Sumatra Trekkers – Privacy Policy

Last Updated: July 7, 2025

‍

Sumatra Trekkers (brand and website operated and managed by Poke the Box Studios) ("we," "our," or "us") are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, make a booking, or interact with our services.

‍

As an organisation based in Sumatra, Indonesia, we strive to adhere to international data protection standards, including the principles of the General Data Protection Regulation (GDPR).

‍

1. Information We Collect

We collect personal data that you voluntarily provide to us when you express an interest in obtaining information about us or our products and services, when you participate in activities on the website, or otherwise when you contact us.

The personal data we collect may include:

  • Names: To identify you and facilitate your bookings.
  • Email Addresses: For communication, order processing, and marketing (if you opt-in).
  • Payment Information: Processed securely by our third-party payment provider, Stripe. We do not store your full payment card details on our servers.
  • Information shared with ground teams: For the sole purpose of conducting your tour, we share your name and age (for children) with our ground teams (tour guides) in Sumatra.

‍

2. How We Collect Your Information

We collect information through:

  • Direct Interactions: When you fill out forms on our website (e.g., booking forms, contact forms).
  • Automated Technologies: As you navigate our website, we use standard cookies from the Webflow system and Google Analytics to collect certain information about your device, Browse actions, and patterns.

‍

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Process Orders: To manage your bookings for eco-guided safari tours and affiliated activities.
  • Marketing and Communications: To send you updates, promotional materials, or other information that may be of interest to you, in accordance with your communication preferences.
  • Customer Support: To respond to your inquiries and provide assistance.
  • Website Improvement: To understand how our website is used and to improve its functionality and user experience (via Google Analytics).
  • Business Operations: To facilitate the smooth operation of your tours by sharing necessary information with our local ground teams in Sumatra.

‍

4. How We Store and Protect Your Information

We are committed to ensuring the security of your personal data. We store data on secure servers (Google Cloud) and implement appropriate technical and organizational measures to protect your information against unauthorized access, disclosure, alteration, or destruction.

‍

5. Disclosure of Your Information to Third Parties

We may share your data with the following third parties:

  • Stripe: For secure processing of payments. Stripe's privacy policy governs their use of your information.
  • Google Analytics: For website analytics and to understand user behavior. Google's privacy policy governs their use of data collected via Google Analytics.
  • Ground Teams in Sumatra: Your name and age (for children) will be shared with our local tour guides and drivers in Sumatra solely for the purpose of facilitating your booked tour activities. This is essential for the delivery of our services.

We do not sell, trade, or otherwise transfer your personally identifiable information to other outside parties for their marketing purposes.

‍

6. International Data Transfers

As our organisation is based in Indonesia, and our services are delivered in Sumatra, your data will be processed in Indonesia. Where we transfer data outside of Indonesia (e.g., to Google's servers), we ensure appropriate safeguards are in place to protect your data, aligning with GDPR principles.

‍

7. Your Data Protection Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

  • The Right to Be Informed: About how your personal data is collected and used.
  • The Right of Access: To request copies of your personal data.
  • The Right to Rectification: To request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • The Right to Erasure ( "Right to be Forgotten"): You can request that your data be deleted from our systems. We will comply with such requests unless we have a legitimate legal reason to retain the data (e.g., for legal compliance or ongoing service provision).
  • The Right to Restrict Processing: To request that we restrict the processing of your personal data, under certain conditions.
  • The Right to Data Portability: To request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
  • The Right to Object: To our processing of your personal data, under certain conditions.
  • Rights in Relation to Automated Decision-Making and Profiling.

To exercise any of these rights, please contact us using the contact details provided below.

‍

8. Data Retention

We do not have a fixed data retention policy. We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

‍

9. Children's Data

We do not intentionally collect personal data from children under the age of 16 without parental consent. If we become aware that we have collected personal data from a child under 16 without verification of parental consent, we will take steps to remove that information from our servers.

For the purpose of facilitating tours, we may collect the name and age of children participating in a tour, but this is always done with the understanding that the booking is made by an adult guardian.

‍

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

‍

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Sumatra Trekkers, Jalan Orangutan, Bukit Lawang, Kecamatan Bahorok, Kabupaten Langkat, Provinsi Sumatra Utara 20852 Indonesia, hello@sumatratrekkers.com

‍