Privacy Policy

This policy explains what personal data PT Tropical Villa Ventures collects when you visit tvvbali.com or book a villa with us, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It is written to meet Indonesia's Personal Data Protection Law (UU PDP) and the EU/UK GDPR, and it describes what our systems actually do — not what a template assumes.

Effective date: 13 October 2026. Version: 2.0, which replaces the earlier policy in full.

Who we are

The data controller is PT Tropical Villa Ventures, which operates the villas and the website tvvbali.com from Bali, Indonesia. Our data protection contact is reachable at management@tvvbali.com, or through our contact form. Use either channel for any privacy request or question.

What we collect, why, and our lawful basis

We only process personal data for the purposes below. Where the basis is consent, you may withdraw it at any time.

Your stay details — name, email address, phone number, address, city, and any special requests you give us. Basis: performance of a contract (UU PDP pelaksanaan kontrak / GDPR Art. 6(1)(b)) — we cannot hold the villa or arrange your stay without them.
Your payment and reservation record — the Invoice Xendit creates, its amount and status, and the Booking Reference that links it to your Reservation. Basis: performance of a contract and, for the financial record, legal obligation (tax and accounting law).
Card details — entered on Xendit's own hosted payment page. They never reach our servers; we only receive the payment result. This keeps us at PCI SAQ A.
Messages you send us — the contents of the contact form and any attachments. Basis: legitimate interest in answering you, or steps towards a contract if you are asking about a stay.
Security and debugging records — if a payment notification cannot be processed, we keep the Invoice id, the Booking Reference, a reason code and a timestamp. These records contain no guest identity. Basis: legitimate interest in keeping the service secure and correct.
Advertising measurement — the Meta Pixel, which tells us which pages and campaigns lead to reservations. Basis: consent. It is described in full below and loads only after you accept.
Website display — Google Fonts and, on our contact page, an embedded Google Map. Basis: legitimate interest in presenting the site, and the map loads only when you open that page.

Who we share it with

We do not sell your data. We share it only with the service providers that make a stay work, and only what each one needs:

Xendit — processes the payment and holds the Invoice, including the guest's name and email used to pay. Acting as our payment processor.
Hostaway — the property management system that holds your Reservation, including the guest details for the stay. Acting as our reservation processor.
Meta — receives advertising measurement events (page views, villa views, "book now" clicks and the value of a confirmed stay) through the Meta Pixel, but only after you consent.
Netlify — hosts the website and runs the serverless functions that create the Invoice and record the Reservation.
Google — serves the fonts used on every page and the map embedded on the contact page.
CloudCannon — the content management system our team edits the website with. It holds no guest data.

We may also disclose data where the law requires it, or to establish or defend legal claims.

How long we keep it

We keep the minimum, and a scheduled job deletes each record when its time is up:

Checkout hand-off (your stay details and special requests, held while we create the Invoice and record the Reservation) — 24 hours, or deleted as soon as the stay is confirmed.
Checkout claim (the Booking Reference and an opaque key holding your dates while you complete checkout) — kept only until the stay is confirmed or the Invoice expires, and in any case no longer than 24 hours.
Security and debugging records (Invoice id, Booking Reference, reason, time — no name or contact details) — 90 days.
Xendit Invoice and Hostaway Reservation — for as long as Xendit and Hostaway keep them under their own policies, and for the period Indonesian tax and accounting law requires us to keep financial records.
Paid-stay alert — if a paid stay ever fails to reach Hostaway, an internal alert records the gap. Your name and contact details are removed from it as soon as the gap is resolved; the dates and amount stay as the audit trail.

Cookies, local storage and the Meta Pixel

We keep this simple, because our site is simple. We use your browser's local storage to carry your villa selection, dates and guest count through checkout — that is strictly necessary for the stay to work, and it stays on your device.

The Meta Pixel is the only advertising technology on the site. When it runs, Meta may set cookies such as _fbp and _fbc and receive the page you viewed, the villa you looked at, a "book now" click, or the value and currency of a completed stay. We use that only to measure our advertising. The Pixel loads only if you accept the banner; if you decline, nothing is sent. You can change or withdraw your choice at any time using the Cookie Settings link in the footer, which deletes the Pixel cookies and stops further events.

International transfers

Some of our providers (including Meta, Netlify and Google) store data outside Indonesia and the EEA, mainly in the United States. Where that happens we rely on the provider's contractual transfer safeguards, such as the European Commission's Standard Contractual Clauses, and we only send the minimum each service needs.

Your rights

Under UU PDP and the GDPR you have the following rights. To use any of them, email management@tvvbali.com or use our contact form. We may ask you to confirm your identity first, and we respond within one month. There is no charge.

Access — a copy of the personal data we hold about you.
Rectification — correction of anything inaccurate or incomplete.
Erasure — deletion of your personal data, except what the law requires us to keep.
Restriction — we pause processing while a dispute about your data is resolved.
Objection — you may object to processing based on legitimate interest, and you may withdraw consent for the Meta Pixel at any time.
Portability — a copy of the data you gave us in a structured, commonly used format, or transfer to another provider where technically possible.

If you are not satisfied with our response, you can complain to Indonesia's data protection authority (Lembaga Pelindung Data Pribadi) or, if you are in the EEA or UK, to your national supervisory authority.

How erasure actually works

We want you to know exactly what will happen, so there are no surprises. When we receive an erasure request, we:

confirm that you are the guest who made the reservation;
delete our own copies straight away — the checkout hand-off, the date holds and the security record for your Booking Reference;
file deletion requests with Xendit and Hostaway for the Invoice and Reservation, keeping only what Indonesian tax and accounting law requires us to keep;
remove your name and contact details from any paid-stay alert; and
confirm to you in writing within one month.

Because Xendit and Hostaway are separate controllers of their own records, we cannot delete their copies ourselves — we file the request and follow it up.

Children

Our website and reservations are intended for adults. We do not knowingly collect personal data from children, and stays must be booked by someone aged 18 or over. If you believe a child has given us their data, contact us and we will delete it.

Changes to this policy

If we change how we handle personal data, we will update this page and its version and effective date. Questions about anything here are always welcome at management@tvvbali.com.