Privacy Policy

01 What Personal Data We Collect

To provide our visa and immigration services, we collect various types of personal data. The specific data collected will depend on the service you request and the requirements of Indonesian immigration authorities. This may include:

• Identity Data: Full name, date of birth, place of birth, nationality, gender, marital status, passport details (number, issue/expiry date, place of issue, passport photo, signature), visa history, and any other government-issued identification.
• Contact Data: Residential address, email address, telephone number.
• Financial Data: Payment information (e.g. credit card details, bank account details for refunds), billing address. Please note that most payment transactions are processed by secure third-party payment gateways, and we do not store full payment card details on our servers.
• Travel Data: Flight details, accommodation plans, previous travel history to Indonesia or other countries.
• Biometric Data: Photographs and, if required for specific visa types, fingerprints or other biometric identifiers. (Note: This is considered sensitive data under both UU 27/2022 and GDPR.)
• Health Data: Information about your health status, medical history, or vaccination records, if required for specific visa categories or by immigration regulations. (Note: This is sensitive data.)
• Background Data: Information regarding your educational background, employment history, and, if required, criminal record checks. (Note: Criminal record data is sensitive data.)
• Website Usage Data: IP address, browser type, operating system, pages viewed, time spent on our website, and other diagnostic data collected via cookies and similar technologies.

02 Consent For Sensitive Data

When collecting sensitive personal data (such as biometric, health, or criminal record data), we will obtain your explicit consent, unless processing is required by law for public interest reasons.

03 How We Use Your Personal Data (Purpose)

We use your personal data for the following primary purposes:

• To Provide Visa & Immigration Services: Processing your visa applications, managing your immigration permits, and facilitating your entry and stay in Indonesia.
• Communication: To respond to your inquiries, provide updates on your application status, and send important service-related notifications.
• Legal & Regulatory Compliance: To comply with Indonesian immigration laws, anti-money laundering regulations, and other legal obligations.
• Security & Fraud Prevention: To protect our services and prevent fraudulent activities.
• Service Improvement: To analyze website usage and improve our services, website functionality, and user experience.
• Customer Support: To provide assistance and resolve any issues you may encounter.

04 Legal Basis for Processing

Our legal bases for processing your personal data include:

• Contractual Necessity: Processing is necessary for the performance of a contract with you (e.g. to provide the visa services you requested).
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which KITAP Bali is subject (e.g. Indonesian immigration laws).
• Consent: Where required by law, especially for sensitive personal data or non-essential purposes, we will obtain your explicit consent. You have the right to withdraw your consent at any time.
• Legitimate Interests: Processing is necessary for our legitimate interests (e.g. improving our services, preventing fraud), provided these interests do not override your fundamental rights and freedoms.

05 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, this means we will retain your data for the duration of your visa application process and for a period thereafter as required by Indonesian immigration law or other applicable regulations. After this period, your data will be securely deleted or anonymized.

06 How We Share Your Personal Data

We will not sell or rent your personal data to third parties. We only share your personal data in the following circumstances:

• Government Authorities: We share necessary personal data with Indonesian immigration authorities, embassies, consulates, and other relevant government bodies to process your visa or immigration application.
• Service Providers: We may engage trusted third-party service providers to assist us in operating our business (e.g. payment processors, IT support, hosting providers, courier services). These providers are contractually bound to protect your data and only process it according to our instructions.
• Affiliates & Partners: In some cases, we may share data with our trusted affiliates or partners who assist in providing the requested services, always under strict confidentiality agreements.
• Legal Requirements: We may disclose your data if required by law.