Privacy & Cookies Policy

Last updated: 13 September 2026

This Privacy & Cookies Policy explains how personal data is handled when you visit bosobalivillas.com, contact us through the website, or use the external booking service linked from the website.

1. Who is responsible for your data?

The controller of personal data submitted through this website is:

We refer to this controller below as “BOSO”, “we”, “us” or “our”.

2. Website enquiries and reservations are handled separately

BOSO handles messages sent through the contact form and direct enquiries sent to the email address or telephone number displayed on this website.

Reservations are managed by Balinest Villas through the Guesty booking platform. When you select “Book Now”, you leave this website and enter an external booking environment. Information submitted there is handled under the operator’s Booking Terms and Booking Privacy Policy. Please review those documents before making a reservation.

3. Personal data we collect

Depending on how you use the website, we may collect:

  • Contact and enquiry data: your name, email address, telephone number, message, preferred dates and any other information you choose to provide.
  • Technical and security data: IP address, browser and device information, date and time of access, requested URLs, error records and basic server logs.
  • Consent data: your cookie choices and information needed to remember or demonstrate those choices.

Please do not include sensitive personal data in the contact form unless it is genuinely necessary for your request.

4. Why we use personal data and our legal bases

  • To answer an enquiry and take steps requested by you before a possible stay or other agreement — performance of a contract or steps before entering into a contract.
  • To operate, secure, troubleshoot and improve the website and prevent abuse — our legitimate interests in maintaining a safe and functional website.
  • To meet accounting, tax, regulatory or other legal requirements — compliance with a legal obligation.
  • To load optional cookies or external services — your consent, where consent is required.

These legal bases apply where the EU/EEA or UK data protection rules are relevant. Where Indonesian law applies, we process personal data in accordance with Indonesia’s Personal Data Protection Law and other applicable requirements.

5. Who may receive your data?

We may share personal data only as necessary with website hosting, email, maintenance, security and contact-form providers acting for us; professional advisers or authorities where required by law; and Balinest Villas or Guesty when you choose to use the external booking flow or ask us to pass on a booking-related request.

Some optional website resources may be provided by third parties such as Google Fonts or Adobe Fonts. Where required, those services are loaded only after your consent. Their providers may receive technical information such as your IP address and browser data.

We do not sell personal data. At the date shown above, we do not use analytics or advertising cookies on this website.

6. International transfers

BOSO operates in Indonesia, while some technical, email or booking providers may operate in the European Economic Area, the United Kingdom, the United States or other countries. Where a transfer is subject to transfer restrictions, the responsible party will use an appropriate legal mechanism or another basis permitted by applicable law. The external booking provider is responsible for the transfers described in its own privacy policy.

7. How long we keep data

  • Website enquiries: normally up to 24 months after the last contact, unless the enquiry results in a booking or a longer period is required for legal claims or compliance.
  • Technical and security logs: normally up to 90 days, unless an incident requires longer retention.
  • Cookie consent records: normally up to 12 months or until you withdraw or renew your choice, and longer only where needed to demonstrate compliance.

8. Your rights

Subject to applicable law, you may request access to your personal data, correction, deletion, restriction of processing, objection to processing, and data portability. You may withdraw consent at any time without affecting processing carried out before withdrawal. You may also complain to the competent data protection authority.

To exercise a right, contact hello@bosobalivillas.com. We may need to verify your identity before responding.

9. Cookies and external services

The website uses necessary technologies to function and to remember your privacy choices. Optional external services are not intended to load until you consent through the cookie banner. You can accept all optional services, reject them, or change your choice at any time using “Cookie settings”.

For the current list of cookies, services, purposes and retention periods, see our Cookie Policy (EU).

10. Security

We use reasonable technical and organisational measures intended to protect personal data. No website or transmission method is completely secure, so please avoid sending unnecessary confidential information through the contact form.

11. Changes to this policy

We may update this policy when the website, providers or legal requirements change. The current version and its update date will always be published on this page.

12. Contact

Questions about this policy or the use of personal data can be sent to hello@bosobalivillas.com.

Reservations are managed by Balinest Villas through Guesty. Booking Terms Booking Privacy