This policy explains what personal information Permata Ayung Private Estate collects about you, how we use it, and the choices you have. It applies to guests, travel agents and visitors to our website.
Who we are
Permata Ayung Private Estate (“Permata Ayung”, “we”, “us”) is located in Bali, Indonesia. We are responsible for the personal information described in this policy.
What personal information do we collect?
- Identity information: your name, nationality, date of birth and passport or other identity document details, collected at check-in
- Contact information: email address, mobile phone number and home address
- Reservation information: dates of stay, room type, number of guests, the names of guests travelling with you, and special requests
- Payment information: payment card or bank transfer details and your billing history with us. Card payments are processed by our payment provider; we do not store full card numbers
- Preferences and health information you choose to share: such as dietary needs, allergies, or information relevant to your massage or spa treatment
- Correspondence: emails, WhatsApp messages and other communication with our team
- Images: CCTV recordings in public areas of the estate, for safety and security [confirm whether CCTV is used]
- Website information: your IP address, device and browser type, and how you use our website (see “Cookies on our website”)
We collect this information from you directly, and from the channels you book through, such as our online booking engine, online travel agencies or your travel agent.
How and why do we use your information?
| Purpose | Basis |
|---|---|
| Taking and managing your reservation, payments and billing | To perform our agreement with you |
| Providing your stay and requested services, such as airport transfers, dining and massages | To perform our agreement with you |
| Registering guests and reporting foreign guests to the authorities | To meet our legal obligations in Indonesia |
| Keeping guests, staff and the estate safe and secure | Our legitimate interests, and to protect vital interests in an emergency |
| Handling questions, feedback and complaints | Our legitimate interests |
| Improving our website and services | Our legitimate interests |
| Sending news and special offers | Your consent, which you may withdraw at any time |
We only use health information you share to provide the service you asked for, such as a safe massage treatment or a suitable meal.
Who do we share your information with?
We do not sell your personal information. We share it only where needed:
- Booking and payment providers: our booking engine and channel manager (SiteMinder), online travel agencies you booked through, and our payment provider
- Service providers: suppliers who help deliver your stay, such as transfer drivers, and our IT and website providers
- Authorities: immigration, police or other government authorities where Indonesian law requires it
- Professional advisors: our lawyers, accountants and auditors, where necessary
We ask everyone who handles your information on our behalf to keep it confidential and secure.
Transfers outside Indonesia: some of our providers, such as our booking engine and online travel agencies, store information outside Indonesia. Where this happens, we take steps to make sure your information remains protected in line with Indonesian data protection law.
Cookies on our website
Our website uses cookies and similar technologies to make the site work, remember your preferences and understand how visitors use it. [List the tools used, for example Google Analytics, Meta Pixel or Google Maps.] You can accept or decline non-essential cookies through the cookie banner, and change your browser settings at any time.
How do we protect and keep your information?
We use physical, technical and organisational measures to protect your information, and only staff who need it can access it.
We keep your information only as long as needed for the purposes above, or as long as Indonesian law requires, for example for tax and accounting records. [Confirm retention periods, such as guest records and CCTV recordings.] After that, we delete it or make it anonymous.
What are your rights?
Under Indonesia’s Personal Data Protection Law (Law No. 27 of 2022), you may ask us to:
- See the personal information we hold about you
- Correct information that is wrong or incomplete
- Delete your information, where we no longer need to keep it
- Stop or limit how we use it
- Withdraw your consent, for example to marketing emails
You can unsubscribe from marketing emails at any time using the link in each email. We will still send messages about your booking. We may ask you to confirm your identity before handling a request.
Contact us
For questions about this policy or your personal information, contact us at reservations@permataayung.com.
Changes to this policy
We may update this policy from time to time. The latest version will always be on our website, with the date it was last updated.