Privacy Policy

What we collect

When you make a reservation, we may collect:

Contact and booking information

• First name and last name
• Email address
• WhatsApp or telephone number
• Arrival and departure dates
• Room type
• Number of adults
• Number of children
• Age of each child
• Quoted and booking price
• Order reference
• Payment status
• Information you provide in connection with your reservation

Guest identification

The guest whose name appears on the reservation may be required to provide valid identification for guest registration.

For Indonesian guests, this may be a KTP.

For foreign guests, this may be a passport.

We collect identification information only for purposes connected with guest registration, security, the operation of the stay, and applicable legal requirements.

Payment information

Payments are processed through Midtrans.

Yuten Onsen does not store your full payment-card details. Payment and payment-account information is entered through the payment service provided by Midtrans and is handled according to Midtrans's own policies.

We receive information necessary to identify and reconcile the transaction, such as the payment status, order reference, amount, and related transaction information.

Technical information

The website may process technical information required to operate and secure the service, such as IP address, browser information, device information, timestamps, and server logs.

We do not use this information for advertising unless the website is changed to introduce such functionality.

Cookies

The booking website uses a cookie named book_locale to remember whether you selected English or Indonesian.

This cookie is stored for one year unless you clear it earlier.

It is used only to remember your language preference and is not used for advertising.

Other cookies may be introduced if the website's functionality changes. If this happens, this Privacy Policy may be updated accordingly.

Why we use your data

We use personal data to:

• Provide and manage your reservation.
• Calculate and display the applicable booking price.
• Process and verify payment.
• Send booking confirmations and other necessary reservation communications.
• Contact you about arrival, check-in, or changes affecting your reservation.
• Complete guest registration.
• Verify the identity of the booking guest where required.
• Apply occupancy and additional-guest rules.
• Provide customer support.
• Maintain business and accounting records.
• Protect the security of the booking system and property.
• Comply with applicable legal obligations.
• Resolve disputes and investigate issues relating to a reservation.

A child's age is collected only when necessary to apply occupancy, pricing, and guest-registration rules.

Who may receive your data

Personal data may be accessed by people and service providers who need it to operate Yuten Onsen and provide the booking service.

Yuten Onsen staff

Authorized Yuten Onsen staff may access reservation and guest information necessary to prepare and host your stay.

Access to sensitive information, including identity documents, should be limited to personnel who need that information for legitimate operational purposes.

Midtrans

Midtrans processes payments for bookings made through the website.

We may provide Midtrans with information necessary to process and identify the payment, including your name, email address, phone number, order reference, and transaction amount.

Midtrans handles payment information according to its own privacy policy and terms.

Resend

Resend is used to send booking-related email communications.

It may receive the guest name, email address, order reference, and the contents of the booking-related message required to send the email.

Booking emails are sent from bookings@yutenonsen.com.

Other service providers

Yuten Onsen may use hosting, cloud storage, communications, security, mapping, and other technology providers necessary to operate the website and provide the booking service.

These providers may process personal data only as necessary to provide their services or as otherwise permitted by applicable law.

Mapbox

The Getting Here page uses Mapbox to display a map.

When the map is loaded, Mapbox may receive technical information required to provide the map service, including your IP address and other information associated with your connection.

Mapbox handles information according to its own terms and privacy policy.

How long we keep your data

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Reservation and transaction records may be retained for as long as necessary to:

• Operate and administer the reservation;
• Provide customer support;
• Maintain accounting and business records;
• Comply with applicable legal obligations;
• Resolve disputes or outstanding issues; and
• Protect the rights and property of Yuten Onsen and its guests.

Identification documents are treated as sensitive information and should not be retained indefinitely. They will be retained only for as long as reasonably necessary for guest registration, security, applicable legal requirements, and legitimate operational purposes, after which they should be securely deleted or anonymized where appropriate.

Technical logs may be retained for as long as reasonably necessary for security, troubleshooting, and system operation.

The book_locale language cookie lasts for one year or until you clear it.

How we protect your data

Yuten Onsen takes reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

Access to reservation and guest information is limited according to operational need.

Identity documents, where collected, should be stored using access-controlled systems and should not be made publicly accessible.

No internet transmission or storage system can be guaranteed to be completely secure. We will nevertheless take reasonable measures appropriate to the nature of the information we process.

Your rights

Subject to applicable Indonesian personal-data law, you may have the right to:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of personal data where legally permitted.
• Request information about how your personal data is being processed.
• Exercise other rights available to you under applicable Indonesian personal-data law.

Some information may need to be retained where required by law or where necessary to establish, exercise, or defend legal claims or resolve an outstanding matter.

To make a privacy request, contact:

yutenonsen@gmail.com

Children

The person making a reservation must be an adult.

Children may stay at Yuten Onsen subject to the occupancy rules described in the Terms and Conditions.

We collect a child's age when necessary to determine applicable occupancy and pricing rules.

We do not intentionally use children's information for advertising.

Parents or legal guardians are responsible for supervising children during their stay, including when using the onsen.

External websites and services

This website may contain links to or references to external services including Instagram, TikTok, Telegram, WhatsApp, email services, and other third-party services.

When you leave the Yuten Onsen website and use another service, that service's own terms and privacy policy apply.

Changes to this Privacy Policy

We may update this Privacy Policy when our booking system, services, data practices, or legal obligations change.

When we make a change, we will update the date shown at the top of this page.

Contact

For questions or requests relating to your personal data:

Yuten Onsen Desa Semangat Gunung, Kec. Merdeka, Kabupaten Karo, Sumatera Utara 20357 Email: yutenonsen@gmail.com WhatsApp: 0811 6064 814