Legal

Privacy Policy

Last updated: 09/09/2026

Umani Bali ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This policy explains what information we collect when you visit umanibali.com, book a villa, enquire about our property management services, or use our in-villa concierge services — and how we handle it.

This policy is issued by Umani Hosting, registered at, Bali, Indonesia. We act as the data controller for the personal data described below.

1. Information We Collect

Information you give us directly

• Guest booking data: full name, email address, phone number, nationality, number of guests, arrival and departure dates, and special requests.
• Identification data: passport details and copies, where required under Indonesian guest registration regulations.
• Payment data: billing details and transaction records. Card numbers are processed by our payment providers and are never stored on our servers.
• Property owner data: name, contact details, property address and details, bank account information for revenue transfers, and ownership or licence documentation.
• Correspondence: messages sent to us via email, WhatsApp, contact forms, or social media.
• Concierge service requests: dietary requirements, event preferences, transfer details, and similar information needed to arrange services you request.

Information collected automatically

• IP address, browser type and version, device type, and operating system.
• Pages viewed, time spent on pages, referring website, and navigation paths.
• Cookie and similar tracking data (see Section 6).

Information from third parties

• Booking data forwarded to us by online travel platforms such as Airbnb, Booking.com, and Agoda when you reserve through them.
• Payment confirmation data from our payment processors.

2. How We Use Your Information

We do not sell your personal data, and we do not use it for automated decision-making or profiling that produces legal effects.

3. Who We Share Your Data With

We share personal data only where necessary, and only with:

• Villa owners: limited guest details required to fulfil your stay.
• Service providers: housekeeping teams, private chefs, massage therapists, drivers, rental operators, and event vendors — receiving only the information needed to deliver the service you booked.
• Payment processors: to process transactions securely.
• Online travel platforms: where your booking originated with them.
• Technology providers: website hosting, email, CRM, and analytics services operating under data processing agreements.
• Professional advisors: accountants, auditors, and lawyers where required.
• Government authorities: where disclosure is required by Indonesian law, including guest registration and tax obligations.

4. International Data Transfers

Our operations are based in Indonesia. If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with data transfer restrictions, please note that your data will be transferred to and processed in Indonesia.

Where such transfers occur, we rely on appropriate safeguards including Standard Contractual Clauses with our processors, and we take reasonable steps to ensure your data receives an equivalent level of protection.

5. How Long We Keep Your Data

6. Cookies and Tracking

Our website uses cookies to function properly and to help us understand how visitors use it.

• Essential cookies: required for site functionality, booking forms, and security. These cannot be disabled.
• Analytics cookies: help us measure traffic and improve the site. We use Google Analytics.
• Marketing cookies: may be used to show relevant advertising on other platforms.
• Preference cookies: remember your language and display settings.

You can manage or disable cookies through your browser settings at any time. Disabling essential cookies may prevent parts of the site from working correctly.

7. Your Rights

Depending on your location, you may have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, where no legal obligation requires us to keep it.
• Object to or request restriction of certain processing.
• Request a portable copy of data you provided to us.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details below. We will respond within 30 days. We may ask you to verify your identity before acting on a request.

8. Data Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections (SSL), access controls limiting staff access to what is necessary, secure payment processing through certified providers, and regular security reviews.

No method of transmission over the internet is completely secure. While we work hard to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Our services are not directed at children under 18. We do not knowingly collect data from children except as part of a booking made by a parent or guardian. If you believe we have collected a child's data inappropriately, please contact us and we will delete it.

10. Third-Party Links

Our website may link to third-party sites, including booking platforms and partner services. We are not responsible for their privacy practices and encourage you to read their policies.

11. Changes to This Policy

We may update this policy from time to time. The revised version will be posted here with an updated date. Significant changes affecting your rights will be communicated directly where we hold your contact details.