Privacy Policy

This site is operated by CV Hospitality Bali, a villa rental and management business based in Bali, Indonesia. In this policy "we", "us" and "our" mean CV Hospitality Bali.

Our address is Jalan Raya Canggu no 77, Br Kayu Tulang - Canggu - Kuta Utara Badung Bali. You can reach us about anything in this policy at [email protected].

We handle personal data under Indonesia's Personal Data Protection Law (UU No. 27 of 2022). If you are in the European Economic Area or the United Kingdom, we also honour the access, correction, deletion and objection rights described below.

We collect only what a booking or an enquiry actually needs.

• Account details — your name, email address and, if you add one, a phone number. If you sign in with Google we receive your name, email address and profile picture from Google; we never receive your Google password.
• Booking details — the villa and dates you choose, the number of guests, the total price, your chosen payment method, and any note you add for the host.
• Messages — whatever you write in the contact form, in a review, or in a WhatsApp message you start from this site.
• Technical data — your browser's IP address and user agent, recorded by our server and our hosting provider as part of serving the page.

We do not ask for your passport, identity document, or date of birth anywhere on this site.

We do not collect or store card numbers. This site takes no card payments: a booking is confirmed by bank transfer arranged directly with us, so no card details are ever entered here, and there is no stored card data for anyone to lose.

• To hold, confirm and manage the booking you asked for.
• To email you about that booking — the request, its confirmation, payment details, a reminder before the hold expires, arrival information, and an invitation to review your stay afterwards.
• To reply to an enquiry you sent us.
• To keep your account working, including signing you in and remembering your saved villas.
• To publish a review you choose to write, under the name you give.
• To understand how the site is used in aggregate, so we can improve it.
• To meet our legal and tax obligations in Indonesia.

We do not sell your personal data, and we do not send marketing email to guests who have not asked for it.

We share personal data only with the services that make this site work, and only with what they need:

• Our email provider, which delivers the booking and account emails we send you.
• Our hosting and storage providers, which run the site and store its images.
• The villa's owner or on-site team, who receive the details needed to prepare for your stay.
• Analytics, where enabled, which measures site usage. Map tiles on villa pages are served by a third-party map provider, which will see your IP address when the map loads.
• WhatsApp, if you choose to start a chat from this site — that conversation is carried by WhatsApp under its own privacy policy, not ours.

Some of these providers operate outside Indonesia, so your data may be processed abroad. We share data with authorities only where the law requires it, and we would share it in connection with a sale or reorganisation of the business only if the recipient agreed to honour this policy.

We use a small number of cookies, and no advertising cookies:

• A sign-in cookie, which keeps you signed in to your account.
• Preference cookies, which remember your chosen currency and your last search dates and guest count, so you don't retype them.
• Analytics cookies, where analytics is enabled, which count visits.

You can clear or block cookies in your browser settings. Blocking the sign-in cookie will stop you from staying signed in.

We keep booking records for as long as Indonesian tax and accounting rules require. Account details are kept until you delete your account, which you can do yourself from your account page. Published reviews stay published unless you ask us to remove one. Enquiry messages are kept while we deal with them and for a reasonable period afterwards.

The whole site is served over HTTPS, so what you send us is encrypted in transit. Passwords are stored hashed, never in readable form, and the admin area is restricted to named staff accounts. No system is perfectly secure, but we do not hold the category of data — card numbers — that makes a breach most damaging.

You can ask us to:

• show you the personal data we hold about you;
• correct it if it is wrong;
• delete it, where we are not required to keep it;
• stop using it for a particular purpose;
• send you a copy in a portable form;
• withdraw a consent you previously gave.

Write to [email protected] and we will respond. You can also delete your account yourself at any time from your account page.

This site is not intended for children, and we do not knowingly collect personal data from anyone under 18. Children can of course be included as guests on a booking made by an adult; we collect only the number of guests and their age bracket, not their personal details.

We may update this policy as the site changes. The date at the top of this page shows when it was last revised, and material changes will be announced on this page. This version is dated 3 September 2026.

For any question about this policy, or to make a request about your data, contact CV Hospitality Bali at [email protected], or write to us at Jalan Raya Canggu no 77, Br Kayu Tulang - Canggu - Kuta Utara Badung Bali.