Privacy Policy

Data we collect

The data controller is PT. Tridaya Pesona Wisata (Tridaya Travel). What we collect depends on what you do on the website:

Filling in the consultation or package enquiry form

Name, WhatsApp number, the package you are interested in, and the room type if you chose one.

Filling in a trip planning form (Private Umrah or Umrah Promo)

Besides your name and WhatsApp number: your city, the number of travellers, and your answers about the trip plan, such as the departure month, hotel choice, budget readiness, or when you are ready to travel.

Registering with the Book Now button

The registrant's name and WhatsApp number, city of residence, and nearest office if chosen. For each pilgrim: full name, gender, date of birth, relationship to the registrant, and mobile number if given.

Pressing the Chat on WhatsApp button

The page, package or branch office you are viewing, plus a short code included in the opening message. Our staff only record your name and number once you actually send the chat.

Asking to hear about umrah promotions

Your WhatsApp number, and your name if you give it. We only use it to tell you about umrah promotions. If you ask us to stop, we remove your number from the list.

Registering as a Teman Syiar partner

Name, email address, WhatsApp number, city, and why you want to join.

Asking for a MyTRIPPS app account to be deleted

Name, the app account's email, and a reason if you write one. The request is sent to our team's email to be processed. Data inside the app is covered by the MyTRIPPS app's own privacy policy.

Viewing prayer times

An estimated city based on your IP address. If you press "Not in this city? Use my location", your device's location is used after rounding it to about 1 km, and it is remembered only in your browser. Our server uses that rounded point to work out prayer times without linking it to you.

Recorded automatically

Where you came from (for example, the name of the ad campaign you clicked), the page language when you filled in a form, and, if you arrived through a partner's link, that partner's code. Like most web servers, our server also records IP addresses in its technical logs.

This page covers data collected through the website. Travel documents such as passports handed in at the office are not collected through this website; ask our staff how they are handled when you register.

What the data is used for

• Getting back to you on WhatsApp to answer questions or schedule a consultation.
• Telling you about umrah promotions, only if you ask us to.
• Recording your registration and payments if you decide to travel with us.
• Calculating the share for the Teman Syiar partner who introduced you to us.
• Learning which ads and pages help future pilgrims, as combined figures only.
• Preventing misuse of the forms by bots.

We process it on the basis of the consent you ticked on the form. We do not use this data for any other purpose without asking for your consent again.

Cookies

Cookies are small records your browser stores. This website uses:

• Session and security cookies, so forms can be sent securely. They disappear when the session ends.
• Visit source cookie, stores the name of the ad campaign you clicked for 30 days, so it is recorded with your form.
• Partner code cookie, stores a Teman Syiar partner code for 30 days if you arrive through a partner's link.
• Third-party cookies from the services named in the next section.

You can delete or block cookies in your browser settings. Forms still work as long as session cookies are allowed.

Besides cookies, a few small things are kept only in your own browser, not on our server: your prayer-time location if you asked for it, your Manasik Simulation progress together with the name and departure date you entered there, and markers so the welcome message and promotion offer do not keep reappearing.

To learn which pages and buttons are used most, this website also records anonymous visit statistics on our own server, without cookies and without storing IP addresses. These records cannot be linked to you, are not shared with anyone else, and are deleted after 13 months. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, your visit is not recorded at all.

Other parties involved

We do not sell or rent your data. It only reaches others as far as the following services require:

• Cloudflare, which delivers and protects traffic to this website. Cloudflare processes your IP address and technical browser data, including the estimated city we use for prayer times.
• Google reCAPTCHA, to tell visitors apart from bots when a form is sent. Google receives technical data about your browser; see the Google Privacy Policy.
• WhatsApp, if you choose to contact us by chat. That conversation is subject to WhatsApp's terms.
• Instagram, for videos shown directly from Instagram on the Gallery and testimonial pages.
• YouTube and Google Maps, on package pages: the review video's cover image loads from YouTube, while the video itself and the hotel map only load when you play or open them.
• Aladhan, a prayer-time calculation service. Our server only sends it a rounded city point, without your IP address or any of your data.

If you came through a Teman Syiar partner's link or were registered by one, that partner can see your name, package, registration status, payments and document completeness in their account, so they can assist you. Your mobile number, date of birth and city are never shown to partners, and partners cannot change payment data.

Storage and security

• Data is stored on the website server and can only be opened by Tridaya Travel staff signed in with their own accounts, apart from the parts shown to partners as described above.
• Pilgrims' dates of birth are stored encrypted.
• Every change to a payment status and every share payout is logged with who made it and when.
• Forms are protected against repeated submissions by bots, and their contents are checked before they are saved.
• We keep data for as long as it is needed to follow up your request and to record transactions. You can ask for it to be deleted at any time.
• Two years after departure or cancellation, pilgrims' personal data is anonymised automatically: names become initials, while dates of birth, mobile numbers and cities are deleted. Only the registration number and transaction records remain, for bookkeeping.

Your rights

Under the Personal Data Protection Law, you have the right to:

• know what data about you we hold and ask for a copy;
• ask for incorrect data to be corrected;
• withdraw your consent and ask for your data to be deleted;
• ask us to stop contacting you.

Send your request through the contact below from the WhatsApp number you registered, so we can be sure the request really comes from you. We will respond in line with that law.

Contacting us

This policy may be updated if the way we handle data changes; the latest version is always on this page. Last updated 12 November 2026.