Privacy Policy

1. Introduction

This Privacy Policy describes how PT Ocean Realm Bali ("the Company", "we", "us" or "our"), operating as Neptune World, collects, uses, stores and protects your personal data when you visit neptuneworld.com (the "Website").

We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable, and Indonesian data protection regulations.

Data Controller: PT Ocean Realm Bali, Jl. Suka Merta, Sanur, Denpasar, Bali 80228, Indonesia.

2. Information We Collect

We may collect the following types of information:

2.1 Information You Provide

• Name, email address and message content when you use our contact form.
• Full name, email address, phone number, nationality, cover letter and curriculum vitae (CV) when you submit a job application through our Careers section.
• Any other personal data you voluntarily provide through email or other communication channels.

2.2 Information Collected Automatically

• IP address, browser type and version, operating system, referral source, pages visited, duration of visit and navigation paths.
• Device information including screen resolution and device type.
• Cookies and similar tracking technologies (see our Cookies Policy for details).

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your enquiries and provide customer support.
• To evaluate job applications you submit through our Careers section, including sharing your application with relevant hiring managers within PT Ocean Realm Bali and its subsidiary brands.
• To send you automated confirmation emails when you submit a job application, using Amazon Web Services Simple Email Service (AWS SES) as our email delivery provider.
• To analyse how our Website is used and improve its content, functionality and user experience.
• To comply with legal obligations and protect our rights and interests.
• To send you information about our services, but only if you have provided consent.

4. Legal Basis for Processing (GDPR)

Where the GDPR applies, we process your personal data on the following legal bases:

• Consent: Where you have given your consent, for example by submitting a contact form or accepting cookies.
• Legitimate interests: To analyse website usage, improve our services and protect against fraud or misuse.
• Legal obligation: Where processing is necessary to comply with a legal obligation.

5. Analytics and Tracking

5.1 Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC ("Google"). Google Analytics uses cookies to help us analyse how visitors use our Website. The information generated by the cookie about your use of the Website (including your IP address) is transmitted to and stored by Google on servers that may be located outside your country of residence.

Google will use this information to evaluate your use of our Website, compile reports on website activity and provide other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. For more information, please see Google's Privacy Policy.

5.2 Google Tag Manager

We use Google Tag Manager to manage and deploy marketing and analytics tags on our Website. Google Tag Manager itself does not collect personal data. However, the tags it deploys (including Google Analytics) may collect data as described above. Google Tag Manager operates in a server-side context and does not access cookies itself, but the tools configured through it may do so.

6. Sharing of Personal Data

We do not sell, rent or trade your personal data. We may share your information with:

• Service providers: Third parties that assist us in operating our Website and services, including hosting providers, analytics services (Google LLC) and email delivery services (Amazon Web Services), who are contractually obligated to protect your data.
• Affiliated companies: Our subsidiary brands (Neptune Scuba Diving, Neptune Liveaboards and Komodo Resort) where necessary to respond to your enquiry.
• Legal requirements: Where required by law, or to protect the rights, property or safety of the Company, our users or the public.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Contact form submissions are retained for up to 24 months. Job application data (including CV files) is retained for up to 12 months after the relevant vacancy is closed, after which it is permanently deleted unless you request earlier deletion. Analytics data is retained according to Google Analytics default retention settings (14 months).

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside of your country of residence, including Indonesia and the United States (for Google services and Amazon Web Services). Where such transfers occur, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

9. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Access: The right to request a copy of the personal data we hold about you.
• Rectification: The right to request correction of inaccurate or incomplete personal data.
• Erasure: The right to request deletion of your personal data, subject to legal obligations.
• Restriction: The right to request that we restrict the processing of your personal data.
• Data portability: The right to receive your personal data in a structured, commonly used and machine-readable format.
• Objection: The right to object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at [email protected]. If you are located in the European Economic Area, you also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

This Website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

12. Do Not Track

Our Website does not respond to Do Not Track (DNT) signals. However, you can manage your cookie preferences and opt out of analytics tracking as described in our Cookies Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

14. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

PT Ocean Realm Bali
Jl. Suka Merta, Sanur, Denpasar
Bali 80228, Indonesia
Email: [email protected]