Privacy Policy

1. Who We Are

Treasure Garage is a motorcycle rental business in Tibubeneng, Canggu, Bali. We provide services through our website, booking system, and physical location.

2. Data We Collect

We may collect:

• Contact information: name, email, phone, WhatsApp, Telegram
• Identity documents: copy of passport/ID and driving license (for rental verification)
• Booking data: rental dates, bike selection, payment status
• Technical data: IP address, browser, device, pages visited (for website operation and security)

3. How We Use Your Data

Process bookings and payments; communicate about your rental; verify identity and license; fulfil contractual and legal obligations; improve services; respond to inquiries. We do not sell your data to third parties.

4. Payment Processing & Xendit

Online payments are processed by Xendit (PT Sinar Digital Terdepan). Payment details are handled by Xendit. We do not store your full card number. Xendit's Privacy Policy (xendit.co/privacy-policy). We receive transaction status and basic data (amount, date).

5. Sharing of Data

We may share with: (a) payment processors; (b) service providers under confidentiality agreements; (c) authorities when required by law; (d) insurance or legal advisors for claims. We do not share for marketing without consent.

6. Data Retention

We retain data as long as necessary: booking records — at least 5 years (tax and legal); identity documents — for rental duration and shortly after; logs — as needed. After that — deletion or anonymisation where practicable.

7. Your Rights

You have the right to access, correct, delete (subject to legal obligations), object, and withdraw consent. Contact us to exercise these rights. EU residents and other jurisdictions may have additional rights.

8. Security

We implement reasonable technical and organisational measures to protect your data. Payments are secured by Xendit with encryption. No transmission over the internet is 100% secure.

9. Cookies & Similar Technologies

Our website may use cookies for essential functionality (session, preferences), analytics, and payment flows. You can manage preferences in your browser. Disabling some cookies may affect functionality.

10. Children

Our services are not directed at minors. We do not knowingly collect data from children under 16. If you believe we have such data, contact us and we will delete it.

11. International Transfers

Your data may be stored or processed in Indonesia and in countries where our providers operate. We ensure adequate safeguards where required by law.

12. Changes

We may update this policy from time to time. The current version is on this page. Continued use constitutes acceptance.