Coralbound Privacy Policy

Date Published: September 29, 2026

Introduction

Language Precedence: These Terms of Use are originally written in English. While translations into other languages may be provided for convenience, the English version is the only legally binding version and shall prevail in the event of any conflict, discrepancy, or difference in interpretation between the English version and any translated version.

PT Tur Tak Terkalahkan ("Coralbound", "we", "us") domiciled at Jl. Sunset Road No 89, Pertokoan Sunset Indah II, Kav 3, No 3B, 80361 Kuta, Bali, Indonesia, operates a liveaboard diving booking platform through the website https://coralbound.com (the "Platform"). The service you book on the Platform is a liveaboard trip. During booking you may ask us for help with related travel, such as a hotel before or after the trip, a domestic flight, or extending the holiday. Those are assistance requests. We do not sell hotel rooms, airline tickets, or tours as bookable inventory, and there is no Coralbound mobile application.

We are committed to respecting and protecting the privacy of our customers, including participants in diving liveaboard experiences, individuals making inquiries, and visitors to our website at coralbound.com.

This Privacy Policy describes how we handle and protect your personal data—any information capable of identifying you as an individual—in our role as data controller. It applies to personal data provided to or obtained by us during interactions such as bookings, inquiries, or website use.

Our diving operator partners, accommodation providers, and destination management company (DMC) partners may act as co-data controllers or processors on our behalf, particularly in booking and service delivery processes.

For additional details on our general terms, please refer to the for the Coralbound website and booking platform.

Summary Of Collection And Use of Information

Kami mengumpulkan dan menggunakan data pribadi untuk tujuan komersial, hukum, dan bisnis, tunduk pada hukum yang berlaku. Hal ini dapat didasarkan pada persetujuan Anda, kepentingan sah kami, atau dasar hukum lainnya. Dalam beberapa kasus, pengumpulan diperlukan untuk mengoperasikan platform atau menyediakan layanan.

Kami menggunakan data pribadi Anda untuk: memenuhi permintaan informasi; memproses pemesanan liveaboard dan bantuan perjalanan terkait apa pun yang Anda minta; menjalankan pusat pesan di situs; mengevaluasi dan meningkatkan layanan kami; mendistribusikan peringatan keselamatan, buletin, dan materi terkait menyelam; menganalisis kinerja platform; mencegah penipuan dan spam; menegakkan syarat layanan dan perjanjian kami; mematuhi hukum dan kewajiban pelaporan; dan menyelesaikan tujuan lain yang Anda mulai.

Kami dapat menggunakan cookie pihak pertama dan ketiga serta teknologi pelacakan lainnya untuk mengelola platform kami, memberikan layanan, dan mengumpulkan analitik. Lihat bagian Cookie di bawah ini untuk detailnya.

Harap dicatat bahwa penanganan data dapat bervariasi berdasarkan interaksi, dan contoh yang diberikan tidak lengkap.

1. Tentang Kebijakan Ini

1.1 Siapa Kami

Coralbound dioperasikan oleh PT Tur Tak Terkalahkan, sebuah perusahaan yang didirikan di Indonesia dengan Nomor Induk Berusaha (NIB): 2806230016874. Kami berkantor pusat di Jl. Sunset Road No 89, Pertokoan Sunset Indah II, Kav 3, No 3B, 80361 Kuta, Bali, Indonesia.

Informasi Pengontrol Data:

Pengontrol Data Utama: PT Tur Tak Terkalahkan
Kontak: [email protected]

1.2 Layanan yang Dicakup

This policy applies to all Coralbound services including:

Liveaboard diving trip bookings, including cabins, trip packages or add-ons, gifts, and voucher or gift codes
Optional requests for help with hotels, domestic flights, or holiday extensions
The website, accounts, and the on-site message center
Customer service and support communications

1.3 Legal Framework

We comply with:

European Union: General Data Protection Regulation (GDPR)
United Kingdom: UK General Data Protection Regulation (UK GDPR)
United States: California CCPA/CPRA, Virginia CDPA, Colorado CPA, Connecticut CTDPA
International: Canada PIPEDA, Japan APPI, Singapore PDPA, Australia Privacy Act

2. Information We Collect

2.1 Personal Information You Provide

Booking and Account Information:

To complete bookings and comply with Operator/Service Provider requirements, Indonesian tourism regulations, and international travel requirements, we collect extensive personal information including:

Personal Identity Information:

Nama penuh, tarikh lahir, jantina, dan kewarganegaraan
Gambar profil (pilihan)
Gambar pasport (diperlukan untuk pengesahan pengendali)
Maklumat dan butiran pasport

Maklumat Perhubungan:

Alamat e-mel dan nombor telefon
Alamat surat-menyurat, bandar, kod pos, dan negara
Nama dan nombor telefon kenalan kecemasan

Maklumat Kesihatan dan Keselamatan:

Pengisytiharan kecergasan perubatan (seperti yang diperlukan untuk aktiviti menyelam)
Masalah perubatan dan keadaan kesihatan
Alergi (makanan dan ubat-ubatan)
Sekatan diet dan keperluan makanan istimewa
Keperluan aksesibiliti

Maklumat Menyelam:

Butiran pensijilan menyelam (jenis dan tahap pensijilan)
Jumlah selaman yang direkodkan
Sejarah pengalaman menyelam

Maklumat Insurans:

Pembekal insurans perjalanan dan butiran polisi
Maklumat perlindungan insurans

Pilihan Perjalanan:

Permintaan dan preferensi khusus
Persyaratan akomodasi

Keamanan Transmisi Data: Semua data yang ditransmisikan antara perangkat Anda dan Coralbound dilindungi menggunakan enkripsi transport standar industri (misalnya, TLS/HTTPS) untuk membantu mencegah intersepsi selama transfer. Ini mengamankan komunikasi saat transit; data apa pun yang disimpan atau diproses oleh Coralbound atau penyedia layanan pihak ketiga kami ditangani di bawah praktik dan kebijakan keamanan masing-masing.

Informasi Pembayaran:

Metode pembayaran yang Anda pilih di halaman pemesanan: kartu kredit atau debit, atau transfer bank
Jumlah, mata uang, status pembayaran, dan referensi pemesanan yang kami catat
Nomor kartu dimasukkan di halaman pembayaran yang ditautkan dari pemesanan Anda. Kami tidak menyimpan nomor kartu lengkap di server kami
Untuk transfer bank, kami menampilkan rekening Permata Bank kami atas nama PT Tur Tak Terkalahkan dalam instruksi pembayaran pemesanan Anda. Kami mencatat bahwa Anda memilih metode ini dan referensi pemesanan

Data Komunikasi:

Pesan yang Anda kirim di pusat pesan di situs, termasuk halaman tempat Anda membuka pesan
File yang Anda lampirkan ke pesan (gambar dan PDF). Ini disimpan dalam penyimpanan file pribadi dan tidak dipublikasikan di situs web
Data langganan push browser jika Anda mengizinkan notifikasi pesan di perangkat Anda
Interaksi layanan pelanggan
Pengiriman ulasan dan umpan balik
Preferensi komunikasi pemasaran
Interaksi media sosial dengan akun kami

2.2 Informasi yang Dikumpulkan Secara Otomatis

2.3 Alat Analitik Situs

Untuk memahami cara situs web digunakan dan untuk mengukur iklan, kami menggunakan Google Tag Manager, Google Analytics 4, Google Ads, dan Meta Pixel (ID: 25303170292707457). Google Analytics mengumpulkan data penggunaan seperti tampilan halaman, durasi sesi, interaksi (misalnya klik dan gulir), informasi perangkat, dan lokasi umum yang berasal dari alamat IP. Google Tag Manager memuat dan mengelola tag-tag tersebut. Permintaan pengukuran Google di coralbound.com diarahkan melalui jalur pihak pertama kami di coralbound.com/nautilus (Cloudflare Google Tag Gateway). Meta Pixel dijelaskan dalam Bagian 5.5.

Tag analitik dan iklan hanya berjalan setelah Anda menerimanya di bilah cookie. Anda dapat menolaknya, atau mengubah pilihan tersebut nanti di Preferensi Cookie. Anda juga dapat menggunakan browser Anda, Add-on Browser Penolakan Google Analytics (https://tools.google.com/dlpage/gaoptout), pengaturan iklan Google, dan pengaturan iklan Meta, atau hubungi [email protected]. Untuk cara Google memproses data, lihat https://policies.google.com/privacy.

Technical Data:

IP address, device identifiers, browser type and version
Operating system, screen resolution, time zone settings
Website navigation patterns and click-through data
Cookie and tracking technology data (see Section 6)

Location Data:

General location derived from IP address for currency and language preferences
Location-based service preferences

Usage Analytics:

Pages visited, time spent on site, bounce rates
Search queries and booking abandonment data
Feature usage patterns and performance metrics
Platform interaction data for service improvement

2.4 Authentication and Account Management

For secure user authentication and account management, we partner with Clerk, a third-party service that handles all aspects of user login, registration, and session management on our platform. When you create an account or log in (including via social media platforms), Clerk securely stores and processes your account data, such as email addresses, usernames, and authentication tokens, while we do not retain passwords, social media connection details, or any sensitive authentication credentials on our servers. This data minimization approach ensures that Coralbound only accesses the minimum information necessary for service delivery, such as confirming your identity for bookings or personalized recommendations. Clerk acts as a data processor on our behalf, complying with GDPR and other applicable laws through measures like encryption, secure data centers, and strict access controls. Processing is based on contract performance (GDPR Article 6(1)(b)) for enabling access to our services, with data retained only as long as your account is active or as required by law. If you delete your account or request data erasure, we will coordinate with Clerk to fulfill your request; you can manage your authentication preferences directly through Clerk's settings or contact us at [email protected] for assistance.

2.5 Error Monitoring Tools

To maintain the reliability and security of our platform, we use Sentry.io, a third-party error monitoring and performance management tool, which helps us detect, diagnose, and resolve technical issues in real-time. Sentry collects anonymized or pseudonymized data related to errors and crashes, such as stack traces, browser/console logs, device information, IP addresses (which may be masked for privacy), and contextual details about user sessions (e.g., actions leading to an error during booking or navigation). This processing does not involve collecting sensitive personal data unless it's inadvertently included in error logs, in which case we promptly anonymize or delete it. As our data processor, Sentry operates with GDPR-compliant practices, including EU data hosting options, encryption, and short retention periods (typically 90 days), with processing based on our legitimate interests under GDPR Article 6(1)(f) for platform improvement and fraud prevention. We do not use Sentry for marketing or profiling; users can limit data sharing by opting out of non-essential tracking via browser settings, though error monitoring is essential for service functionality. For questions or to exercise data rights (e.g., access to any captured data), contact us at [email protected].

2.6 Third-Party Information

Social media profile data (when you connect accounts)
Partner-provided information (dive operators, hotels, DMCs)
Public business directories and travel databases
Identity verification services (where required by applicable law)

2.7 Service Providers Who Process Data For Us

We use the following providers to run the Platform. They process personal data only for the purposes described in this policy:

Clerk — account login, registration, and sessions (see Section 2.4)
Cloudflare — website delivery, security, bot checks (Turnstile) on public forms and anonymous messages, private file storage (R2) for guest photos, passport photos, and message attachments, and the AI gateway used for the features in Section 4.2
Railway — application hosting and the MongoDB database that stores Platform records
SendGrid — transactional email (booking messages, account messages, and similar mail)
Sentry — error monitoring (see Section 2.5)
Google — Tag Manager, Analytics, Ads, and Maps cookies described in this policy
Meta — Meta Pixel, as an independent controller for advertising data (see Section 5.5)
OpenRouter, and the model providers it routes to (including Google and Anthropic) — the artificial intelligence features in Section 4.2. Prompts are sent through the Cloudflare AI gateway. We do not use guest data to train our own models

Card payments are completed on a payment page we link from the booking. That provider receives the card details. We receive payment status, not the full card number.

2.8 Special Considerations Regarding Children

Age Restrictions: You must be at least 13 years of age (16 years of age in the EU) to register for a Coralbound account. Children under 18 years of age require parental consent for certain diving activities and may need additional parental approval for booking services.

Parental Consent Requirements: In consideration for use of Coralbound's services, parents/guardians agree to provide true and accurate information in registration forms for their children and to update registration information as necessary to keep it accurate and current. If false, inaccurate, not current or incomplete information is provided, or if Coralbound, in its sole discretion, determines that such information may be false, inaccurate, not current or incomplete, Coralbound has the right to suspend or terminate the account and refuse present or future use of Coralbound's services.

3. Emergency Data Sharing

3.1 Kecemasan Perubatan

Respons Perubatan Segera: Apabila anda mengalami kecemasan perubatan semasa perkhidmatan yang ditempah Coralbound, kami mungkin perlu berkongsi maklumat peribadi anda dengan segera untuk melindungi kepentingan vital anda:

Pemberitahuan Kenalan Kecemasan: Hubungan segera kenalan kecemasan anda yang ditetapkan menggunakan maklumat yang diberikan semasa tempahan
Perkongsian Maklumat Perubatan: Perkongsian pengisytiharan kecergasan perubatan yang relevan dan maklumat kesihatan dengan kemudahan perubatan tempatan, perkhidmatan kecemasan menyelam (seperti DAN - Divers Alert Network), dan responden kecemasan
Penyelarasan Hospital: Menyediakan pengenalan, maklumat insurans, dan sejarah perubatan kepada kemudahan perubatan yang menerima
Perkhidmatan Evakuasi: Menyelaras dengan perkhidmatan evakuasi perubatan dan berkongsi maklumat peribadi dan perubatan yang diperlukan

Maklumat Perubatan yang Dikongsi:

Nama penuh, kewarganegaraan, dan maklumat pengenalan
Butiran kenalan kecemasan dan perhubungan
Pengisytiharan kecergasan perubatan dan keadaan kesihatan yang diketahui
Tahap pensijilan menyelam dan pengalaman (relevan untuk kecemasan perubatan berkaitan menyelam)
Maklumat insurans dan butiran polisi
Alergi ubat dan ubat semasa (jika disediakan)
Jenis darah dan maklumat perubatan kritikal lain (jika disediakan)

Asas Undang-undang: Perlindungan kepentingan vital di bawah Perkara 6(1)(d) GDPR dan kepentingan yang sah untuk respons kecemasan

3.2 Insiden Keselamatan dan Sekuriti

Kecemasan Maritim dan Menyelam:

Pengawal Pantai dan Pihak Berkuasa Maritim: Perkongsian manifest penumpang, tahap pengalaman menyelam, dan maklumat kenalan kecemasan dengan Pengawal Pantai Indonesia, pihak berkuasa pelabuhan, dan pusat koordinasi penyelamat maritim antarabangsa
Perkhidmatan Kecemasan Menyelam: Perkongsian segera dengan DAN (Divers Alert Network), pasukan respons kecemasan menyelam tempatan, dan kemudahan bilik hiperbarik
Operasi Mencari dan Menyelamat: Menyediakan data lokasi, pengenalan peribadi, dan kenalan kecemasan kepada pihak berkuasa mencari dan menyelamat
Respons Kecemasan Kapal: Menyelaras dengan pengendali kapal dan perkhidmatan kecemasan untuk operasi evakuasi atau menyelamat

Bencana Alam dan Situasi Krisis:

Government Authorities: Sharing guest information with local emergency management authorities during natural disasters (earthquakes, tsunamis, volcanic eruptions)
Embassy and Consular Services: Providing citizen information to relevant embassies and consulates for citizen welfare and evacuation assistance
Family Notification: Immediate notification of emergency contacts and family members about safety status and location
Evacuation Coordination: Sharing travel documents and identification information with evacuation services and transportation authorities

3.3 Law Enforcement and Security

Legal Requirements:

Criminal Investigations: Cooperation with law enforcement agencies when required by valid legal process or court orders
Immigration and Border Control: Sharing passenger information with immigration authorities as required by law
Anti-Terrorism and National Security: Compliance with security screening requirements and watch list checking
Customs and Border Protection: Providing travel information to customs authorities when legally required

Fraud and Safety Protection:

Financial Crime Prevention: Sharing transaction information with financial crime prevention agencies and payment processors
Safety Threat Response: Immediate sharing with authorities when credible safety threats are identified
Missing Persons: Cooperation with law enforcement in missing person investigations
Child Protection: Mandatory reporting to appropriate authorities when child safety concerns are identified

4. How We Use Your Information

4.1 Primary Processing Purposes

Service Delivery (Legal Basis: Contract Performance):

Processing and confirming your liveaboard bookings, including cabins, packages, gifts, and codes
Passing booking details to the liveaboard operator, and passing any related-travel request you made
Recording the payment method you chose and, for cards, sending you a payment link. Card details are collected by the payment provider, not stored by us
Providing customer support and trip assistance
Sending booking confirmations, vouchers, and travel documentation

Kepatuhan Hukum (Dasar Hukum: Kewajiban Hukum):

Koordinasi tanggap darurat dan keselamatan dengan otoritas terkait
Kepatuhan terhadap peraturan perjalanan dan pariwisata di destinasi layanan

Kepentingan Bisnis yang Sah (Dasar Hukum: Pasal 6(1)(f) GDPR):

Peningkatan fungsionalitas dan keamanan situs web
Sistem deteksi dan pencegahan penipuan
Analitik bisnis dan optimalisasi kinerja untuk penyampaian layanan

5. Cookies and Tracking Technologies

5.1 Consent Management Tool

We show a cookie banner on the website. It stores your choice in a first-party cookie named cc_coralbound for about 6 months. Categories are strictly necessary, analytics, and advertising. You can reopen Cookie Preferences and change the choice. Necessary cookies (sign-in, the affiliate referral cookie, the currency rate cache, Cloudflare security, and this preference cookie) are set so the site can function. Analytics and advertising cookies are set only if you accept them.

5.1 Cookie Categories

Strictly Necessary Cookies:

Session management and user authentication
Security and fraud prevention
Basic website functionality and navigation
Booking process management
Affiliate referral tracking (coralbound_referral - 30 days)

Preference Cookies:

Language and currency preferences
Personalized content delivery
Location-based service enhancements
Social media integration features

Statistics Cookies:

Error tracking and performance monitoring
A/B testing for feature improvements

Marketing Cookies:

Retargeting and remarketing campaigns through various third-party advertising platforms
Conversion tracking and attribution across advertising networks
Interest-based advertising and audience segmentation
Cross-platform marketing coordination and customer journey tracking
Custom audience creation and lookalike audience development

5.2 Cookie Management

Granular Controls: Accept, reject, or change analytics and advertising cookies in Cookie Preferences
Browser Settings: Configure cookie acceptance in your browser settings
Regular Review: Update your preferences anytime through Cookie Consent Settings

5.3 Third-Party Cookies and Remarketing

We work with various third-party advertising partners for remarketing and personalized advertising campaigns. These may include but are not limited to Google, Meta, X, and other advertising networks and platforms.

Types of Remarketing Activities:

5.5 Meta Pixel Tracking

Kami menggunakan Meta Pixel (sebelumnya Facebook Pixel) untuk mengukur efektivitas iklan, mengoptimalkan kampanye iklan, dan membangun audiens untuk perjalanan liveaboard. Meta Pixel adalah kode pelacakan (ID: 25303170292707457) yang diimplementasikan melalui Google Tag Manager yang mengumpulkan informasi tentang interaksi Anda dengan platform kami setelah Anda menerima cookie iklan.

Informasi yang Dikumpulkan oleh Meta Pixel:

Meta Pixel secara otomatis mengumpulkan dan mengirimkan data ke Meta, termasuk:

Informasi peramban dan perangkat (user agent, resolusi layar, jenis peramban)
Tampilan halaman dan klik tombol di platform kami
Acara standar dan kustom (misalnya, PageView, Purchase, InitiateCheckout, Contact)
Data transaksi untuk konversi, termasuk nilai pemesanan dan mata uang
Alamat IP (yang mungkin digunakan Meta untuk menurunkan lokasi umum)
URL perujuk dan informasi halaman arahan
Pengenal klik Facebook (fbclid) jika Anda tiba melalui iklan Facebook/Instagram
Pengenal cookie (fbp, _fbc) untuk pelacakan dan atribusi lintas perangkat

Bagaimana Data Meta Pixel Digunakan:

Meta menggunakan data ini untuk:

Mengukur efektivitas kampanye iklan Facebook dan Instagram kami
Menyampaikan iklan yang dipersonalisasi kepada Anda di Facebook, Instagram, Messenger, dan Audience Network
Membuat Audiens Kustom dari pengguna yang telah mengunjungi platform kami atau menyelesaikan tindakan tertentu
Membangun Audiens Serupa untuk menjangkau calon pelanggan baru yang mirip dengan pengguna kami yang sudah ada
Mengoptimalkan pengiriman iklan untuk konversi (pemesanan, pertanyaan, tampilan halaman)
Memberikan kami analitik agregat dan pelaporan tentang kinerja iklan
Melacak perilaku lintas perangkat untuk memahami perjalanan pelanggan

Acara yang Dilacak:

Kami melacak acara Meta Pixel berikut untuk optimasi iklan:

PageView: Automatically fires on every page visit (after consent)
Purchase: Fires when a booking request is successfully submitted, including transaction value and currency
InitiateCheckout: Fires when users view the booking page
Contact: Fires when you start contact by WhatsApp, Facebook, Discord, the contact form, or the on-site message center

Data Sharing with Meta:

When Meta Pixel is active (after you grant advertising consent), your interaction data is transmitted to Meta's servers, which may be located in the United States and other countries outside the European Economic Area (EEA). Meta acts as an independent data controller for this data, subject to Meta's Privacy Policy (https://www.facebook.com/privacy/policy/). We do not control Meta's subsequent use of your data for their own purposes, such as improving their services or targeting you with ads from other businesses.

Legal Basis for Processing:

Processing is based on your consent for advertising cookies, which you give in the cookie banner. You can withdraw that consent in Cookie Preferences. That blocks further Meta Pixel tracking from our site.

Your Rights and Opt-Out Options:

You can control Meta Pixel tracking through several methods:

Cookie Preferences: reject or withdraw advertising cookies. That stops Meta Pixel on our site
Facebook Ad Preferences: Manage ad settings at https://www.facebook.com/ads/preferences
Meta Ad Settings: Control off-Facebook activity at https://www.facebook.com/off_facebook_activity
Browser Settings: Block third-party cookies or use privacy extensions
Device Settings: Limit ad tracking on iOS/Android devices

Note: Opting out will not stop Meta from showing you ads, but ads will be less relevant to your interests.

Data Retention:

Meta retains pixel event data according to their data retention policies, typically for up to 2 years depending on data type. Cookie identifiers (fbp, _fbc) are stored in your browser for 3 months to 2 years. When you withdraw consent via our Cookie Settings, these cookies are automatically cleared from your device.

International Data Transfers:

Meta Pixel data may be transferred to and processed in the United States and other countries where Meta operates. Meta relies on Standard Contractual Clauses (SCCs) and other legal mechanisms approved by the European Commission for international transfers. For more information, see Meta's Data Transfer documentation.

For Questions:

If you have questions about our use of Meta Pixel or how your data is processed, contact us at [email protected]. For questions about Meta's data practices, consult Meta's Privacy Policy or contact Meta directly.

6. Service-Specific Data Collection and Use

6.1 Liveaboard Diving Experience Participants

What information does Coralbound obtain? For participants in liveaboard diving experiences, Coralbound may obtain participant name, email address, phone number, postal address, nationality, date of birth, passport information, diving certification level and number, dive experience history, medical fitness declarations, dietary restrictions, emergency contact information, and associated dive operator/liveaboard vessel information.

How is the information used? Coralbound uses participant information to coordinate with dive operators and liveaboard vessels for booking fulfillment, send booking confirmations and travel documentation, provide customer support throughout the diving experience, distribute diving safety alerts and important operational updates, and for quality management processes including post-trip evaluation forms and related correspondence.

Marketing and Promotional Use (Requires Explicit Consent): With your separate, explicit consent, participant information may be used by Coralbound to:

Promote additional diving experiences and travel opportunities
Send newsletters and diving industry updates
Provide personalized recommendations based on your diving experience
Share information with our trusted dive operator partners for marketing purposes (separate consent required)
Include you in partner promotions for diving, training and dive-related products and services

Service Delivery (Legitimate Interests - No Consent Required):

Booking coordination and confirmation
Safety communications and emergency alerts
Customer service and support
Quality assurance and feedback collection
Fraud prevention and payment security

6.2 Related Travel Requests

What information does Coralbound obtain? If you ask for help with a hotel, a domestic flight, or extending the holiday, we use the contact and booking details you already gave us, plus the request itself.

How is the information used? We use it to discuss that request with you and, where needed, with the operator or another provider. A hotel, flight, or extension is not a separate product sold as inventory on the Platform unless your booking confirmation says otherwise.

6.3 Trip Packages On A Liveaboard Booking

Some trips ask you to choose a package or add-on for each guest (for example a diving or equipment option configured on that trip). We store the choice on the booking and share it with the operator as part of the liveaboard reservation. This is not a separate tour product.

6.4 Website Visitors

What information does Coralbound obtain? When someone visits coralbound.com, we may obtain an email address and name if you provide them, browsing behavior, search preferences, device information, a currency preference stored in your browser, and general location derived from your IP address. We do not offer a Coralbound mobile app.

Service Delivery and Functionality:

Website performance optimization and technical functionality
Basic personalization for user experience (language, currency preferences)
Security monitoring and fraud prevention
Analytics for service improvement and platform development
Error tracking and technical support

Marketing: With your separate consent, we may send newsletters and promotional email. You can opt out as described in the Terms of Service. Advertising and analytics cookies run only if you accept them in the banner. We do not sell visitor information. We may share aggregate statistics that do not identify you.

Email addresses you send us are used to reply. We do not share them for another company's marketing unless you have agreed or we say so in this policy.

What does Coralbound use to track information from users? Coralbound uses Google Analytics 4, Google Tag Manager, Google Ads, and Meta Pixel, as described above, and only after you accept the matching cookie category. We do not use Facebook Analytics. You can reject those cookies in the banner or use the Google Analytics Opt-Out Browser Add-on.

6.5 Customer Service and Support Interactions

What information does Coralbound obtain? Through the message center and other support contacts, Coralbound obtains contact information, message text, attachments, booking details, service inquiries, feedback, complaint details, and resolution preferences. Anonymous visitors may be asked to complete a bot check (Cloudflare Turnstile) before a message is accepted.

How is the information used? This information is used to provide customer support, including AI-assisted replies described in Section 4.2, resolve booking issues, improve service quality, and keep records for quality assurance and dispute resolution. Message files stay in private storage.

7. Limits on Coralbound's Abilities to Protect Personal Information

Your privacy is very important to Coralbound. However, due to the existing legal and technical environment, Coralbound cannot ensure that your personally identifiable information will not be disclosed to third parties in ways not described in this Privacy Policy. For example, Coralbound may be forced to disclose information to the government or third parties under certain circumstances, or third parties may unlawfully intercept or access transmissions or private communications.

Selain itu, Coralbound dapat (dan Anda mengizinkan Coralbound untuk) mengungkapkan informasi apa pun tentang Anda kepada entitas swasta, penegak hukum, atau pejabat pemerintah lainnya sebagaimana Coralbound, atas kebijakannya sendiri, yakini perlu atau sesuai untuk mengatasi atau menyelesaikan pertanyaan atau masalah, mencegah penipuan, atau melindungi keselamatan pelanggan dan mitra kami.

8. Tautan ke Situs Pihak Ketiga

Situs web Coralbound dapat menyediakan tautan ke situs web atau informasi pihak ketiga sebagai layanan bagi pengguna. Jika Anda menggunakan tautan ini, Anda akan meninggalkan situs web Coralbound. Tautan semacam itu tidak merupakan atau menyiratkan dukungan, sponsor, atau rekomendasi oleh Coralbound terhadap pihak ketiga, situs web pihak ketiga, atau informasi yang terkandung di dalamnya, dan Coralbound tidak akan bertanggung jawab atau berkewajiban atas penggunaan Anda terhadapnya. Penggunaan semacam itu akan tunduk pada syarat penggunaan dan kebijakan privasi yang berlaku untuk situs-situs tersebut.

8. Forum Pengguna dan Pengungkapan Publik

Anda harus menyadari bahwa kapan pun Anda secara publik mengungkapkan informasi secara online melalui ulasan, forum, atau interaksi media sosial dengan Coralbound, informasi tersebut dapat dikumpulkan dan digunakan oleh orang lain. Coralbound tidak bertanggung jawab atas tindakan atau kebijakan pihak ketiga mana pun yang mengumpulkan informasi yang pengguna publikasikan secara publik di forum atau platform tersebut.

9. Transfer Bisnis dan Perubahan Perusahaan

9.1 Merger, Akuisisi, atau Penjualan Aset

Transfer Data dalam Transaksi Bisnis: Jika PT Tur Tak Terkalahkan mengalami transisi bisnis seperti merger, akuisisi oleh perusahaan lain, atau penjualan seluruh atau sebagian asetnya, data pribadi Anda dapat ditransfer ke entitas penerus sebagai bagian dari transaksi.

Hak dan Perlindungan Anda:

Pemberitahuan lanjutan: Pemberitahuan minimal 30 hari melalui email dan pemberitahuan situs web yang jelas
Kelangsungan kebijakan privasi: Entitas yang mengakuisisi harus mematuhi Kebijakan Privasi ini untuk periode transisi minimal 90 hari
Perlindungan yang ditingkatkan: Jika praktik privasi entitas baru secara material kurang protektif, Anda akan memiliki hak untuk meminta penghapusan data pribadi Anda sebelum transfer, memilih untuk tidak ikut serta dalam transfer data (jika diizinkan secara hukum), dan menerima informasi terperinci tentang praktik privasi entitas baru

Due Diligence Requirements: We commit to conducting appropriate due diligence to ensure the acquiring entity maintains adequate data protection standards comparable to ours, has proper legal basis for the data transfer under applicable privacy laws, implements appropriate technical and organizational security measures, and respects all existing user consent preferences and opt-out choices.

10. Contact Information and Complaints

10.1 Privacy Contact Details

Primary Contact:

Email: [email protected]
Address: PT Tur Tak Terkalahkan, Jl. Sunset Road No 89, Pertokoan Sunset Indah II, Kav 3, No 3B, 80361 Kuta, Bali, Indonesia
Business Hours: Monday-Friday, 9:00 AM - 6:00 PM WITA

10.2 Complaint Procedures

Submit complaint through any contact method above
Acknowledgment within 72 hours
Investigation and response within 30 days
Appeal process for unsatisfactory resolutions

10.3 Language Support and Translation Disclaimer

Official Language: English is the official language of this Privacy Policy
AI Translations: This policy may be translated into other languages using artificial intelligence or automated translation services for user convenience
Translation Accuracy: While we strive for accuracy, automated translations may contain errors or inaccuracies
Legal Precedence: In the event of any conflict, discrepancy, or difference in interpretation between the English version and any translated version of this Privacy Policy, the English version shall prevail and be considered the authoritative and legally binding document
Human Translation: For critical legal matters, we recommend consulting the English version or seeking professional human translation services
Translation Updates: Translated versions may not be immediately updated when the English version is revised. Always refer to the English version for the most current and accurate information

11. Policy Updates and Changes

11.1 Pemberitahuan Perubahan dan Persetujuan

Dengan menggunakan layanan dan situs web Coralbound, Anda menyetujui pengumpulan, penggunaan, dan penyimpanan data pribadi Anda oleh Coralbound sebagaimana dijelaskan dalam Kebijakan Privasi ini. Coralbound berhak untuk membuat perubahan pada Kebijakan Privasi ini dari waktu ke waktu.

11.2 Kontrol Versi dan Akses Historis

Versi sebelumnya dari Kebijakan Privasi ini diarsipkan dan tersedia berdasarkan permintaan
Pelacakan tanggal efektif untuk semua modifikasi
Pengguna dapat meminta versi historis untuk catatan mereka

12. Pengungkapan dan Pengakuan Non-Agensi

Sebagai pengguna platform dan layanan Coralbound, Anda diberitahu, memahami, dan menyetujui bahwa operator selam, kapal liveaboard, hotel, resor, dan mitra DMC adalah bisnis independen yang memiliki lisensi untuk menyediakan layanan yang dipesan melalui Coralbound, tetapi bukan agen, karyawan, atau pemegang waralaba Coralbound.

Anda selanjutnya diberitahu, memahami, dan menyetujui bahwa kegiatan bisnis penyedia layanan ini bersifat independen, dan tidak dimiliki atau dioperasikan oleh Coralbound. Meskipun Coralbound menetapkan standar untuk penyedia layanan di platform kami dan memfasilitasi pemesanan, kami tidak bertanggung jawab atas, juga tidak memiliki hak untuk mengontrol, operasi sehari-hari bisnis independen ini atau perilaku staf mereka selama pengiriman layanan.

Coralbound bertindak sebagai platform pemesanan dan fasilitator, menghubungkan pelancong dengan penyedia layanan yang memenuhi syarat, tetapi penyelaman, akomodasi, dan layanan tur yang sebenarnya disediakan oleh pihak ketiga independen yang mempertahankan asuransi, sertifikasi, dan standar operasional mereka sendiri.

Kebijakan privasi ini menjelaskan praktik pemrosesan data Coralbound dan hak privasi Anda. Kami memproses data pribadi sesuai dengan undang-undang privasi yang berlaku dan memberikan transparansi tentang praktik penanganan data kami.

Pemilik Kebijakan: PT Tur Tak Terkalahkan