Privacy policy

1. Who we are

Isa Villas Uluwatu (“Isa Villas”, “we”, “us”) runs three private pool villas in Uluwatu, Bali, Indonesia, and this website. The organisation responsible for your personal data is [Legal business name], [Registered address], Indonesia, business registration (NIB) [Business registration number].

For anything about your data, message us on WhatsApp at +61 450 177 118 or email [Contact email].

2. What this policy covers

This policy covers this website, enquiries you send us, and stays you book directly with us. If you book through Airbnb or Booking.com, that platform’s own privacy policy also applies to the information you give it.

3. What we collect

When you visit this website

We do not use cookies, analytics, advertising tools, tracking pixels or social media plugins. Our fonts and scripts are served from our own website, so visiting does not send your information to Google Fonts or other third-party services.

Like every website, ours is delivered by a hosting provider, [Hosting provider], whose servers automatically process technical information needed to show you the pages, such as your IP address, browser type, the pages requested and the time of the request. This may be kept in server logs for a limited period for security and to keep the site running.

When you use the enquiry form

The form asks only for your name and details of your stay. It does not store or send anything from our website. When you press “Continue to WhatsApp”, it opens WhatsApp with your message written out. Nothing reaches us unless you choose to send it there. If you do, we receive your message together with your WhatsApp name and phone number.

When you contact us in other ways

If you message us on WhatsApp, Instagram or by email, we receive what you send us and the contact details attached to that service.

When you stay with us

To arrange and manage your stay we keep the names of guests, contact details, dates of arrival and departure, and the number of guests. Indonesian immigration rules require accommodation providers to report foreign guests, so we ask for passport details for that purpose. If you book directly, payments are handled by [Payment method or provider]; we do not keep full card numbers.

4. Why we use it, and on what basis

• To reply to your enquiry, based on your consent (the box you tick on the form) and on the steps you ask us to take before a booking.
• To arrange and manage your stay, because it is necessary for our agreement with you.
• To meet legal obligations, such as reporting foreign guests to the immigration authorities and keeping tax and accounting records.
• To keep this website secure, based on our legitimate interest in protecting it.

We do not sell your information, use it for advertising, or make decisions about you by automated means.

5. Who we share it with

Only where needed for the purposes above:

• WhatsApp (Meta), when you message us there;
• Airbnb or Booking.com, if you book through them;
• our payment provider, for direct bookings;
• our hosting provider, to run this website;
• Indonesian authorities, when the law requires it;
• professional advisers such as accountants, where necessary.

Each of these handles information under its own terms and the law that applies to it.

6. Transfers outside Indonesia

Some of these services, such as WhatsApp and our hosting provider, may process information outside Indonesia. When that happens we rely on the safeguards the law requires, including Indonesia’s Personal Data Protection Law (Law No. 27 of 2022) and, for visitors from the European Union or the United Kingdom, the safeguards required there.

7. How long we keep it

• Enquiries that do not lead to a stay: deleted within [12 months].
• Booking and guest records: for as long as Indonesian tax, accounting and immigration law requires (tax records generally have to be kept for ten years).
• Server logs: for the limited period set by our hosting provider.

8. Your rights

You can ask us to tell you what information we hold about you, to correct it, to delete it, to limit how we use it, or to give you a copy. You can object to how we use it, and you can withdraw your consent at any time; this does not affect anything we did before you withdrew it. To use any of these rights, contact us using the details in section 1. We will reply within the time limits the law sets.

If you are not happy with how we handle your information, you can complain to the data protection authority in Indonesia or, if you live in the European Union or the United Kingdom, to the data protection authority where you live.

9. Keeping it safe

We take reasonable steps to protect your information. If a data breach affects you, we will tell you and the authorities as the law requires.

10. Children

This website is not directed at children, and bookings must be made by adults.

11. Changes

If we change this policy we will update it here and change the date at the top of the page.