Voyael is run by a small team in East Java, Indonesia. We are responsible for the personal data described here.

What we collect and why

When you subscribe to the newsletter

We store your email address, the page you signed up from, the language of that page and the date. We use them only to send the newsletter, in that language. You can unsubscribe at any time; we then keep the address marked as unsubscribed, so it is never emailed again by mistake.

When you send a trip enquiry

We store what you type in the form (your name, email, where you are travelling from, dates, number of travellers, budget and message), the page you sent it from and its language, and the moment you agreed to us keeping it. We use it to reply and to help plan your trip.

We pass your details to a local partner (a driver, guide or homestay) only if you ticked the box that allows it. Without that, we do not share them. Our replies to you are kept with your note, for as long as we keep it.

Links to booking sites go through a short address on our site (/go/…). For each click we record which link it was, the page and the spot on the page, your browser type, the country your connection comes from, and a one-way, salted hash of your IP address. We never store the IP address itself, and the hash cannot be turned back into it. We use these records to see which guides are useful and to filter out automated traffic.

We also tell the booking site which of our pages sent you (for example guide-bali-to-ijen), so its reports show which page led to a booking. No personal details are passed on.

When you simply read the site

Public pages set no cookies. If we use visitor statistics, they come from Cloudflare Web Analytics, which counts visits without cookies and without building a profile of you. Our hosting and security providers process your IP address briefly to deliver pages and stop attacks.

  • Newsletter and partner sharing: your consent, which you can withdraw at any time.
  • Enquiries: your consent, and the steps you asked us to take to plan a trip.
  • Click records, statistics and security: our legitimate interest in running a useful, safe site, with the least data we can manage.

How long we keep it

  • Newsletter: until you unsubscribe (then only the address, marked as unsubscribed). An address that is never confirmed is deleted after 30 days.
  • Enquiries: as long as we need them to answer and arrange your trip, or until you ask us to delete them.
  • Click records: the IP hash and browser type are deleted after 90 days; what remains has no identifier and is kept to compare pages over time.
  • Backups: an encrypted copy of the database is made every night and kept for 30 days, then deleted.

Who helps us run the site

  • Our hosting provider stores the site and its database (servers in Singapore).
  • Cloudflare delivers the pages, protects them and, if switched on, provides visitor statistics.
  • Resend sends the site’s emails (confirmations, replies, the newsletter) from servers in the European Union (Ireland), without tracking opens or clicks, and Zoho keeps our mailbox, [email protected], where your replies and messages to us arrive.
  • Google keeps our nightly backups in Google Drive. They are encrypted on our server before they leave it, so Google cannot read them.

They process data only to provide their service to us. Because some of them are outside Indonesia, your data may be handled in other countries; we choose providers that protect it.

Your rights

You can ask to see the data we hold about you, to correct it, to delete it, to take a copy, or to stop a use you agreed to. You can also object to the uses based on our legitimate interest. Write to us through the contact page and we will answer as soon as we can, within the time the law requires.

If you are not satisfied with our answer, you may complain to the data protection authority where you live (in Indonesia, the authority responsible under UU No. 27 of 2022; in the European Union, your national supervisory authority).

Changes

When this policy changes, we update it here and change the date at the top.