Welfares.id Privacy Policy

We consider your personal data to be of utmost importance. This Privacy Policy outlines how welfares.id and all its related business units (&quo;Welfares&quo;, &quo;we&quo;, &quo;us&quo;, &quo;our&quo;) manage your personal information. This management encompasses all activities related to the collection, storage, use, and deletion of your personal data, conducted through our digital platform at www.welfares.id and the Welfares mobile application (the &quo;Platform&quo;).

This Privacy Notice applies to Welfares users, suppliers, and partners (&quo;you&quo;, &quo;your&quo;).

Please take a moment to review this Privacy Notice thoroughly and contact us should you have any inquiries.

1. Personal Data We Collect

Personal Data means any information about you or that can be used to identify you, either independently or in combination with other information, including but not limited to name, address, date of birth, occupation, telephone number, email address, images, bank account and credit card details, gender, or official identification (&quo;Personal Data&quo;).

We collect and process Personal Data as a data controller or processor in the following ways:

1.1 Data Collected When Using the Site or Application

If you are a User:

• (i) Full name
• (ii) Email address
• (iii) Phone number
• (iv) Date of birth
• (v) Gender
• (vi) Identity or passport number
• (vii) Booking codes
• (viii) Booking details (e.g., hotel name and location)
• (ix) Travel preferences
• (x) Loyalty membership details
• (xi) Your reviews

Official identification documents may be requested for verification pursuant to applicable laws or our Terms & Conditions, particularly for financial services, refunds, or insurance claims.

If you are a Supplier:

We collect Personal Data relating to business identity, contact information, and payment details to fulfill transactional and tax obligations.

Payment/Transaction Services

Data including payment card numbers, transaction history, and sender/recipient details are collected.

1.2 Data Collected from Your Device

• Geographic location (IP-based, GPS) to provide location-specific services.
• Log information (IP address, browser type, operating system) for usage analysis.
• Cookies to enhance user experience. Cookies may be disabled through browser settings if desired.
• Device information and installed applications (for security and anonymous statistics).

1.3 Data from Third Parties

Personal Data may be collected from:

• Partner suppliers or service providers.
• Employers (for corporate services).
• Financial service providers (e.g., transaction history).
• Legally authorized parties.

1.4 Third-Party Personal Data You Provide

When providing Personal Data of other individuals (e.g., passengers), you must ensure you have obtained their consent.

2. Purposes of Personal Data Processing

• Creating/managing your account.
• Processing transactions and services.
• Verifying identity and preventing fraud.
• Providing personalized travel recommendations.
• Enhancing user experience and services.
• Conducting marketing activities (email, SMS, push notifications). You may unsubscribe at any time.
• Fulfilling legal obligations.

Legal Basis for Processing:

• Your consent.
• Contractual necessity.
• Legal obligations.
• Our legitimate interests (e.g., system security).

3. Sharing of Personal Data

We may share Personal Data with:

• Suppliers and partners for service processing.
• Payment and financial service providers.
• Legal or governmental authorities when required.
• Relevant parties in business mergers/acquisitions.

4. Cross-Border Data Transfers

Personal Data may be transferred to countries with equivalent protection standards in accordance with applicable laws. We ensure recipients comply with strict security standards.

5. Your Rights

• Access, update, or delete Personal Data.
• Withdraw processing consent.
• Object to processing for marketing purposes.
• File complaints with data protection authorities.

6. Policy Changes

We may update this Privacy Policy. Changes will be announced via the Site or email. Continued use of the Site following changes constitutes acceptance.

7. Data Retention and Deletion

Data is retained as necessary for services or as required by law. Deletion requests may be submitted via the contact information below.

8. Data Security

We implement technical and organizational measures to protect Personal Data, although no system is entirely immune to risks.

9. External Links

We are not responsible for privacy policies of third-party sites linked on our Site.

10. Contact and Complaints

For inquiries, requests, or complaints, contact:

Data Protection Department

Welfares.id

Email: privacy@welfares.id

Complaints will be processed within 30 business days.

11. Language

The English version of this Privacy Policy shall prevail over translations in other languages.

Last updated: January 29, 2025