Privacy Policy
Draft placeholder copy — this policy has not yet been reviewed or approved by legal counsel and must be replaced before public launch.
This Privacy Policy explains how Bali Luxury Stays collects, uses, and protects your personal data when you browse this site or book a villa with us. We operate from Canggu, Bali, Indonesia, and process data in connection with our villa booking and guest services.
What data we collect
When you make a booking we collect the personal details you provide at checkout: your name, email address, phone number, and country. Payments are processed by our payment service provider, Xendit. We do not store your full card details on our systems; card data is handled directly by Xendit. We also collect limited analytics and cookie data, subject to your consent where required.
How we use your data
We use your data to process and confirm your booking, send you booking confirmations and related communications, provide guest support, and manage your reservation. Your booking is charged 100% upfront in Indonesian Rupiah (IDR) via Xendit. We may display price estimates in other currencies for convenience, but your card statement will reflect the actual charge in IDR.
Legal basis & consent
We process your booking data because it is necessary to fulfil your reservation and provide the services you request. Visitors in the European Economic Area (EEA) are shown a cookie consent banner and can choose whether to allow non-essential cookies and analytics. Where consent is required, we rely on the consent you provide through that banner.
Third parties we share data with
We share data with service providers who help us run our business: Xendit processes payments, Hostaway is used for reservation management, Resend delivers our transactional emails, and analytics providers help us understand site usage (subject to consent). These providers process your data on our behalf and in line with their own terms.
Data retention
Personal data associated with a payment intent is retained for approximately 30 days and then purged. Reservation records may be retained longer where required to manage your stay or to meet legal and accounting obligations.
Your rights
You can request access to, correction of, or deletion of the personal data we hold about you. To make a request, contact us at [email protected] and we'll respond within a reasonable time.
Cookies
We use cookies to keep the site working, remember your preferences, and (where you consent) to measure how the site is used. EEA visitors can manage their cookie preferences through the consent banner. You can also control cookies through your browser settings.
Contact us
If you have questions about this policy or how we handle your data, contact us by WhatsApp at +62 823 4003 6461 or by email at [email protected]. Our operator is based at Jl. Subak Canggu No.2, Kabupaten Badung, Bali 80361, Indonesia. This policy is governed by the laws of Indonesia.
Last updated: pending publication