Privacy Policy
This Privacy Policy explains how we collect, use, and protect your personal data when you visit fourelementsvillas.com (the “Site”) or use our booking services, and what rights you have. We comply with the EU General Data Protection Regulation (GDPR) and Indonesia’s Personal Data Protection Law (UU PDP).
1. Who is responsible (Controller)
PT. ISLAND PARADISE PROPERTIES
Jl. Katik Lantang, Singakerta, Kecamatan Ubud, Kabupaten Gianyar, Bali 80571, Indonesia
Email: stay@fourelementsvillas.com
Phone/WhatsApp: +62 822-5968-1056
We have not appointed a Data Protection Officer, as we are not legally required to do so. For any privacy matter, contact us at the address above. Our legal notice (Imprint) is available here.
2. What data we collect
a) Booking & enquiry data (you provide)
First and last name, email address, phone number, nationality, messaging-app handles (e.g. WhatsApp/WeChat) if you provide them, your selected villa, check-in/check-out dates, number of guests and children’s ages, and any special requests or messages.
b) Payment data
Your payment is processed by our payment provider Xendit. We do not receive or store your card details on our servers — we only receive the payment status (paid/unpaid) and a reference.
c) Technical data (collected automatically)
When you visit the Site, our hosting provider records server log data such as IP address, browser type, device type, pages viewed, referring page and access timestamps. This is needed to deliver and secure the website.
d) Cookies & analytics data
Only after your consent — see Sections 6 and 7.
3. Why we use your data & legal bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Process enquiries, bookings, communication before/during/after your stay | Performance of a contract — Art. 6(1)(b) |
| Issue invoices; comply with tax/accounting obligations | Legal obligation — Art. 6(1)(c) |
| Operate, secure and maintain the website (server logs) | Legitimate interests — Art. 6(1)(f) |
| Analytics cookies (Google Analytics, Microsoft Clarity) | Consent — Art. 6(1)(a) + §25 TDDDG |
| Optional marketing emails (if you subscribe) | Consent — Art. 6(1)(a) |
4. Who we share data with (Processors & recipients)
We do not sell or rent your personal data. We share it only with service providers who process it on our behalf under data-processing agreements, and only as needed:
- Vercel Inc. (USA) — website & booking-system hosting
- Hostinger — email hosting (our @fourelementsvillas.com mailbox)
- Neon Inc. — database hosting (data stored in Singapore)
- Xendit (Indonesia) — payment processing
- Resend Inc. (USA) — sending booking confirmation emails
- Google Ireland Ltd. / Google LLC (USA) — Google Tag Manager & Google Analytics
- Microsoft Corporation (USA) — Microsoft Clarity
- Airbnb / Booking.com — calendar synchronisation (only blocked dates are exchanged; no guest data)
- Our villa staff — to prepare and manage your stay
- Authorities — only where legally required
5. International data transfers
Your data may be processed in Indonesia, Singapore and the United States. For transfers to the USA (Google, Microsoft, Vercel, Resend), we rely on the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses as appropriate safeguards under GDPR Chapter V.
6. Cookies & consent
We use a consent banner with Google Consent Mode v2: analytics and tracking are set to “denied” by default and load only after you accept. You can withdraw or change your choice at any time via the cookie settings on the Site. Strictly necessary storage works without consent because it is essential for the Site to function.
| Name | Provider | Purpose | Type / Duration |
|---|---|---|---|
| fev-consent | Four Elements Villas | Stores your cookie choice | Necessary · localStorage |
| fev-lang | Four Elements Villas | Remembers your language | Necessary · localStorage |
| fev_admin | Four Elements Villas | Admin login session (staff only) | Necessary · session |
| _ga, _ga_* | Google Analytics | Distinguish users / sessions | Consent · up to 2 years |
| _clck, _clsk | Microsoft Clarity | Usage analytics & session replay | Consent · 1 year / 1 day |
7. Analytics tools
After consent, we use:
- Google Analytics 4 (via Google Tag Manager) — to understand traffic and how the Site is used. Data is transferred to Google (USA); IP addresses are processed in truncated form. We retain GA4 data for 14 months.
- Microsoft Clarity — heatmaps and session recordings to improve usability. Keystrokes and form inputs are masked by default. Data is processed by Microsoft (USA).
You can withdraw consent at any time; this does not affect processing carried out before withdrawal.
8. How long we keep your data
- Enquiry data: up to 12 months after your enquiry/stay, then deleted or anonymised.
- Booking & invoice data: retained as required by tax and accounting law (up to 10 years).
- Analytics data: 14 months (Google Analytics).
- Server logs: a short period for security, then deleted.
9. Your rights
Under the GDPR you have the right to: access your data; request rectification or erasure; restrict or object to processing; data portability; and withdraw consent at any time. To exercise any right, contact stay@fourelementsvillas.com.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, place of work, or the place of the alleged infringement.
10. Links to third-party platforms
Our Site contains links to external platforms such as Instagram, Google Maps and WhatsApp. Clicking them takes you off our Site; we are not responsible for their content or privacy practices. Please review their own privacy policies.
11. Children
Our services are intended for adults; bookings must be made by persons aged 18 or older. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
12. Data security
We use appropriate technical and organisational measures (encryption in transit, access controls) to protect your data. However, no internet transmission or storage is 100% secure.
13. Changes to this policy
We may update this Privacy Policy from time to time. The current version with its “Last updated” date always applies and is published on this page.
14. Contact
PT. ISLAND PARADISE PROPERTIES · Jl. Katik Lantang, Singakerta, Ubud, Gianyar, Bali, Indonesia
Email: stay@fourelementsvillas.com · Phone/WhatsApp: +62 822-5968-1056
Imprint: impressum.html