Legal

Privacy Policy

Last updated 13 September 2026

1. Who controls your data

ELYSÉRA Wellness Club is operated by PT TRI MITRA RAYA SUKSES, which is the controller of the personal data described in this policy. You can reach us using the contact details in section 9.

2. What we collect

When you buy a pool ticket we collect only what is needed to sell and issue it:

• Full name — to identify the ticket holder at reception.
• WhatsApp / mobile number — to contact you about your booking.
• Email address — to send your e-ticket and booking confirmation.
• Booking details — visit date, tickets purchased, amount and order reference.
• Technical data — IP address and timestamp of the order, retained as a fraud and abuse safeguard.

If you use a contact, newsletter or tour-booking form elsewhere on this site, we collect the details you submit in that form.

We do not collect or store your card number, CVV or banking credentials. Card details are entered on our payment provider's own secure page and never reach our servers.

3. Why we use it, and on what basis

• To perform our contract with you — creating your order, taking payment, issuing your e-ticket, admitting you to the facility, and handling reschedule requests.
• To meet legal obligations — keeping transaction and tax records.
• For our legitimate interests — preventing fraud and abuse, keeping the facility safe, and maintaining our systems.

We do not sell your personal data, and we do not use it for advertising profiling.

4. Who we share it with

• Our payment provider — receives the order reference, amount and your contact details in order to process the payment and confirm it back to us.
• Our hosting provider — stores this website and its database on our behalf.
• Our own staff at the relevant ELYSÉRA location, to validate tickets and serve you.
• Authorities — where we are legally required to disclose information.

5. Your QR ticket

Your ticket's QR code contains only a randomly generated ticket code and a security signature. It does not contain your name, phone number, email address or any account identifier.

6. How long we keep it

Booking and transaction records are retained for as long as required for accounting, tax and legal purposes under Indonesian law. Records no longer required for those purposes are deleted or anonymised.

7. Security

This site is served over HTTPS. Access to booking data is restricted to authorised personnel. Payment credentials are handled entirely by our payment provider on their own systems.

8. Your rights

Subject to Indonesian law, you may ask us to access, correct, or delete the personal data we hold about you, or to restrict how we use it. Contact us using the details below and we will respond within a reasonable period. We may need to verify your identity first.

9. Contact us

PT TRI MITRA RAYA SUKSES (ELYSÉRA Wellness Club)
WhatsApp: +62 811-9692-0008
Email: info@elyserawellnessclub.id

10. Changes

We may update this policy. The current version is always published on this page with its last-updated date.