Your Personal Data

Last updated: 07/2026

Barefoot Yachts Indonesia respects your privacy and is committed to protecting your personal data. This Privacy Notice explains how we collect, use, disclose and protect personal data when you visit our website, contact us, subscribe to our newsletter, submit an enquiry, or book yacht charter and related travel services with us.
This Privacy Notice should be read together with our Terms & Conditions and our Cookie Declaration, which is managed through Cookiebot.

01. Who we are

The controller responsible for the processing of your personal data is:

Barefoot Yachts Limited
Trading as: Barefoot Yachts Indonesia
Address: Unit 2, 10/F., King’s Commercial Building,
2-4 Chatham Court, Tsim Sha Tsui.
Kowloon,Hong Kong
Email: info@barefoot-cruising-indonesia.com
Phone: +62 823-3955-4704

For privacy-related questions or requests, please contact us at the email address above and include “Privacy Request” in the subject line.

02. Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data.

Website and technical data

When you visit our website, certain technical data may be collected automatically, including IP address, browser type and version, device information, operating system, referral source, pages visited, time and date of visit, approximate location, cookie identifiers and interaction data.

Enquiry and contact data

When you submit an enquiry through our website forms, email us, contact us by WhatsApp, or otherwise communicate with us, we may collect your name, email address, phone number, country, preferred destination, travel dates, group size, budget, yacht preferences, message content and any other information you choose to provide.

Newsletter data

When you subscribe to our newsletter, we collect your name, email address, consent status, subscription preferences and related technical information such as sign-up date and source. We may also process standard email campaign analytics, such as delivery, opening, click and unsubscribe information, where this is enabled.

Booking and passenger data

If you proceed with a booking or request detailed travel arrangements, we may collect additional information required to plan, administer and deliver the charter or travel service. This may include passenger names, nationality, date of birth, passport information, passport copies, travel preferences, dietary requirements, emergency contact details, diving or activity preferences, certification information, insurance-related information and other information necessary for operational, safety or regulatory purposes.

Health, allergy and special requirement data

For certain trips and activities, we may need to process information about medical conditions, allergies, disabilities, medication, physical fitness, pregnancy, dietary restrictions, diving fitness or other special requirements. We process this information only where necessary for safety, service delivery, emergency management, compliance with applicable requirements, or where you have provided the information for this purpose.

Payment and transaction data

If you make a booking or payment, we may process billing details, invoice information, payment status, amount paid, transaction references and related correspondence. Payment data may also be processed by banks, payment providers or other financial intermediaries involved in the transaction.

03. How we collect personal data

We collect personal data directly from you when you submit forms, email us, contact us via WhatsApp, subscribe to our newsletter, make an enquiry, provide passenger information, make a booking or communicate with us.

We may also receive personal data from travel companions, group leaders, agents, yacht operators, service suppliers, payment providers and other partners involved in arranging or delivering your trip.

We also collect certain technical data automatically through cookies, tags, server logs and similar technologies, subject to your cookie consent where required.

04. Why we use your personal data

We process personal data for the following purposes:

• to operate, secure and maintain our website;
• to respond to enquiries and provide travel advice;
• to prepare yacht charter proposals, itineraries, quotations and booking documentation;
• to administer bookings, payments, invoices, passenger forms and operational arrangements;
• to coordinate services with yacht operators, crews, agents, guides, transport providers and other relevant service suppliers;
• to comply with applicable legal, regulatory, immigration, port authority, maritime, tax, accounting and safety requirements;
• to manage dietary, medical, accessibility, diving, safety and emergency requirements;
• to send newsletters, offers, destination insights and marketing communications where you have subscribed or otherwise consented;
• to measure and improve website performance, marketing campaigns and user experience;
• to run advertising, conversion tracking and remarketing campaigns where permitted by law and your cookie choices;
• to prevent fraud, misuse, security incidents and unlawful activity;
• to establish, exercise or defend legal claims.

05. Legal bases for processing

Where the EU GDPR, UK GDPR or similar data protection laws apply, we rely on the following legal bases:

Contract or pre-contractual steps. We process enquiry, booking, passenger, payment and service-related data to respond to your request, prepare proposals, arrange bookings and deliver the requested services.

Consent. We rely on consent for non-essential cookies, analytics cookies, advertising cookies, newsletter subscriptions and certain marketing communications. Where required, we also rely on explicit consent for special category data such as health-related information.

Legitimate interests. We may process data for legitimate business purposes, including website security, responding to business communications, improving services, managing supplier relationships, basic analytics, record keeping, fraud prevention and legal protection, provided these interests are not overridden by your rights and freedoms.

Legal obligation. We may process and retain personal data where required by tax, accounting, maritime, immigration, corporate, consumer protection, regulatory or other applicable legal obligations.

Vital interests. In limited situations, we may process personal data, including health-related information, where necessary to protect the vital interests of you or another person, for example in a medical or safety emergency during a trip.

06. Cookies, analytics and advertising technologies

Our website uses cookies and similar technologies. Some cookies are necessary for the website to function. Others are used only with your consent, such as analytics and advertising cookies.

We use Cookiebot as our consent management platform to display the cookie banner, record consent choices, manage cookie categories and provide a Cookie Declaration. You can change or withdraw your cookie consent at any time through the cookie settings available on our website.

We may use Google Tag Manager to manage website tags. Google Tag Manager itself is used to deploy and control other tags and does not decide independently which third-party tags are activated. Tags are configured to operate according to your consent choices where required.

We use Google Analytics to understand how visitors use our website, measure performance and improve content, usability and services. Google Analytics may process information such as pages visited, device and browser data, approximate location, referral source, interactions and cookie or measurement identifiers, depending on your consent settings and our configuration.

We may use Google Ads for advertising, conversion tracking and remarketing. This helps us understand whether our ads lead to enquiries or other actions on our website and may allow us to show relevant ads to people who have previously visited our website. Google Ads cookies and advertising identifiers are used only where required consent has been obtained.

If Google Consent Mode is implemented, your cookie consent choices are communicated to Google so that Google tags can adjust their behaviour according to whether you have granted or denied consent.
Please refer to the Cookie Declaration on our website for a current list of cookies, providers, purposes, durations and categories.

07. Forms and website submissions

Our website uses WPForms for enquiry and subscription forms. When you submit a form, the information you provide may be stored in our WordPress database, sent to us by email notification and used to respond to your enquiry or process your request.
Please do not submit sensitive information through general website forms unless it is necessary for your request. If sensitive travel, medical or passenger information is required, we will request it in the appropriate context.

08. Newsletter and Mailchimp

We use Mailchimp to manage newsletter subscriptions and send email marketing communications. If you subscribe to our newsletter, Mailchimp may process your name, email address, subscription status, consent record, campaign interaction data and related technical information.

You can unsubscribe from our newsletter at any time by using the unsubscribe link in any newsletter email or by contacting us directly. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Mailchimp may process personal data in the United States and other locations where Mailchimp, its affiliates or subprocessors operate. Where required, appropriate transfer safeguards are used.

09. WhatsApp and external communication channels

If you contact us through WhatsApp or another external communication platform, the provider of that platform may process your personal data under its own terms and privacy policy. We use the information you send through those channels to respond to your request and manage our communication with you.

10. Who we share personal data with

We may share personal data with the following categories of recipients where necessary for the purposes described in this Privacy Notice:

• yacht owners, yacht operators, crews and affiliated service suppliers;
• travel agents, booking partners and group leaders where relevant;
• transport providers, guides, activity providers, diving operators and other local suppliers;
• port authorities, immigration authorities, maritime authorities, government bodies or regulators where required;
• IT, hosting, website, email, analytics, advertising, CRM, security and communication service providers;
• banks, payment providers, accountants, tax advisers and auditors;
• legal advisers, insurers, professional advisers and dispute resolution bodies;
• law enforcement or public authorities where required by law or necessary to protect rights, safety or security.

We do not sell your personal data

11. International transfers

We are based in Indonesia and may work with service providers, suppliers and technology partners located in Indonesia, the European Economic Area, the United Kingdom, the United States and other countries.

Where personal data is transferred internationally, we take steps designed to protect the data in accordance with applicable law. These steps may include contractual protections, data processing agreements, standard contractual clauses, transfer impact assessments, adequacy mechanisms, Data Privacy Framework participation where applicable, consent, or other lawful transfer mechanisms.

12. How long we keep personal data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to respond to enquiries, provide services, administer bookings, comply with legal obligations, resolve disputes and enforce agreements.

Retention periods depend on the type of data and the purpose of processing. In general:

• enquiry data is retained for as long as needed to respond to and manage the enquiry and related follow-up;
• booking, invoice, payment and accounting records are retained for the period required under applicable tax, accounting and legal requirements;
• passenger and operational trip data is retained for as long as necessary to deliver the service and manage legal, safety, insurance or dispute-related requirements;
• newsletter data is retained until you unsubscribe or we otherwise remove inactive or invalid subscribers;
• cookie consent records are retained according to our Cookiebot configuration and applicable legal requirements;
• legal claim-related data may be retained for as long as necessary to establish, exercise or defend legal rights.

When data is no longer required, we delete it, anonymise it or securely restrict access to it.

13. Data security

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures may include access controls, secure hosting, SSL encryption, system updates, password protection, backups and limiting access to personal data to people who need it for legitimate business purposes.

No website, email system or internet transmission is completely secure. You should take care when sending personal data online and avoid sending highly sensitive information unless necessary.

14. Your rights

Depending on where you are located and which data protection laws apply, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• object to direct marketing at any time;
• request data portability;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a competent data protection authority.

To exercise your rights, please contact us using the contact details in Section 1. We may need to verify your identity before responding to your request.

If you are located in the European Economic Area, United Kingdom or another jurisdiction with a data protection authority, you may also have the right to complain to your local supervisory authority.

15. Marketing preferences

You can opt out of email marketing at any time by clicking the unsubscribe link in our newsletter emails or by contacting us directly.

You can manage analytics and advertising cookies through our cookie banner or cookie settings. You may also be able to manage advertising preferences through browser settings or platform-level advertising controls.

16. Children’s data

Our website and services are not directed at children. However, our yacht charter services may include family travel, and we may process children’s passenger information where provided by a parent, guardian, group leader or authorised adult for booking, safety, operational or legal purposes.

If you provide personal data about a child, you confirm that you have the authority to do so.

17. Third-party websites and links

Our website may contain links to third-party websites, social media platforms, review platforms, yacht operators or service suppliers. We are not responsible for the privacy practices, content or security of third-party websites. Please review their privacy notices before providing personal data to them.

18. Automated decision-making

We do not use your personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.
Advertising and analytics tools may involve profiling for measurement, audience creation or remarketing, but only where permitted by law and your consent choices.

19. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our services, website, technology, legal requirements or data processing practices. The updated version will be posted on this page with a revised “Last updated” date.

20. Contact us

For questions, requests or complaints about this Privacy Notice or how we process personal data, please contact:

Barefoot Yachts Limited
Trading as: Barefoot Yachts Indonesia
Address: Unit 2, 10/F., King’s Commercial Building,
2-4 Chatham Court, Tsim Sha Tsui.
Kowloon,Hong Kong
Email: info@barefoot-cruising-indonesia.com
Phone: +62 823-3955-4704