Privacy policy

PT Travia Inovasi Indonesia, Jalan Cendrawasih H 66 Nogotirto IV, Gamping, Kab. Sleman, Yogyakarta, Indonesia, is the controller of the personal data described here. Reach us at hello@arrivalindonesia.com.

Everything we collect, you type into the form. We ask for exactly what the official arrival card submission requires, and nothing else:

• Full name, as printed in your passport
• Nationality / country of origin
• Passport number and passport expiry date
• Date of birth
• Flight number
• Email address
• Visa or document number, if you have one

We also handle two things you do not type: your IP address, used to rate-limit submissions (ten per minute, with your passport number used as the key if no IP can be read), and the ordinary server logs generated when your request reaches our functions.

We do not use cookies for tracking, analytics, advertising pixels or any tracker. The only cookie we set remembers your choice of language. There is no account to create.

Note that the submission we send to immigration contains more than we collect from you: the official form has fields we do not ask about, and we supply a standard answer for them. Exactly which ones, and what they say in your name, is set out in our terms.

To file your arrival card with Direktorat Jenderal Imigrasi and to take payment for doing so. That is the only purpose. We do not build profiles, we do not market to you, and we do not sell or rent your data to anyone.

Your email address is used to identify your payment and to reach you about that specific transaction. If you leave it blank, a placeholder address is sent to the payment gateway in its place.

Your details reach three parties besides us. All three are necessary to deliver the service.

Direktorat Jenderal Imigrasi — the Indonesian immigration authority, at allindonesia.imigrasi.go.id. This is the filing itself: your full submission goes to the government system and is retained by them under their own rules, which we do not control and cannot undo.

iPaymu — our payment gateway. Your name and email are passed as the payer details. Your submission is also attached to the invoice as metadata, so iPaymu receives the same personal details you entered on the form. iPaymu holds payment records under their own retention policy.

Our hosting providers — the infrastructure the service runs on. They run the functions that process your request, hold the short-lived transaction record described below, and keep the ordinary request logs any server keeps. They act only on our instructions and do not use your data for their own purposes.

The transaction record we hold — your submission and its payment status — is cached for two hours and then expires automatically. That window exists so you can reopen your status page and so the payment callback can find your transaction. After it passes, we no longer hold it.

We do not run a customer database. There is no long-term store of arrival card submissions on our side.

This does not reach the copies held by others: the government keeps your filing, and iPaymu keeps the payment record with its metadata. Deleting data on our side does not delete theirs.

Under Indonesian personal data protection law you may ask us for a copy of your data, ask us to correct it, or ask us to erase it. Write to hello@arrivalindonesia.com with your transaction ID.

Two limits are worth stating rather than burying. Once a filing has been submitted to immigration, we cannot withdraw or amend it — that request has to go to the immigration authority. And because our own copy expires after two hours, a request that arrives later will usually find nothing left for us to send or delete.

Traffic to this site and to every service named above travels over TLS. Access to the infrastructure is restricted to the people who operate it.

We never see your card or bank details: payment happens on iPaymu's own pages, not ours.

The service is meant for adults arranging their own travel. A parent or guardian may submit a filing for a minor travelling with them, and is responsible for the details they provide.

If this policy changes, the date at the top changes with it. For anything about your data, write to hello@arrivalindonesia.com.

The commercial side of the service — price, refunds, liability — is covered in our terms and conditions.