Last Updated: 5 February 2026

Privacy Policy

Getsroom (“Getsroom”, “we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data in connection with the use of Getsroom’s services.

By accessing or using Getsroom’s website, applications, or services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

---

1. DATA CONTROLLER

Getsroom is owned and operated by:

PT Devata Kreasi Bangsa
(Sole Proprietorship Limited Liability Company)
Established under the laws of the Republic of Indonesia

For the purposes of applicable data protection laws, PT Devata Kreasi Bangsa acts as the Data Controller as defined under Law No. 27 of 2022 on Personal Data Protection (PDP Law).

---

2. LEGAL BASIS

This Privacy Policy is governed by and complies with:

• Law No. 27 of 2022 on Personal Data Protection
• Law No. 11 of 2008 on Electronic Information and Transactions (as amended)
• Relevant government regulations and implementing rules
• Reasonable industry standards for data protection and security

---

3. SCOPE OF APPLICATION

This Privacy Policy applies to:

• 1. Guests (users who search, book, or transact accommodation)
• 2. Properties / Partners (hotels, villas, guesthouses, or accommodation operators)
• 3. Website visitors
• 4. All users of Getsroom’s booking engine and systems

---

4. PERSONAL DATA WE COLLECT

---

5. PURPOSES OF DATA PROCESSING

Personal data is collected and processed for the following purposes:

• Providing and operating the Getsroom booking engine
• Processing reservations and transactions
• Connecting Guests with Properties
• Account verification and fraud prevention
• Customer support and dispute resolution
• Compliance with legal and regulatory obligations
• System security, monitoring, and internal audits
• Analytics, service improvement, and development

---

6. LEGAL BASIS FOR PROCESSING

We process personal data based on:

• User consent
• Performance of a contract (booking and partnership agreements)
• Compliance with legal obligations
• Legitimate interests of Getsroom, provided such interests do not override users’ rights

---

7. DISCLOSURE OF PERSONAL DATA

Getsroom does not sell or trade personal data.

Personal data may be shared with:

• Relevant Properties for booking fulfillment
• Payment gateways and financial institutions for transaction processing
• Technology, hosting, and infrastructure providers
• Government authorities when required by law

All third parties are contractually obligated to protect personal data.

---

8. PAYMENTS & TRANSACTION SECURITY

• Getsroom does not store full credit or debit card information
• All payments are processed through certified third-party payment gateways
• Transaction statuses (success, pending, failed, canceled) are recorded and retained for audit and legal purposes
• Payment data is protected in accordance with industry standards

---

9. DATA RETENTION & DELETION

• Personal data is retained only as long as necessary for service delivery and legal compliance
• Data will be deleted, anonymized, or securely destroyed once no longer required
• Identity verification data will be deleted after verification is completed, unless retention is legally required

---

10. DATA SECURITY

Getsroom implements reasonable technical and organizational security measures, including:

• Encryption of sensitive data
• Role-based access control
• System logging and activity monitoring
• Periodic internal security reviews

Users acknowledge that no electronic system is completely secure, and absolute security cannot be guaranteed.

---

11. DATA SUBJECT RIGHTS

In accordance with the PDP Law, users have the right to:

• Access their personal data
• Correct inaccurate or incomplete data
• Withdraw consent
• Request deletion of personal data
• Restrict or object to data processing
• Submit complaints to relevant authorities

Requests may be submitted through Getsroom’s official contact channels.

---

12. PERSONAL DATA BREACH

In the event of a personal data breach:

• Getsroom will conduct an internal investigation
• Notifications will be made in accordance with applicable laws
• Mitigation and corrective actions will be implemented promptly

---

13. COOKIES

Getsroom uses cookies to:

• Store user preferences
• Support authentication and security
• Analyze usage and improve services

Users may manage or disable cookies through their browser settings.

---

14. ROLES & LIMITATION OF RESPONSIBILITY

• Getsroom acts solely as a platform and booking engine provider
• Properties are fully responsible for accommodation services and content accuracy
• Guests are responsible for the accuracy of information they provide
• Getsroom is not responsible for losses arising from inaccurate information provided by Properties

---

15. CHANGES TO THIS PRIVACY POLICY

Getsroom may update this Privacy Policy from time to time.
Any changes will be effective upon publication on the Getsroom platform.

---

16. GOVERNING LAW

This Privacy Policy is governed by and interpreted in accordance
with the laws of the Republic of Indonesia.

---

17. CONTACT INFORMATION

For questions, requests, or complaints regarding this Privacy Policy or
personal data processing, please contact:

• Email: support@getsroom.com
• Website: https://www.getsroom.com

---