Privacy Policy

Who we are

Supraba Cruises is the trading brand of PT. Luisa Marine Adventures Indonesia, an Indonesian company providing liveaboard cruises, private charters and related travel services in Indonesia.

For the purposes of applicable personal-data laws, PT. Luisa Marine Adventures Indonesia is the personal data controller for information collected directly through the Supraba Cruises website, enquiry forms, booking process, email, telephone, WhatsApp and onboard guest administration.

Scope of this policy

This policy applies when you:

• visit or interact with the Supraba Cruises website;
• browse departures, destinations, cabins or special offers;
• submit an enquiry or private-charter request;
• select a cabin or submit a booking request;
• communicate with us by email, telephone, messaging service or social media;
• travel with us as a guest, group organiser, agent or invited passenger; or
• apply to work with us or provide services to us.

Personal information we collect

Information provided for other travellers

When a lead guest, charter organiser or travel agent provides information about another person, that person must be informed that their information has been shared with Supraba Cruises and directed to this policy.

How we use personal information

• respond to enquiries and prepare quotations;
• check voyage and cabin availability;
• create, administer and confirm reservations;
• communicate about payments, changes, transfers and voyage preparation;
• arrange cabins, meals, diving services, permits and guest transfers;
• prepare passenger manifests and comply with port, maritime, immigration, tax and other legal requirements;
• support medical, safety, emergency and evacuation procedures;
• manage refunds, disputes, complaints and insurance documentation;
• maintain website security, diagnose technical issues and improve performance;
• send service updates and, where permitted, relevant marketing communications;
• protect Supraba Cruises, our guests, crew and business from fraud, misuse and legal claims; and
• meet accounting, audit, corporate and regulatory obligations.

We do not use health or diving information for unrelated advertising.

Legal bases for processing

Depending on the circumstances and applicable law, we process personal information because:

• it is necessary to take steps at your request or perform a booking contract;
• you have provided consent, including where explicit consent is appropriate for sensitive information;
• we must comply with Indonesian or other applicable legal obligations;
• processing is necessary to protect vital interests in a medical or safety emergency; or
• we have a legitimate business interest, such as securing the website, preventing fraud, maintaining records or improving guest service, provided that interest does not override your rights.

Our principal Indonesian framework includes Law of the Republic of Indonesia Number 27 of 2022 concerning Personal Data Protection. Where another privacy regime applies to a particular traveller or transaction, we will also respect the rights and obligations required by that regime.

When information may be shared

Supraba Cruises does not sell personal information. We may share only the information reasonably necessary with:

• Supraba crew, operations, reservations, finance and management personnel;
• airports, ports, harbour authorities, park authorities, immigration, customs and other government bodies;
• transfer drivers, local guides, dive professionals, medical providers, evacuation providers and other voyage suppliers;
• banks, payment providers, accountants, auditors and insurers;
• website hosting, cloud storage, email, booking, analytics, security and communication providers acting under service arrangements;
• professional advisers, regulators, courts or law-enforcement bodies where legally required; and
• a purchaser or successor if the Supraba Cruises business is reorganised, transferred or sold, subject to appropriate confidentiality and legal protections.

Service providers may use personal information only for the authorised service or as otherwise required by law. They do not acquire ownership of Supraba guest information.

International data transfers

Supraba Cruises operates in Indonesia and welcomes guests from many countries. Some suppliers or technology systems may process information outside the country where it was originally collected.

Where personal information is transferred internationally, we take reasonable steps to use an applicable lawful transfer mechanism and require suitable confidentiality, contractual and security protections. Transfers will be limited to information necessary for the relevant purpose.

How long information is kept

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including voyage administration, guest safety, accounting, tax, insurance, dispute resolution and legal compliance.

• Unsuccessful or general enquiries may be deleted or anonymised when no longer operationally useful.
• Booking, invoice and transaction records may be retained for the period required by Indonesian accounting, tax and corporate law.
• Passenger manifests, waivers, incident and diving records may be retained where necessary for maritime safety, insurance or legal claims.
• Health information is restricted and removed or anonymised when it is no longer required, unless continued retention is legally justified.
• Marketing records are retained until consent is withdrawn, an objection is received or the information becomes outdated.

Cookies and website technologies

Cookies are small files placed on a device to help a website function, remember preferences and understand how visitors use the site.

Essential cookies

These support security, navigation, language preferences, forms, cabin selection and the booking flow. They may be used without optional consent where permitted because the site cannot operate properly without them.

Analytics cookies

These help us understand which pages are visited and how the website performs. Where consent is required, analytics will remain disabled until permission is given.

Marketing and embedded-content cookies

Videos, maps, social-media features or advertising tools may set cookies. Non-essential tracking should activate only after the required choice or consent.

You can change cookie choices through the website’s cookie settings and may also control cookies through your browser. Blocking some essential cookies may affect the booking experience.

How we protect information

We use reasonable organisational and technical measures designed to protect personal information against accidental loss, unauthorised access, misuse, alteration and disclosure. Measures may include access controls, staff confidentiality, secure connections, backups, software updates, limited permissions and service-provider due diligence.

No internet transmission or storage system is completely risk-free. If a personal-data incident occurs, Supraba Cruises will investigate, reduce the risk and provide notifications where required by applicable law.

Your privacy rights

Depending on the law that applies, you may have the following rights:

We may need to verify your identity before responding. A request can be refused or limited where permitted by law—for example, where retention is necessary for legal claims, safety records or statutory obligations.

Children and young travellers

Booking information for a child should be supplied by a parent, legal guardian or authorised group organiser. We use a child’s information only as necessary to assess suitability, organise travel, meet safety requirements and deliver the voyage.

Our website is not designed to collect booking information directly from children without appropriate adult involvement.

Changes to this policy

We may update this policy when our services, booking systems, suppliers or legal obligations change. The effective date at the top of the page will be updated. Material changes may also be communicated through the website or directly to affected guests where appropriate.

Contact Supraba Cruises about privacy

Questions, concerns and privacy-rights requests should be sent directly to Supraba Cruises. Please provide enough information for us to identify the relevant booking or communication, but do not send unnecessary passport, medical or payment information in an unsecured message.