**This Privacy Policy explains how Gaharu Export (gaharuexport.com) collects, uses, and protects the data you share when you send a gaharu sourcing inquiry. We handle personal data under Indonesia’s Personal Data Protection Law (UU No. 27 of 2022) and respect GDPR-style rights for international visitors. We do not sell your data.**
_Ringkasan singkat (Bahasa Indonesia): Kebijakan Privasi ini menjelaskan data apa yang kami kumpulkan lewat formulir permintaan penawaran, bagaimana pertanyaan Anda sampai ke tim dagang Bali Premium Trip, berapa lama data disimpan, dan cara meminta akses, koreksi, atau penghapusan data Anda._
Effective as of 2026. We may update this page from time to time; the version on this URL is the current one.
Who runs this website?
Gaharu Export is an information hub and sourcing desk for Indonesian gaharu (agarwood). The site gaharuexport.com is published by Juara Holding Group, a Bali-based Indonesian group. Inquiries submitted through the site are handled by the Bali Premium Trip trade desk, which coordinates sourcing and replies.
For clarity, and because gaharu is a regulated commodity: Gaharu Export is a sourcing broker and information resource. We are not a CITES permit authority, and not a licensed legal, tax, or financial adviser. That framing matters for how we treat your data and what we can promise you.
The party responsible for your personal data (the data controller) is the Bali Premium Trip trade desk. You can reach the data desk here:
- WhatsApp: +62 811-2859-0000
- Email: sales@balipremiumtrip.com
What personal data do we collect?
We keep collection to a minimum and gather only what you choose to give us. The main source of personal data is the request-for-quote (RFQ) form. Its fields map as follows:
| Form field | What it stores | Why we need it |
|---|---|---|
| csh_name | Your name | To address you correctly in a reply or quote |
| csh_email | Your email address | To send the quote and follow up |
| csh_dest | Destination country or port | To assess the export route and import-side requirements |
| csh_cargo | Product, grade, and volume you want | To prepare an indicative quote |
| csh_msg | Your free-text message | To understand your specific request |
| csh_qf | Internal quote/routing reference | To route and track your inquiry internally |
If you contact us by WhatsApp instead, we receive your phone number, your WhatsApp profile name, and the content of your messages. If you email us directly, we receive your email address and whatever you write.
We also collect limited technical data automatically when you browse the site: IP address, browser and device type, referring page, and pages viewed. This comes from standard server logs and analytics, described under cookies below.
We do not ask for and do not want financial account numbers, passwords, passport or ID numbers, or payment-card details through the website. Please do not send those through the form or by chat.
How does your inquiry reach the trade desk?
When you submit the form, the csh_ fields are transmitted from your browser and delivered as a notification or email to the Bali Premium Trip trade desk, which reviews the request and prepares a reply. Our quote SLA is a response within 24 business hours.
WhatsApp messages travel through WhatsApp/Meta’s own infrastructure and are subject to their privacy terms. Emails travel through standard email providers. In each case, only staff who need your inquiry to answer it will see it.
What is the legal basis for using your data?
Under Indonesia’s UU PDP (Law 27 of 2022), we process your data on the basis of your consent, given when you submit the form or message us, and our legitimate interest in responding to a commercial inquiry and preparing a possible transaction.
For visitors in the EU, UK, and other GDPR-aligned regions, the equivalent bases are your consent, the steps taken at your request before entering a contract, and our legitimate interest in handling business correspondence. Where we rely on consent, you can withdraw it at any time (see your rights below).
How long do we keep your data?
We keep inquiry records only as long as we reasonably need them to reply, follow up, and maintain a normal business relationship, typically up to 24 months from our last contact with you. After that we delete or anonymize them, unless a longer period is required by law, for example tax, accounting, or customs record-keeping obligations. Server logs and analytics data are kept for shorter periods and then rotated out.
What are your rights over your data?
Under UU PDP and, where it applies, GDPR, you can ask us to:
| Right | What it means |
|---|---|
| Access | Get a copy of the personal data we hold about you |
| Correction | Fix data that is wrong or out of date |
| Deletion | Have your data erased when we no longer need it |
| Withdraw consent | Stop processing that relied on your consent |
| Object / restrict | Object to or limit certain processing |
| Portability | Receive your data in a portable format, where applicable |
| Complain | Raise a concern with a supervisory authority |
To exercise any of these, email sales@balipremiumtrip.com or message +62 811-2859-0000 with your request. We may ask a question or two to confirm it is really you before acting, and we respond within the timeframe required by the applicable law. Indonesian residents may also raise concerns with the relevant authority under UU PDP; EU/UK residents may contact their national data-protection authority.
Do we use cookies and analytics?
Yes, but sparingly. We use essential cookies that keep the site working and basic analytics to understand traffic and improve the pages. You can block or delete cookies in your browser settings; essential functions may behave differently if you do. We do not use your inquiry data to build advertising profiles, and we do not run intrusive ad tracking.
Do we share your data with anyone?
We do not sell your personal data. We share it only with service providers that help us run the site and reply to you, such as our web host, email delivery, and WhatsApp/Meta for chat, and only to the extent they need it to perform that service. Because our team and infrastructure are based in Indonesia, and you may write from anywhere, your data may be processed on servers outside your home country. Where required, we take reasonable steps to protect it during any such transfer.
How do we protect your data?
We apply reasonable technical and organizational measures, including access limits, encrypted connections where available, and staff handling on a need-to-know basis. No website or transmission method is ever completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond quickly if a problem arises.
Is this site for children?
Gaharu Export is a business-to-business commodity resource and is not directed to children. We do not knowingly collect data from anyone below the age of majority. If you believe a minor has sent us data, contact us and we will remove it.
A note on liability and inquiries
Any prices, grade bands, and figures on this website are indicative, published as of 2026, and subject to change. A quote is non-binding until confirmed in writing with the trade desk, and a final quote confirms grade and scope.
Gaharu (Aquilaria spp.) is listed under CITES Appendix II. Legal export requires a CITES permit and a BKSDA (Balai Konservasi Sumber Daya Alam) recommendation; you should confirm current requirements with the CITES Management Authority (Indonesia) and with your import country. We are a sourcing broker and information hub, not a permit authority, and we do not sell permit certainty or a customs guarantee. Nothing on this site is legal, tax, or financial advice.
How to reach us about your data
For any privacy question, or to make a data request, contact the Bali Premium Trip trade desk:
- Email: sales@balipremiumtrip.com
- WhatsApp: +62 811-2859-0000
Gaharu Export is part of Juara Holding Group, a Bali-based Indonesian group operating from Bali across Indonesia since 2015.