This Privacy Policy explains how PT Bali Estate Partners ("Bali Estate Partners", "we") collects and uses personal data when you use this website, enquire about a villa, stay in one of our villas or receive our emails. We follow Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and, for guests from the European Union, the GDPR.
1. Who is responsible
PT Bali Estate Partners, Jl. Contoh No. 1, Canggu, Kuta Utara, Badung, Bali 80361, Indonesia. Questions about your data: hello@example.com or WhatsApp +6281234567890.
2. What data we collect
- Enquiries and bookings: name, email address, WhatsApp number (optional), travel dates, number of guests and your message.
- Villa owner requests: name, phone number, email address and details about your villa.
- Check-in: full name, nationality, passport number and a photo of your passport. Indonesian law requires accommodation providers to register foreign guests.
- Newsletter: email address, name (if given), language and the date you agreed to receive our emails.
- Guest reviews: name, country, month of stay, rating, review text and email address. Your email address is never published.
- Visitor statistics: pages viewed, the website that sent you, device type and browser language. We do not store IP addresses and do not use tracking cookies. A visitor is counted with an anonymous code that changes every day.
3. Why we use it
- To answer your enquiry and to prepare, confirm and manage your booking (needed for the contract).
- To register guests and keep records required by Indonesian law (legal obligation).
- To send you available villas by email – only if you ticked the box (your consent, which you can withdraw at any time).
- To publish your review – only after you submitted it and we approved it (your consent).
- To keep the website secure, stop spam and understand which pages are useful (legitimate interest).
We never sell your personal data.
4. Who receives your data
- WhatsApp (Meta) – when you choose to contact us on WhatsApp.
- Our email service – to send booking emails and the newsletter.
- Our hosting provider – which stores the website and its database.
- Cloudflare – checks review forms for spam (Turnstile).
- The owner of the villa you book – your name and dates of stay, so they know who is staying.
- Government authorities – for example immigration guest registration, when the law requires it.
Some of these providers process data outside Indonesia. We only use providers that protect personal data to a standard comparable to Indonesian law.
The website also loads map tiles from OpenStreetMap and fonts from Bunny Fonts; these services receive your IP address when the page loads, as for any website.
5. How long we keep it
- Enquiries that did not lead to a booking: up to 2 years.
- Booking and payment records: as long as Indonesian tax and accounting law requires.
- Passport photos: no longer than needed for guest registration, and deleted at the latest 12 months after check-out.
- Newsletter: until you unsubscribe.
- Visitor statistics: 13 months.
6. Your rights
You can ask us at any time to tell you which data we hold about you, to correct or complete it, to delete it, to stop or limit using it, to send it to you in a common format, or to withdraw your consent. You can also object to how we use it. Send your request to hello@example.com; we answer within the time limits set by law. If you are not satisfied, you may complain to the Indonesian data protection authority (or, in the EU, to your local data protection authority).
Every newsletter contains an unsubscribe link that works with one click.
7. Cookies and storage on your device
We only use cookies that are needed for the website to work (keeping your language, currency and form security). Your favourite villas and light/dark mode choice are saved in your own browser and are not sent to us. We do not use advertising or tracking cookies.
8. Security
Data is sent over an encrypted connection. Passport photos are stored in a private area that is not reachable from the internet, and only our team can access the admin panel with personal accounts.
9. Changes
We may update this policy. The date at the top shows the latest version.