01Who We Are
Umani Bali ("we", "us", "our") provides villa stays, property management for villa owners, and in-villa concierge services in Bali. We respect your privacy and are committed to protecting your personal data.
This policy is issued by Umani Hosting, Bali, Indonesia, which acts as the data controller for the personal data described below. It applies to umanibali.com, to bookings made directly with us or through online travel platforms, and to any communication you have with us by email, WhatsApp, phone or social media.
We process personal data in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022, "UU PDP") and other applicable regulations. If you are located outside Indonesia, the data protection laws of your own country may also give you rights, which we respect.
02Information We Collect
Information you give us directly
- Guest booking data: full name, email address, phone number, nationality, number of guests, arrival and departure dates, and special requests.
- Identification data: passport details and copies, where required under Indonesian guest registration regulations.
- Payment data: billing details and transaction records. Card numbers are handled by our payment providers and are never stored on our servers.
- Property owner data: name, contact details, property address and details, bank account information for revenue transfers, and ownership or licence documents.
- Correspondence: messages you send us by email, WhatsApp, contact forms or social media.
- Concierge requests: dietary requirements, event preferences, transfer details and similar information needed to arrange services you ask for.
Information collected automatically
- IP address, browser type and version, device type and operating system.
- Pages viewed, time spent on pages, referring website and navigation path.
- Cookie and similar tracking data (see Cookies & Tracking).
Information from third parties
- Booking data forwarded to us by online travel platforms such as Airbnb, Booking.com and Agoda when you reserve through them.
- Payment confirmations from our payment processors.
Health and dietary information. We only collect this when you volunteer it so we can accommodate a request, for example an allergy you share with our private chef service. We use it solely for that purpose and delete it after your stay.
03How We Use Your Information
We use your personal data only for the purposes below, each with a lawful basis for processing:
| Purpose | Legal basis |
|---|---|
| Processing and confirming your booking | Performance of a contract |
| Arranging concierge and in-villa services you request | Performance of a contract |
| Processing payments and issuing invoices | Performance of a contract |
| Managing owner relationships and revenue reporting | Performance of a contract |
| Guest registration with Indonesian authorities | Legal obligation |
| Tax records and financial reporting | Legal obligation |
| Responding to enquiries and customer support | Legitimate interest |
| Preventing fraud and protecting our properties | Legitimate interest |
| Website analytics and improving our services | Consent / Legitimate interest |
| Marketing emails and promotional offers | Consent |
We do not sell your personal data, and we do not use it for automated decision-making or profiling that produces legal effects.
04Who We Share Your Data With
We share personal data only where necessary, and only with:
- Villa owners: limited guest details required to fulfil your stay.
- Service providers: housekeeping teams, private chefs, massage therapists, drivers, rental operators and event vendors, who receive only what they need to deliver the service you booked.
- Payment processors: to process transactions securely.
- Online travel platforms: where your booking originated with them.
- Technology providers: website hosting, maintenance, email, CRM and analytics services, bound by confidentiality obligations.
- Professional advisors: accountants, auditors and lawyers where required.
- Government authorities: where disclosure is required by Indonesian law, including guest registration and tax obligations.
05International Data Transfers
Our operations are based in Indonesia. If you are located in the European Economic Area, the United Kingdom or another jurisdiction with data transfer restrictions, please note that your data will be transferred to and processed in Indonesia.
Some of the technology services we use may store data on servers outside Indonesia. Where transfers take place, we take reasonable steps to make sure your data receives a level of protection equivalent to this policy and to UU PDP.
06How Long We Keep Your Data
| Data type | Retention period |
|---|---|
| Booking and guest records | 7 years (tax and legal requirements) |
| Financial and payment records | 10 years (Indonesian accounting law) |
| Passport copies | Deleted once the regulatory retention period expires |
| Dietary and health preferences | Deleted after your stay concludes |
| Marketing contact data | Until you withdraw consent |
| Website analytics data | Up to 26 months |
| Owner management records | 7 years after the contract ends |
When a retention period ends, we delete the data or anonymise it so it can no longer identify you.
07Cookies & Tracking
Our website uses cookies to function properly and to help us understand how visitors use it.
- Essential cookies: required for site functionality, booking forms and security. These cannot be disabled.
- Analytics cookies: help us measure traffic and improve the site. We use Google Analytics.
- Marketing cookies: may be used to show relevant advertising on other platforms.
- Preference cookies: remember your language and display settings.
You can manage or disable cookies in your browser settings at any time. Disabling essential cookies may stop parts of the site from working correctly.
08Your Rights
Under UU PDP, and depending on where you live, you may have the right to:
- Be informed about how and why we process your personal data.
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data, where no legal obligation requires us to keep it.
- Object to, or request restriction of, certain processing.
- Request a portable copy of data you provided to us.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with the relevant data protection authority.
To exercise any of these rights, contact us using the details in Contact Us. We may ask you to verify your identity first, and we will respond within the time limits set by applicable law.
09Data Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (SSL), access controls that limit staff access to what is necessary, secure payment processing through certified providers, and regular security reviews.
No method of transmission over the internet is completely secure. While we work hard to protect your data, we cannot guarantee absolute security. If a personal data breach affects you, we will notify you as required by UU PDP.
10Children's Privacy
Our services are not directed at children under 18. We do not knowingly collect data from children except as part of a booking made by a parent or guardian. If you believe we have collected a child's data inappropriately, please contact us and we will delete it.
11Third-Party Links
Our website may link to third-party sites, including booking platforms and partner services. We are not responsible for their content or privacy practices, and we encourage you to read their policies.
12Changes to This Policy
We may update this policy from time to time. The revised version will be posted on this page with a new "last updated" date. Significant changes affecting your rights will be communicated directly where we hold your contact details.
13Contact Us
For any questions about this policy, or to exercise your data rights, contact Umani Hosting:
Umani Hosting
Bali, Indonesia
14Website Technical Issues
Website design and SEO for umanibali.com are handled by Core Freelancers, a digital marketing and web development agency. If you run into a technical problem on this website, you can report it to them directly.
Core Freelancers
Let Core Freelancers know if you experience:
- Pages that won't load, errors or broken links
- Booking or contact forms that fail to send
- Layout problems on a particular device or browser
- A suspected security issue on the website
For anything about your bookings or personal data, please contact Umani directly using the details above.
Website design & SEO by Core Freelancers, providers of website design and SEO services for umanibali.com.