Legal

Privacy policy

Last updated 5 May 2026

Who we are

Maison Ulu is the controller of personal data submitted via this website. Bali Super Host (BSH) is a co-processor responsible for booking operations and payment handling. Contact for privacy matters: [email protected].

What data we collect

  • Identification: name, email, phone, country.
  • Booking data: dates, guest count, special requests.
  • Payment data: handled by BSH and their payment processor — we never see card details.
  • Browsing data: Google Analytics 4 (anonymised IP, no cross-site tracking) and basic server logs (IP truncated, retained 30 days).

Why we collect it

To process bookings, communicate with guests, comply with legal and tax obligations, and improve the service.

Legal basis

GDPR Art. 6(1)(b) (contract necessity) for booking data; Art. 6(1)(a) (consent) for marketing; equivalent provisions under Indonesia's Personal Data Protection Law (UU PDP).

Who we share with

  • Bali Super Host — operations and payments.
  • The Indonesian tax authority where required by law.
  • Our email service provider (Google Workspace / Resend) for transactional and marketing email.
  • Google (GA4) for anonymised analytics.

We do not share data with advertising networks, data brokers, or third-party marketers.

International transfers

Personal data may be processed in Indonesia, the European Union, and the United States via service providers. Standard Contractual Clauses or equivalent legal mechanisms are in place.

Retention

  • Booking data: 7 years (Indonesian tax law).
  • Marketing list: until you unsubscribe.
  • Anonymised analytics: 14 months.

Your rights

You have the right to access, correct, delete, restrict processing of, port, or object to the processing of your personal data. To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the data-protection authority in your jurisdiction.

Cookies

See our cookie policy.

Changes

We post material updates here and email anyone on our marketing list.

This policy is a working template and will be reviewed before the website goes live publicly.