Privacy Policy

1. Scope and data controller

The controller for Solmira's own collection and use of personal data is SOLMIRA PTE. LTD. ([email protected]). This policy covers the Solmira website, Telegram bot, Telegram support and booking coordination.

• A selected provider may become a separate controller when it receives data to deliver its service.
• This policy does not replace the independent provider's or messaging platform's own privacy notice.

2. Data we collect

The data depends on how you interact with us and what is reasonably necessary for the requested booking.

• Contact and identity data, including name, username, phone number and preferred language.
• Telegram data received with bot updates: Telegram ID, username, first and last name, language code, Premium indicator, preferred language and activity timestamps.
• Traveler-review data: name, optional city or country, email, rating, review text, optional photos, selected trip, optional trip date and booking reference. The email and booking reference are used for moderation and are not published.
• Messages, requests, feedback and support history.
• Booking data such as dates, participants, pickup details, itinerary, accessibility or dietary needs and selected provider.
• Passport, permit or insurance details only where required for a specific booking.
• Payment status, amount, currency, reference and limited billing information; full card details are handled by the payment provider.
• Technical logs reasonably generated by hosting, security and delivery infrastructure.

3. Where data comes from

We receive data directly from you, from a person booking on your behalf, from Telegram when you contact us, and from providers or payment services when they confirm the status of a request.

• A person providing another traveller's data must be authorised to do so and must show them this policy.
• We do not intentionally obtain personal data from data brokers.

4. Purposes and legal bases

We process data for the purposes listed below and rely on the legal basis applicable to the context and jurisdiction. The list is not exhaustive.

• To answer an enquiry, prepare a quote and take steps requested before a contract.
• To coordinate, confirm, change and support a booking and related payment.
• To communicate safety, schedule and service information.
• To prevent misuse, secure the service and keep necessary records based on legitimate interests.
• To meet accounting, legal, regulatory and dispute-handling obligations.
• Where consent is the appropriate basis, you may withdraw it for future processing, although another lawful basis may still require limited retention.
• We may also use personal data for other purposes not listed in this policy where this is permitted by applicable law.

5. Sharing data to arrange a booking

When you ask Solmira to arrange a service, we share the minimum information reasonably needed with the selected tour operator, driver, hotel, carrier, activity provider, payment service or other booking partner.

• Before payment, we aim to identify the provider and material booking terms.
• The recipient may need participant names, contact details, dates, pickup information, passport or permit details and booking preferences.
• We remain responsible for our own lawful collection, reasonable data minimisation, choice of recipient, security of transmission and transparency.

6. Independent recipients and service providers

A provider that decides why and how it uses data to deliver its own service normally acts as an independent controller. Solmira does not control that provider's independent processing and, to the extent permitted by law, is not responsible for it.

• We may share personal data with third parties, including partners, contractors and other service providers, for the purposes described in this policy and other lawful purposes.
• Independent controllers must comply with their own legal duties and should provide their privacy information.
• A company processing data only on Solmira's documented instructions is treated as a processor and should be covered by appropriate contractual safeguards.
• We may also disclose data to professional advisers, insurers, authorities or courts where lawfully required.

7. International transfers

Messaging platforms, hosting, payment services and travel providers may process data in Indonesia and other countries. Those countries may have different privacy laws.

• Solmira will use the transfer mechanism required by applicable law, such as an adequacy assessment, binding safeguards or valid consent.

8. Retention

We retain data only as long as reasonably needed for the stated purpose, legal obligations, accounting, safety and the establishment or defence of claims, then delete or anonymise it where practicable.

9. Security and incidents

We use reasonable organisational and technical safeguards appropriate to the nature and risk of the data. No internet or messaging service can be guaranteed completely secure.

• Access should be limited to people who need the data for the request.
• If an incident creates a legal notification duty, affected people and the competent authority will be notified as required.
• Do not send unnecessary documents or card details through ordinary chat.

10. Age requirement

Solmira's website, Telegram bot, Telegram support and booking-support services are intended for people aged 18 or over. We do not knowingly accept direct requests or data from children.

• An adult booking a provider service involving a minor must have legal authority and provide only information required for that booking.
• Contact us if you believe a child submitted data directly.

11. Website storage and external platforms

The website has a traveler-review form. It stores the selected interface language in functional browser localStorage under the key solmira.locale and currently has no advertising pixels or analytics trackers.

• Submitted reviews are held for moderation. If approved, the name, optional location, rating, review, any photos you attached, selected trip and optional trip date become public; the email and booking reference remain private.
• When you tick the consent box on the review form, you agree to publication of your review and any photos. We record the time of your consent and the version of the form wording as proof. You can withdraw consent at any time by writing to [email protected]; we will then remove the review from the website. Withdrawal does not affect earlier lawful use.
• Telegram, Facebook and payment pages process data under their own privacy terms.
• Hosting and delivery systems may generate standard security and request logs.
• If non-essential analytics or advertising tools are added, this policy and any required consent controls must be updated first.

12. Updates, sale of data and contact

We do not sell personal data. We may change or update this policy at any time, without prior notice, and will revise the date above.

• The current version published on this page applies from the date shown above.
• Questions about this policy or your personal data: [email protected].