Privacy Policy
Last Updated: September 16, 2026
This Privacy Policy describes how Haraya Group LLC ("we," "us," or "our") collects, uses, processes, and discloses your information in connection with your access to and use of the Haraya Group LLC platform, our services, and interactions with us. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for our EU customers.
1. Data Controller
The data controller responsible for your personal data under this Privacy Policy is:
Haraya Group LLC
30 N Gould St, Sheridan, WY 82801, USA
Contact Email: info@harayagroup.com
2. Information We Collect
We collect information about you in various ways when you use our Platform and services:
2.1 Information You Provide to Us
- Account Information: When you create an account, we collect your name, email address, password, and other contact details.
- Booking Information: When you make a reservation, we collect details necessary to process your booking, such as your name, contact information, payment details (e.g., credit card number, expiry date, billing address), dates of travel, number of travelers, and any special requests or preferences.
- Communications: When you communicate with us (e.g., customer support, inquiries), we collect the content of your communications and any information you choose to provide.
- User Content: If you submit reviews, ratings, photos, or other content to our Platform, we collect this information.
- Marketing Preferences: We collect your preferences regarding receiving marketing communications from us.
2.2 Information We Automatically Collect from Your Use of the Platform
- Usage Information: We collect information about your interactions with the Platform, such as the pages or content you view, your searches for Travel Products, and other actions on the Platform.
- Log Data and Device Information: We automatically collect log data and device information when you access and use the Platform, even if you have not created an account or logged in. That information includes, among other things: IP address, access dates and times, hardware and software information, device information, cookie data, and the pages you’ve viewed or engaged with before or after using the Platform.
- Location Information: When you use certain features of the Platform, we may collect information about your precise or approximate location as determined by data such as your IP address or mobile device’s GPS (depending on your device settings).
- Payment Transaction Information: We collect information related to your payment transactions through the Platform, including the payment instrument used, date and time, payment amount, payment instrument expiration date and billing postcode, PayPal email address, IBAN information, your address, and other related transaction details.
2.3 Information We Collect from Third Parties
- Travel Product Providers: Our Travel Product Providers may provide us with information related to your booking, such as confirmation of services, cancellations, or any issues encountered.
- Third-Party Services: If you link, connect, or log in to the Platform with a third-party service (e.g., Google, Facebook), the third-party service may send us information such as your registration and profile information from that service.
- Payment Processors: We use third-party payment processors who collect and process payment information on our behalf.
- Other Sources: To the extent permitted by applicable law, we may receive additional information about you, such as demographic data or fraud detection information, from third-party service providers and/or partners, and combine it with information we have about you.
3. How We Use Information We Collect
We use, store, and process your information to provide, understand, improve, and develop the Haraya Group LLC Platform, create and maintain a trusted and safer environment, and comply with our legal obligations.
3.1 Providing Our Services:
- Enable you to access and use the Haraya Group LLC Platform.
- Process and manage your Reservations and payments.
- Send you service messages, updates, security alerts, and account notifications.
- Provide customer service and support.
3.2 Improving and Developing Our Platform:
- Operate, protect, improve, and optimize the Haraya Group LLC Platform and experience.
- Perform analytics, debug, and conduct research.
- Personalize your experience by, for example, ranking search results or offering curated content based on your interests.
3.3 Creating a Trusted and Safer Environment:
- Detect and prevent fraud, spam, abuse, security incidents, and other harmful activity.
- Conduct security investigations and risk assessments.
- Verify or authenticate information provided by you.
- Comply with our legal obligations.
- Resolve disputes and enforce our agreements with third parties.
3.4 Providing, Personalizing, Measuring, and Improving Our Advertising and Marketing:
- Send you promotional messages, marketing, advertising, and other information that may be of interest to you, including information about Haraya Group LLC or our partners' services.
- Administer referral programs, rewards, surveys, sweepstakes, contests, or other promotional activities or events sponsored or managed by Haraya Group LLC or its third-party partners.
- Personalize, measure, and improve our advertising.
4. Legal Basis for Processing (for EU Users - GDPR)
We process your personal data based on the following legal grounds:
- Performance of a Contract: We process your information where it is necessary for the performance of a contract with you or to take steps at your request before entering into such a contract (e.g., processing your booking, providing customer support related to your booking).
- Legal Obligation: We process your information where it is necessary for compliance with a legal obligation to which we are subject (e.g., tax, accounting, and anti-money laundering obligations, responding to valid legal requests).
- Legitimate Interests: We process your information where it is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests. This includes:
- Operating, protecting, and improving our Platform and services.
- Personalizing your experience.
- Conducting fraud prevention and risk assessment.
- Marketing and advertising our services.
- Analyzing and understanding how users interact with our Platform.
- Consent: Where required by law, and in specific circumstances, we may rely on your consent to process your information (e.g., for sending certain marketing communications, placing non-essential cookies). You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
5. Sharing and Disclosure
We do not sell your personal data. We disclose your information only in limited circumstances as described below:
5.1 With Your Consent
We may share your information when you give us explicit permission to do so.
5.2 Between Users
While the Haraya Group LLC Platform primarily facilitates bookings with Travel Product Providers, certain features may allow you to share information with other users (e.g., public reviews).
5.3 With Travel Product Providers
To facilitate your booking, we share necessary information (e.g., your name, contact details, booking dates, special requests) with the relevant Travel Product Providers. This information is required for them to confirm and fulfill your reservation.
5.4 Third-Party Service Providers
We use a variety of third-party service providers to help us provide services related to the Platform, such as:
- Payment processors (e.g., Stripe, PayPal)
- Cloud service providers (e.g., for hosting, data storage)
- Customer support tools
- Analytics and marketing service providers
- API partners for bookings (e.g., Viator, Klook, Hotelbeds, Expedia EPS, GDS providers)
- Local transfer providers
These providers have limited access to your information to perform these tasks on our behalf and are contractually bound to protect it and use it only for the purposes for which it was disclosed.
5.5 Compliance with Law, Responding to Legal Requests, Harm Prevention, and Our Rights
We may disclose your information to courts, law enforcement, governmental authorities, or authorized third parties, if and to the extent we are required or permitted to do so by law or if such disclosure is reasonably necessary:
- To comply with our legal obligations.
- To comply with a valid legal request or to respond to claims asserted against Haraya Group LLC.
- To respond to a verified request relating to a criminal investigation or alleged or suspected illegal activity or any other activity that may expose us, you, or any other of our users to legal liability.
- To enforce and administer our Terms of Service or other agreements with Users.
- To protect the rights, property, or personal safety of Haraya Group LLC, its employees, its Users, or members of the public.
5.6 Business Transfers
If Haraya Group LLC undertakes or is involved in any merger, acquisition, reorganization, sale of assets, bankruptcy, or insolvency event, then we may sell, transfer, or share some or all of our assets, including your information, in connection with such transaction or in contemplation of such transaction (e.g., due diligence). In such an event, we will notify you before your personal information is transferred and becomes subject to a different privacy policy.
5.7 Aggregated Data
We may also share aggregated information (information about our users that we combine so that it no longer identifies or references an individual user) and other anonymized information for regulatory compliance, industry and market analysis, demographic profiling, marketing and advertising, and other business purposes.
6. International Data Transfers
Given our global target market, your information may be stored and processed outside of your country of residence, including in the United States (where Haraya Group LLC is incorporated), Indonesia, the Philippines, or other countries where our service providers operate.
For EU users, when we transfer your personal data outside the European Economic Area (EEA), we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
- The country to which the personal data is transferred has been deemed to provide an adequate level of protection for personal data by the European Commission.
- We use specific contracts approved by the European Commission which give personal data the same protection it has in Europe (Standard Contractual Clauses).
- Where we use providers based in the US, we may transfer data to them if they are part of the EU-US Data Privacy Framework or if we implement other appropriate safeguards.
By using our Platform, you consent to the transfer of your information to these countries.
7. Your Rights (for EU Users - GDPR)
If you are located in the EEA, you have certain rights regarding your personal data:
- Right of Access: You have the right to request copies of your personal data held by us.
- Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
- Right to Erasure (Right to be Forgotten): You have the right to request that we erase your personal data under certain conditions.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
- Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
- Right to Object to Processing: You have the right to object to our processing of your personal data under certain conditions, particularly where the processing is based on legitimate interests or for direct marketing purposes.
- Rights in relation to automated decision making and profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except in specific circumstances.
- Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at info@harayagroup.com. We will respond to your request in accordance with applicable data protection laws.
8. Data Retention
We retain personal data for as long as necessary to provide the services you have requested, for our legitimate business purposes, and to comply with legal obligations. Generally, this means we keep your personal data for the duration of your account with us and for a period thereafter to comply with legal requirements, resolve disputes, and enforce our agreements.
9. Security
We are continuously implementing and updating administrative, technical, and physical security measures to help protect your information against unauthorized access, loss, destruction, or alteration. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security.
10. Children's Privacy
Our Platform is not directed to children under the age of 18, and we do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information from our files as soon as possible.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on our Platform and by updating the "Last Updated" date at the top of this policy. Your continued use of the Platform after such updates constitutes your acceptance of the revised Privacy Policy.
12. Contact Us
If you have any questions or complaints about this Privacy Policy or our data handling practices, please contact us at info@harayagroup.com or by writing to us at 30 N Gould St, Sheridan, WY 82801, USA.
You also have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of personal data relating to you infringes the GDPR.
Cookie Policy
Last Updated: September 16, 2026
This Cookie Policy explains how Haraya Group LLC ("we," "us," or "our") uses cookies and similar technologies on our website, https://harayagroup.com.
What are Cookies?
Cookies are small text files that are stored on your device (computer, tablet, smartphone) when you visit a website. They are widely used to make websites work more efficiently, as well as to provide information to the website owners. Cookies can be "persistent" or "session" cookies. Persistent cookies remain on your personal computer or mobile device when you go offline, while session cookies are deleted as soon as you close your web browser.
How We Use Cookies
We use cookies for various purposes:
- Essential Cookies (Strictly Necessary): These cookies are essential for the operation of our website and services. They enable core functionality such as security, network management, and accessibility. Without these cookies, services you have asked for, like processing transactions, cannot be provided. We do not require your consent for these cookies.
- Analytics and Performance Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. They allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
- Functionality Cookies: These cookies allow our website to remember choices you make (such as your username, language, or the region you are in) and provide enhanced, more personal features. For instance, they may be used to remember changes you have made to text size, fonts, and other parts of web pages that you can customize.
- Marketing and Advertising Cookies: These cookies are used to deliver advertisements more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of advertising campaigns. They are usually placed by advertising networks with the website operator’s permission. They remember that you have visited a website and this information is shared with other organizations such as advertisers.
Third-Party Cookies
In addition to our own cookies, we may also use various third-parties cookies to report usage statistics of the website, deliver advertisements on and through the website, and so on. These third-party cookies are subject to the respective third parties' own privacy policies, and we do not have control over them. Examples include Google Analytics, advertising networks, and social media platforms.
Your Cookie Choices
Most web browsers allow you to control cookies through their settings preferences. However, if you limit the ability of websites to set cookies, you may worsen your overall user experience since it will no longer be personalized to you. It may also stop you from saving customized settings like login information.
You can manage your cookie preferences through the following options:
- Browser Settings: You can typically set your browser to remove or reject browser cookies. To do this, follow the instructions provided by your browser (usually located within the “Help,” “Tools” or “Edit” facility).
- Opt-out Tools: Some third-party advertisers and service providers offer their own opt-out mechanisms. For example, you can opt out of personalized advertising by visiting:
- Website Cookie Consent Banner: We may provide a cookie consent banner or pop-up on our website, allowing you to manage your preferences for non-essential cookies.
More Information About Cookies
For more information about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.
Changes to Our Cookie Policy
We may update our Cookie Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date.
Contact Us
If you have any questions about our use of cookies or this Cookie Policy, please contact us at info@harayagroup.com.