Privacy policy

Who we are

Spacious Bali manages private villas across Bali, Indonesia. This policy explains what personal data we collect through spaciousbali.com, why we collect it, and the choices you have.

Spacious Bali is a trading name of a company registered in Indonesia and is the controller of the personal data described here. Our registered address is Jl. Pemelisan Agung, Tibubeneng, Kec. Kuta Utara, Kabupaten Badung, Bali 80361, Indonesia. Full company registration details are available on request.

For anything about your data — a copy of what we hold, a correction, deletion, or withdrawing a consent you gave us — write to hello@spaciousbali.com. We answer within 30 days.

What we collect

Booking details. When you book one of our villas, whether directly, through Airbnb, or through Booking.com, we receive the reservation details we need to host you: your name, contact details, party size and stay dates. This flows through Hostaway, the booking platform we use to manage reservations.

Messages you send us. If you use a contact or villa registration form on this site, we keep what you submit: typically your name, email address, phone or WhatsApp number, and your message.

Concierge requests. Our concierge works over WhatsApp. When you tap a WhatsApp button on this site we record which service you were interested in, the villa or reservation the request relates to, the time, and basic technical details of your browser. The conversation itself happens on WhatsApp and is governed by WhatsApp's own terms.

Supplier applications. If you apply to become a concierge supplier, we keep what you submit: your business and contact name, WhatsApp number, email, website, the services and areas you cover, your prices, the agreement you sign (including your typed signature and the IP address it was signed from), and any brochures or price lists you upload.

Cookies. If you arrive through a link in a booking message or scan a code at your villa, we set a small cookie so your concierge requests connect to your stay. Because guests often book months ahead, it can last up to about a year. Staff who sign in to our admin area get a session cookie. With your agreement we also use Google Analytics 4 to understand how the site is used; it sets its own cookies and Google processes that data under its own privacy terms. Analytics only loads if you accept, and you can change your mind at any time (see “Your cookie choice” below).

Technical logs. Like any website we process the IP address and browser details of requests, which we use to keep the site available and to limit abuse of our forms. These logs are short-lived and are not used to build a profile of you.

Your cookie choice

Essential cookies always run: without them the site cannot connect your concierge request to your stay or keep staff signed in. Analytics is optional and off until you accept it. You can turn it on or off here at any time, and your choice is remembered in this browser.

How we use it

To host your stay, arrange the services you ask for, respond to your messages, meet our legal obligations as an accommodation provider in Indonesia, and improve the site. We do not sell your data, and we do not send marketing you have not asked for.

Who we share it with

Only what a job requires. Our drivers and service suppliers get the details needed to deliver what you booked, such as a name and pickup time. Our systems run on established providers (Hostaway for bookings, Supabase for our database, Vercel for hosting, Resend for the emails we send, and Google Analytics if you accept analytics cookies), each bound by their own data protection terms. Booking platforms such as Airbnb and Booking.com process your data under their own policies when you book through them. We share data with authorities only where the law requires it.

Where your data is processed. These providers operate outside Indonesia, so your personal data is stored and processed abroad, including in the United States and the European Union. We only use providers that commit to protecting it under their own data protection terms, and we do not transfer your data anywhere else without a legal basis.

How long we keep it

Booking records are kept as long as accounting and legal rules require. Form submissions and concierge request logs are kept while they are useful for running the business, then removed.

Your rights

You can ask us what personal data we hold about you, ask us to correct it, or ask us to delete it where we have no legal duty to keep it. Email hello@spaciousbali.com and we will respond within 30 days. Depending on where you live, these rights may be backed by Indonesia's Personal Data Protection Law, the GDPR, or similar laws.

Changes

If this policy changes, the date at the top changes with it. Significant changes will be flagged on this page. For anything this page does not answer, contact us.