Updated 4 November 2026
1. Scope
This policy applies to the UNPAM TRIP website, including open trip bookings, booking lookup, payments, private trip requests, and optional accounts. UNPAM TRIP is an open trip service project by students of Universitas Pamulang, and all trip data on this site is for academic demonstration.
2. Data we collect
We only ask for data needed to provide our services to you:
- Booking contact details: the name, email address, and phone number you enter in the booking form.
- Traveler details: the name of each traveler and the number of travelers on the booking.
- Booking data: the selected trip and departure date, total price, booking status, and booking code.
- Payment data: payment method, transaction reference number, amount, and status from the payment provider.
- Private trip request data: name, contact, number of travelers, preferred dates, and the notes you write.
- Optional account data: name, email, and a password stored in encrypted (hashed) form, if you create an account.
- Technical data: the IP address when a booking is made to prevent abuse, and the session cookies needed for the site to work.
We never ask for your card number, bank password, or PIN. Payment details are entered on the payment provider's side according to the method you choose.
3. Booking without an account
You can book as a guest without creating an account. A guest booking can be viewed again by linking it to your account in the Dashboard, using the booking code and the email you used when booking. Keep your booking code and don't share it with anyone.
4. How we use data
Data is used to:
- create and manage bookings, including holding seats for 12 hours until payment is complete;
- verify payments and issue invoices;
- contact you about your booking, schedule changes, or refunds;
- prevent abuse, such as mass bookings made to hold seats;
- improve our service based on summaries that don't identify individuals.
We do not sell your personal data to anyone.
5. Payment provider
Payments are processed through the payment provider. To create a transaction, we send only the necessary data to the payment provider: your name, email, phone number, and booking details. The site currently runs in Sandbox mode, the payment provider's test environment, so no real money moves. the payment provider's use of data is subject to the payment provider's own policy.
6. Storage and security
Data is stored in the application's database. We limit sign-in attempts and booking creation, and verify payment status directly with the payment provider before a booking is marked as paid. No system is entirely risk-free, so please keep your booking code and password confidential.
We may retain booking data for as long as needed for service, transaction records, and dispute resolution.
8. Your rights
You can ask us to view, correct, or delete your personal data, as long as deletion does not conflict with our obligation to keep transaction records. Contact us at [email protected] and include your booking code so we can verify your request.
9. Policy changes
This policy may be updated at any time. The date of the latest update is shown at the top of the page. By continuing to use the site after an update, you are considered to agree to the policy in effect.