Privacy Policy

1. Information We Collect

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("Personal Information"). The types of Personal Information we may collect include:

a. Information You Provide Directly

• Contact Information: Full name, email address, postal address, phone number.
• Inquiry and Booking Details: Information related to your event or travel preferences, dates, number of participants, budget, specific requests, dietary restrictions, special assistance needs, and any other details you provide when making an inquiry or booking.
• Account Information: If you create an account, your username, password, and other registration details.
• Communication Records: Records and copies of your correspondence if you contact us (including email, chat logs, or WhatsApp messages).
• Feedback and Survey Responses: Information you provide when participating in surveys, feedback forms, or contests.
• Social Media Information: If you interact with us on social media platforms (e.g., Instagram, Facebook), we may collect your social media handle, profile information, and any information you choose to share.

b. Information Collected Automatically

• Device and Usage Information: IP address, browser type and version, operating system, device identifiers (e.g., MAC address, Advertising ID), referring URLs, pages viewed, links clicked, time spent on pages, access times and dates, and other similar usage data.
• Location Information: We may collect general location data (e.g., based on IP address) or, with your explicit consent, more precise geolocation data from your mobile device to provide location-based services.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixels, and similar technologies. Please see Section 5 ("Cookies & Tracking Technologies") for more details.

c. Financial Data

When you make a purchase or book our Services, we collect information related to the transaction. This may include:

• For Bank Transfers: Details of the transaction such as the amount, date, and potentially your bank account name or number if provided by you or your bank as part of the transfer confirmation. We do not directly collect or store your full bank account credentials. Payments are made directly to our company bank account at Bank Mandiri.
• For PayPal and Credit/Debit Card Payments (processed via PayPal): When you choose to pay using PayPal, or use your credit/debit card processed through PayPal's gateway, you will be redirected to PayPal's secure platform. PayPal collects and processes your payment information (such as PayPal account details, credit/debit card number, card brand, expiration date) according to their own privacy policy. Core Natives does not directly store your full credit/debit card numbers or PayPal login credentials. We may receive transaction confirmation details from PayPal, such as transaction ID, amount, and your PayPal email address or basic card information (e.g., card type, last four digits) for order fulfillment and record-keeping.

We encourage you to review PayPal's Privacy Policy to understand how they handle your financial information:

• PayPal Privacy Policy: https://www.paypal.com/webapps/mpp/ua/privacy-full.

We maintain records of your purchases and payment history for accounting, customer service, and to fulfill our services.

d. Information from Third Parties

We may occasionally receive information about you from third-party sources, such as travel partners (airlines, hotels), marketing partners, or public databases, to supplement the information we collect directly from you. This is typically done to enhance our ability to provide relevant marketing, offers, and services.

2. Legal Basis for Processing Personal Information

If you are located in the European Economic Area (EEA), UK, or other regions with similar data protection laws, our legal basis for collecting and using the Personal Information described above will depend on the Personal Information concerned and the specific context in which we collect it. However, we will normally collect Personal Information from you only:

• Where we need the Personal Information to perform a contract with you (e.g., to provide our event planning or travel services).
• Where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (e.g., for direct marketing, fraud prevention, network security).
• Where we have your explicit consent to do so (e.g., for sending certain types of marketing communications or processing sensitive data).
• Where we have a legal obligation to collect Personal Information from you.

If you have questions about or need further information concerning the legal basis on which we collect and use your Personal Information, please contact us using the details provided below.

3. How We Use Your Information

We use the Personal Information we collect for various business purposes, including:

• Providing and Managing Services: To process your inquiries, bookings, and payments; to arrange and manage your event or travel plans; to communicate with you about your bookings and provide customer support.
• Personalization: To understand your preferences and tailor our Services and communications to your interests.
• Communication: To respond to your requests, send administrative information (e.g., confirmations, invoices, technical notices, updates, security alerts), and provide you with information about our Services.
• Marketing and Promotions: With your consent where required, to send you newsletters, promotional materials, special offers, and other information about services that may interest you. You can opt-out of marketing communications at any time.
• Website Improvement: To analyze trends, monitor usage, improve the functionality and user experience of our Site, and develop new products and services.
• Security and Fraud Prevention: To protect the security and integrity of our Site and Services, prevent fraudulent transactions, and safeguard against unauthorized access or criminal activity.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
• Business Operations: For our internal business purposes, such as data analysis, audits, and research.

4. Information Sharing & Disclosure

Core Natives does not sell your Personal Information. We may share your Personal Information with third parties only in the ways that are described in this Privacy Policy:

• Service Providers: We share information with third-party vendors, consultants, and other service providers who perform services on our behalf or to help us operate our business and the Site. These include payment processors (as detailed in Section 1c), IT service providers, hosting providers, marketing agencies, customer service platforms, airlines, hotels, local tour operators, and transportation companies. These providers are authorized to use your Personal Information only as necessary to provide these services to us and are contractually obligated to protect its confidentiality.
• Business Partners: We may share Personal Information with trusted business partners to offer you co-branded services or promotions, but only with your prior consent.
• Legal Requirements and Safety: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with a legal obligation or governmental request; (b) protect and defend the rights or property of Core Natives; (c) prevent or investigate possible wrongdoing in connection with the Services; (d) act in urgent circumstances to protect the personal safety of users of the Services or the public; or (e) protect against legal liability.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your Personal Information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site of any change in ownership or uses of your Personal Information, as well as any choices you may have regarding your Personal Information.
• With Your Consent: We may disclose your Personal Information for any other purpose with your explicit consent.

5. Cookies & Tracking Technologies

We and our third-party partners use cookies, web beacons, pixels, and similar tracking technologies (collectively, "Tracking Technologies") to collect information about your browsing activities over time and across different websites following your use of our Site. This information helps us to customize the Site, improve your experience, understand Digital Marketing Intelligence (DMI), serve targeted advertisements, and analyze Site traffic.

a. Types of Cookies We Use:

• Essential/Strictly Necessary Cookies: These cookies are necessary for the Site to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in, or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work.
• Performance and Analytics Cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our Site (e.g., Google Analytics). They help us to know which pages are the most and least popular and see how visitors move around the Site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.
• Functional Cookies: These cookies enable the Site to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages (e.g., live chat support, embedded videos). If you do not allow these cookies then some or all of these services may not function properly.
• Targeting/Advertising Cookies: These cookies may be set through our Site by our advertising partners (e.g., Facebook Pixel, Google Ads). They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

b. Your Choices Regarding Cookies:

Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject browser cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Site. For more information on how to manage cookies, including how to opt-out of interest-based advertising, please refer to your browser's help documentation or visit www.aboutcookies.org or www.youronlinechoices.com (for EU users).

We may also implement a cookie consent banner or management tool on our Site to provide you with more granular control over the cookies used.

6. Data Security

We implement and maintain reasonable administrative, technical, and physical security measures designed to protect the security of any Personal Information we process. We are committed to protecting your data from loss, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to, data encryption where appropriate, access controls to our information systems, secure server environments, and regular security assessments and vulnerability management.

However, please remember that no method of transmission over the Internet or method of electronic storage is 100% secure and reliable. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security. Any transmission of Personal Information is at your own risk.

7. Data Retention

We will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as for tax, accounting, or other legal requirements, or to resolve disputes and enforce our agreements). The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide Services to you (for example, as long as you have an account with us or keep using our Services).
• Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them).
• Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

When we have no ongoing legitimate business need to process your Personal Information, we will either delete or anonymize it. If this is not possible (for example, because your Personal Information has been stored in backup archives), then we will securely store your Personal Information and isolate it from any further processing until deletion is possible.

8. Your Data Protection Rights

Depending on your location and applicable data protection laws (such as GDPR for individuals in the EEA/UK, or Indonesian data protection regulations), you may have the following rights regarding your Personal Information:

• The right to access: You have the right to request copies of your Personal Information that we hold and information about how we process it.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure (right to be forgotten): You have the right to request that we erase your Personal Information, under certain conditions (e.g., if the data is no longer necessary for the purpose it was collected).
• The right to restrict processing: You have the right to request that we restrict the processing of your Personal Information, under certain conditions (e.g., if you contest the accuracy of the data).
• The right to object to processing: You have the right to object to our processing of your Personal Information, under certain conditions, particularly for direct marketing purposes or processing based on our legitimate interests.
• The right to data portability: You have the right to request that we transfer the data that we have collected (that you provided to us and is processed by automated means) to another organization, or directly to you, in a structured, commonly used, and machine-readable format, under certain conditions.
• The right to withdraw consent: If we are processing your Personal Information based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Information conducted in reliance on lawful processing grounds other than consent.
• The right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority in your jurisdiction if you believe that our processing of your Personal Information infringes applicable data protection laws.

To exercise any of these rights, please contact us using the contact details provided in Section 13 ("Contact Us"). We will respond to your request in accordance with applicable data protection laws. We may need to verify your identity before processing your request, and we reserve the right to charge a fee where permitted by law, for instance, if your request is manifestly unfounded or excessive.

Account Information & Communication Preferences

You may at any time review or change the information in your account (if applicable) or terminate your account by logging into your account settings or contacting us. If you no longer wish to receive marketing correspondence, emails, or other communications from us, you may opt-out by:

• Noting your preferences at the time you register your account with the Site.
• Logging into your account settings (if applicable) and updating your preferences.
• Using the "unsubscribe" link found in the emails we send.
• Contacting us directly using the contact information provided below.

9. International Data Transfers

Your information, including Personal Information, may be transferred to — and maintained on — computers and servers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. Core Natives is based in Indonesia, and if you are located outside Indonesia and choose to provide information to us, please note that we transfer the data, including Personal Information, to Indonesia for processing and storage.

If we transfer your Personal Information from the European Economic Area (EEA), UK, or Switzerland to countries not deemed to provide an adequate level of data protection by the relevant authorities, we will rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission or the UK Information Commissioner's Office, or other legally permitted mechanisms to ensure that your Personal Information is adequately protected in accordance with this Privacy Policy and applicable law.

10. Children's Privacy

Our Services are not intended for or directed to individuals under the age of 16 (or any other applicable age of digital consent in your jurisdiction). We do not knowingly collect Personal Information from children under this age. If we become aware that a child under this age has provided us with Personal Information without verifiable parental consent, we will take steps to delete such information from our files. If you are a parent or guardian and you believe that your child has provided us with Personal Information without your consent, please contact us using the details below.

11. Links to Other Websites

Our Site may contain links to other websites or services that are not operated or controlled by Core Natives ("Third-Party Sites"). The policies and procedures we described here do not apply to Third-Party Sites. Any links from our Site do not imply that we endorse or have reviewed the Third-Party Sites. We strongly advise you to review the privacy policies and terms of service of every Third-Party Site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any Third-Party Sites or services.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, and other factors. We will post any Privacy Policy changes on this page and, if the changes are significant, we will provide a more prominent notice (which may include, for certain services, email notification of Privacy Policy changes). We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting the Personal Information we collect. The "Last Updated" date at the top of this Privacy Policy indicates when it was last revised. Your continued use of our Site or Services after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy.

13. Contact Us

If you have any questions, comments, or concerns about this Privacy Policy, our data practices, or if you wish to exercise your data protection rights, please do not hesitate to contact us:

Core Natives
Attn: Privacy Team
Jl. Dr. Soedjono, Lingkar Permai Blok R 7, Tanjung Karang
Mataram, Nusa Tenggara Barat. 83115, Indonesia
Email: privacy@corenatives.com
Phone: (+62370) 7857587

We will endeavor to respond to your inquiry as promptly as possible and in accordance with applicable law.