**Sumba Island Escapes collects only the contact and trip details you choose to share through our enquiry form, WhatsApp, or email. We use them to answer your question and, when you ask us to, to arrange your stay or transfer through Bali Premium Trip via sumbaislandtour.com. We do not sell your data, and we never share more than a booking needs.**
This page explains, in plain language, what personal data this website handles and the choices you have. It is written to meet Indonesia’s Personal Data Protection Law (Undang-Undang No. 27 Tahun 2022, “UU PDP”) and to be readable for international visitors covered by the EU/UK General Data Protection Regulation (GDPR). Last updated as of 2026 and subject to change.
A note before we start: Sumba Island Escapes is an independent editorial guide. We are not affiliated with, endorsed by, or acting on behalf of NIHI Sumba (formerly Nihiwatu Resort) or its owners. We name the resort only to inform travellers. Bookings we help arrange are for services provided by third parties, not by the resort.
Who runs this website and who controls your data?
This site (nihiwatuhotel.com) is published by Juara Holding Group. Day-to-day enquiries and any bookings are handled by Bali Premium Trip, the concierge operator that responds when you send a message. For the purposes of UU PDP and GDPR, Juara Holding Group acts as the data controller for this website, and Bali Premium Trip processes enquiry and booking data to serve your request.
If you would rather not have your details handled this way, simply read our guides without submitting a form or message. No account or sign-up is required to use the site.
What information do we collect?
We collect what you give us and a small amount of standard technical data that almost every website receives. We do not ask for government IDs, passport numbers, or payment card details on this site.
| Data we collect | How we get it | Why we need it |
|---|---|---|
| Name, email, phone/WhatsApp number | You type it into the enquiry form or message us | To reply and discuss your trip |
| Travel dates, group size, budget, requests | You share it voluntarily | To give an accurate, useful answer |
| Message content | Your enquiry text | To understand and respond to your question |
| IP address, browser/device type, pages viewed | Collected automatically | Security, and to see which guides are useful |
| Cookie preferences | Your choice on the banner | To remember your settings |
We ask you not to send sensitive personal data (health details, religion, financial information) through the enquiry form. If a trip genuinely needs such details, our team will request them through a secure, direct channel and only with your consent.
Why do we use your data, and what is the legal basis?
Under UU PDP and GDPR we only process data where we have a lawful reason to. In practice there are three:
- Your consent — when you submit the enquiry form or message us on WhatsApp/email, you are asking us to use your details to reply.
- Taking steps at your request — arranging a quote, stay, or transfer through sumbaislandtour.com is a step toward a contract you have asked for.
- Legitimate interest — keeping the site secure, preventing spam, and understanding which content helps travellers, balanced against your privacy.
We do not use your data for automated decision-making or profiling that produces legal effects.
Do we use cookies and analytics?
Yes, but sparingly. Essential cookies keep the site working and remember your cookie choice. If you accept them, we may use privacy-respecting analytics to count visits and see which pages are read. On your first visit you can accept or decline non-essential cookies; declining does not break the site. You can also clear or block cookies in your browser settings at any time.
We do not run advertising trackers that follow you across other websites.
Who do we share your data with?
We share the minimum needed to answer you or fulfil a booking you have requested. The main flow is this: when you ask us to arrange a stay or transfer, your relevant details are passed to Bali Premium Trip and routed through the generic booking domain sumbaislandtour.com so a real person can prepare your quote.
| Recipient | What they receive | Purpose |
|---|---|---|
| Bali Premium Trip (operator) | Your contact and trip details | To reply and prepare a booking |
| sumbaislandtour.com (booking domain) | The same enquiry details | The commercial channel that handles quotes and reservations |
| Vetted licensed partners (e.g. accommodation, transport) | Only what a confirmed booking needs | To deliver the service you booked |
| Hosting, email, and messaging providers | Technical data needed to run the site and reply | Infrastructure and communication |
We do not sell, rent, or trade your personal data to anyone. We are not NIHI Sumba and cannot make a resort booking on your behalf; where we do not own or operate a service, arrangements are made through vetted licensed partners.
How does Indonesia’s UU PDP apply?
Because this site is operated from Indonesia, UU PDP (Law 27/2022) is the primary framework. It gives you rights to be informed about processing, to access and correct your data, to withdraw consent, to object to certain processing, and to have data deleted when it is no longer needed. It also requires us to keep your data secure and to limit collection to what is necessary — principles this policy follows.
What if you are in the EU or UK?
If you contact us from the European Economic Area or the United Kingdom, we handle your data with GDPR in mind. Your data may be transferred to and stored in Indonesia, outside the EEA/UK. When you send an enquiry, you understand that your details will be processed in Indonesia so we can reply. You keep the GDPR rights listed below, and you may lodge a complaint with your local data protection authority.
What are your rights, and how do you exercise them?
You can ask us to:
- Show you the data we hold about you
- Correct anything inaccurate
- Delete your data or restrict how we use it
- Withdraw consent you previously gave
- Receive a copy of the data you provided
To make any of these requests, contact us using the details below. We aim to respond within a reasonable period and may need to confirm your identity first.
How long do we keep your data, and how is it protected?
We keep enquiry data only as long as needed to answer you and, if you book, to support that trip and meet any legal record-keeping duty. After that we delete or anonymise it. We use reasonable technical and organisational safeguards, but no online transmission is ever completely risk-free.
Children under 18 should not submit personal data through this site without a parent or guardian’s involvement.
How can you contact us about privacy?
For any privacy question, correction, or deletion request, reach the operator directly:
- WhatsApp: +62 811 2859 0000
- Email: sales@balipremiumtrip.com
We will update this page when our practices change and will show the revised date at the top.