regulatory obligations if required
We will not use your data for unsolicited marketing, profiling, automated decision-making, or any purpose unrelated to your enquiry.
4. Legal Basis for Processing
Under UU PDP No. 27 Tahun 2022 (Pasal 20), we process your personal data on the basis of:
- Express Consent (Persetujuan) — you provide consent by submitting the enquiry form after reviewing this policy.
- Contractual Necessity — processing is necessary to take pre-contractual steps at your request.
- Legitimate Interests — for the limited purpose of responding to your communication.
You may withdraw consent at any time by contacting us at the address in Section 12.
5. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data to any third party. We may share data only with:
- Email service provider — our business email is hosted on Google Workspace.
- Accommodation or tour partners — only if you proceed to book and we need to share your name and contact details with the relevant provider. We will inform you before doing so.
- Legal or governmental authorities — if required by Indonesian law or court order.
6. Data Retention
Enquiry data is retained for 24 months from the date of submission, or until you request deletion, whichever is earlier. If you proceed to book, records may be retained for up to 5 years as required by Indonesian commercial record-keeping regulations (UU No. 8 Tahun 1997).
7. Your Rights Under Indonesian Law
Under UU PDP No. 27 Tahun 2022, you have the right to:
- Information (Pasal 8) — know what personal data we hold about you
- Access (Pasal 34) — request a copy of your personal data
- Rectification (Pasal 35) — correct inaccurate or incomplete data
- Erasure (Pasal 36) — request deletion of your data
- Withdraw Consent (Pasal 38) — withdraw consent at any time
- Object (Pasal 39) — object to processing of your data
- Portability (Pasal 37) — receive your data in a portable format
To exercise any right, contact us at mannavacations@proton.me. We will respond within 14 business days.
8. Cookies & Tracking
Our website does not currently use cookies, tracking pixels, analytics scripts, social media embeds, or third-party advertising tags. No cookie consent banner is therefore presented. Should we introduce any cookies in the future, we will update this policy and present an appropriate consent mechanism.
9. Children's Privacy
Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us immediately and we will delete it promptly.
10. Security
We implement reasonable technical and organisational measures to protect your personal data, including encrypted email transmission (TLS) and access controls on our systems. However, no method of electronic transmission is 100% secure.
11. Changes to This Policy
We may update this policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of the website after changes constitutes acceptance of the updated policy.
12. Contact Us
Privacy Officer — Manna Vacations
Dalung Permai Blok B3/46, Lingkungan Bumi Kerta Kerobokan, Kuta Utara, Denpasar, Bali 80361, Indonesia
Email: mannavacations@proton.me
WhatsApp: +62 897-6757-811