The Raja Ampat Diving Tour privacy policy explains how Juara Holding Group, which publishes rajaampatdivingtour.com, and Komodo Luxury, which handles bookings, collect and use what you send by WhatsApp or email: names, contact details, passport data for marine park permits and dive-fitness information, used only to plan, book and permit your trip.
Last updated: 16 September 2026. This version applies from that date.
Who is responsible for your personal data?
- Juara Holding Group publishes this website and controls the technical and analytics data it collects.
- Komodo Luxury, a boat and tour operator, answers enquiries and manages reservations, so it controls the booking data you send.
Komodo Luxury is not a PADI or SSI dive centre. Dives are led by licensed partner dive centres and dive masters, who receive only the details they need to run your dives safely.
We process personal data under Indonesia’s Personal Data Protection Law, Law No. 27 of 2022 (UU PDP), which became fully enforceable in October 2024. Because many guests live in the EU or UK, we also follow core GDPR principles: a clear purpose for each use, minimum data, and rights you can exercise.
What information do we collect, and why?
| Data | When we ask | Why we need it |
|---|---|---|
| Name, WhatsApp number, email | First enquiry | To reply and send a quote |
| Travel dates, group size, format (day dive, dive-and-stay, liveaboard) | Planning | To check partner and vessel availability |
| Certification agency and level, logged dives, last dive date | Before dives are confirmed | Partners set minimums; sites such as Cape Kri and Blue Magic are usually Advanced Open Water with drift experience |
| Passport name, number, nationality, date of birth | After you book | Park and regency permits are issued per person |
| Fitness-to-dive declaration, allergies, dietary needs | Before travel | Safety and catering |
| Emergency contact, dive insurance details | Before travel | Incident response |
| Invoices and transfer confirmations | At payment | Accounting and tax |
| IP address, device, pages viewed, button clicks | When you browse | Security and site analytics |
Health information counts as specific personal data under Article 4 of UU PDP. We ask for it only because dive centres require a medical or fitness declaration, and we pass it only to the dive centre running your dives.
This website does not ask for card numbers or passwords. Please never send them by WhatsApp or email.
Why does a diving tour need my passport details?
Raja Ampat permits are issued per guest. Visitors pay two separate charges:
- Marine park conservation card. The Raja Ampat marine park fee for foreign tourists is IDR 1,000,000 per person per year under Southwest Papua Governor Regulation No. 32 of 2024, in force since 30 December 2024, as listed by the Raja Ampat MPA Management Authority (checked 2026-09-16).
- Raja Ampat Regency entry ticket, set by Regent Regulation 34/2025, charged per visit; confirm the current amount at booking.
The charges apply to every guest, diver or not, even on a single day trip from Waisai. Operators normally process them using your identity details. All figures are as of 2026, subject to change; confirm at booking.
Who do we share your data with?
| Recipient | What they receive | Purpose |
|---|---|---|
| Licensed partner dive centre or dive master | Name, certification, logged dives, fitness declaration, emergency contact | Dive planning and safety |
| Dive liveaboard, vessel or resort | Passport details for the manifest, cabin and dietary notes | Guest manifest and harbour clearance |
| Marine park authority and regency ticket office | Passport name, number, nationality | Issuing permits |
| Ferry, fast-boat and transfer providers (Sorong to Waisai) | Name and ID where required | Tickets and pick-ups |
| Communication and hosting providers (WhatsApp, email, website hosting, analytics) | Messages and technical data | Running our channels |
| Government, police or search-and-rescue bodies | What the law or an emergency requires | Legal duties and safety |
We do not sell personal data or pass contact lists to anyone for marketing.
Does my data leave Indonesia?
It can. WhatsApp, email and analytics providers may store data on servers abroad. Transfers follow the conditions in Article 56 of UU PDP. For EU and UK guests, sending your details to Indonesian partners is necessary to deliver the trip you asked us to arrange.
How long do we keep your information?
- Enquiries that do not become bookings: deleted within 24 months of the last message.
- Passport copies and fitness declarations: deleted within 12 months after your trip ends, unless an incident or claim requires us to keep them.
- Booking records and invoices: kept as long as Indonesian accounting and tax rules require, generally up to 10 years.
- Analytics data: no longer than 14 months, then aggregated or deleted.
How does this website use cookies and analytics?
- Essential and security: a content-delivery and security service may process your IP address to block abuse and serve pages quickly.
- Analytics: aggregated reports on pages viewed, country and device type. We may count clicks on the WhatsApp or email buttons; we never see message content through analytics.
We do not currently run advertising or remarketing cookies. If that changes, we will update this page and, where the law requires, ask for consent first. You can block cookies in your browser without losing access.
What rights do I have over my data?
Under UU PDP, and in line with the GDPR, you can:
- ask what data we hold and get a copy;
- correct inaccurate or incomplete details;
- ask us to delete data we no longer need;
- withdraw consent you gave earlier;
- ask us to pause or restrict processing;
- receive your data in a common, readable format;
- complain to the Indonesian data protection authority, or to your local regulator in the EU or UK.
Email sales@komodoluxury.com with the subject “Privacy request”, or message WhatsApp +62 811-3823-875 (wa.me/628113823875). We verify your identity first, then respond within the deadlines UU PDP sets, which for access and correction requests is 3 x 24 hours. Withdrawing consent or deleting passport data before travel may mean permits cannot be issued.
How do we protect data, including children’s data?
Booking files are limited to the reservations team and the partners listed above, and passport details never go into group chats. If a breach affects your data, we will notify you and the authority in writing within 3 x 24 hours, as Article 46 of UU PDP requires.
Children under 12 are exempt from the marine park card fee, but vessels still need their details for manifests. We accept a minor’s data only from a parent or legal guardian.
What are the limits of our responsibility?
- Prices, fees and seasonal information on this site are indicative as of 2026 and can change; the confirmed quote and permit receipts are what count.
- Komodo Luxury arranges your trip. Dives are run by licensed partner dive centres under their own safety standards, liability waivers and privacy notices, and those partners decide whether your certification and experience suit a given site.
- Permit charges are set by government bodies; any official increase is passed on at cost.
How will we tell you about changes?
We revise the “Last updated” date whenever this policy changes. If a change affects a booking in progress, the reservations team tells you directly.
Contact: Raja Ampat Diving Tour, operated by Komodo Luxury, published by Juara Holding Group. Email sales@komodoluxury.com, WhatsApp +62 811-3823-875.