Your data.

When you browse this site.

We use PostHog to understand which pages and booking steps work, diagnose errors, and review masked session recordings on public pages. It uses browser identifiers to connect visits and actions. We do not sell your data or use these recordings for advertising.

Our recordings mask form inputs and page text, exclude images and embedded content, and do not record network request bodies or headers. Private booking-management, payment, offers-confirmation and staff pages are excluded from recording. PostHog analytics URLs omit query strings, fragments and private record identifiers. We do not send customer names, phone numbers, addresses, notes or booking access links as analytics event properties.

When Meta Pixel is enabled, it sends Meta public-page visits and the step where you continue from a rental quote to rider details. Meta receives browser and cookie identifiers, public page and referral information, and permitted campaign information. We use this to measure Facebook and Instagram ads and build audiences for those ads. We do not enable automatic form matching or send rider details, booking access links or payment records to Meta. Private booking-management, payment, offers-confirmation and staff pages are excluded.

We count page visits and clicks on our booking and WhatsApp buttons ourselves, on our own server. That counting sets no cookies, stores no identifiers, and keeps only the page, the kind of click, and which site sent you here — it tells us which pages are worth keeping, and cannot tell us who you are.

If Google Analytics is additionally switched on, it also uses browser identifiers to count visits. You can block browser analytics with a content blocker and the site still works. Our own database keeps the rental record needed to fulfil your booking.

When you book online.

The booking page asks for what a rental actually requires: your name, a WhatsApp number we can reach you on, your delivery address or chosen depot, and your dates. Email and nationality are optional. All of it is stored in our own booking system, on our own database — not with a third-party booking platform.

We use it to hold the bike, deliver it, collect it, and settle anything that arises in between. If you give an email address, it is used to send your booking confirmation and for nothing else.

Your booking reference and its link let you view, extend or cancel the booking. The link works without an account, so treat it like a ticket — anyone you forward it to can see the booking.

When you sign up for offers.

Joining our offers list is optional and separate from booking. We store your email address, your consent wording and time, email confirmation, unsubscribe status, and the discount code issued to you.

We send a confirmation link first. Only confirmed subscribers who have not opted out are included in promotional email lists. Our email delivery provider processes your address to send these messages; we do not sell or share the list for other businesses to market to you.

Every promotional email includes an unsubscribe link. We retain your opt-out status so future campaigns exclude you, and your discount-use record to prevent repeat first-rental discounts. Contact us if you want your details deleted.

When you message us on WhatsApp.

Booking over WhatsApp works too, and that conversation lives on WhatsApp and is handled under Meta's privacy terms, not ours. We can't change how Meta processes it — if that matters to you, book online or email us instead.

From a WhatsApp booking we keep the same things the booking page asks for: your name, the phone number you messaged from, your delivery address, and your rental dates — because we need to deliver a bike to you, collect it afterwards, and answer questions if something goes wrong.

When you rent a bike.

We check your licence and IDP in person at handover, and we do not keep a copy. No photograph, no scan, no upload — we look at the documents, confirm they're valid, and hand them straight back. Nothing about them is stored or transmitted anywhere.

We check because it is a legal requirement in Indonesia, and because it is what keeps your travel insurance valid if you come off the bike — an unlicensed rider is an uninsured rider.

We photograph the bike's condition together at handover and again at return. Those photos are of the bike, not of you, and they exist so that pre-existing scuffs are never argued about later.

Every bike carries a GPS tracker — the bikes are ours, and trackers are how they stay ours. While a bike is with you, its location is visible to us and to the tracking provider. We look at it to recover a bike or to help a rider who asks, not to follow you around, and we don't pass it to anyone else.

What we don't do.

We don't hold your passport. We don't take a cash deposit or a card pre-authorisation, so we hold no card details at all — payment is cash or QRIS on delivery, and nothing is stored.

We don't add you to a mailing list you didn't ask for, and we don't pass your number to partner villas, tour sellers, or anyone else.

How long we keep it.

Rental records are kept while you're renting and for a period afterwards, for tax, insurance and dispute reasons. We don't keep a copy of your licence or IDP at all — as above, we check it in person and hand it straight back. If you'd like your other details deleted sooner, ask us and we'll do it — free, and without you needing to give a reason.

The photographs of the bike are kept for a fixed period after the rental ends. If there is a damage claim open on that rental we keep them until the claim is closed — they are the evidence in the argument — and they are then removed on the same schedule as any other rental.

Your rights.

Indonesia's Personal Data Protection Law (UU No. 27/2022, PDP) gives you the right to ask what we hold about you, to have it corrected, and to have it deleted. Message us on WhatsApp or email and we'll action it — you do not need to explain why, and it costs nothing.