Privacy Policy

How Balitecture Realty handles your personal data

Effective date: [DATE] · Version 1.0 (draft)

This Privacy Policy explains how Balitecture Realty ("we", "us", "our") collects, uses, discloses and protects personal data when you use balitecturerealty.com (the "Site") or contact us. We are the data controller for the purposes of applicable data-protection law.

1. Who we are & how to contact us

Controller: Balitecture Realty. Address: Jl. Pemelisan Agung, Tibubeneng, Kuta Utara, Badung 80361, Indonesia. Email: hello@balitecture.com. WhatsApp: +62 811 3909 045. For privacy matters or to exercise your rights, contact hello@balitecture.com.

2. The personal data we collect

• Enquiry & contact data: name, email, phone/WhatsApp, the listing or service you ask about, and the content of your message, when you use an enquiry form, email us, message us on WhatsApp, or request a viewing.
• Marketing data: email address and preferences if you subscribe to our newsletter or market reports.
• Transaction & due-diligence data: information needed to progress a purchase, lease or rental, which may include identity and KYC information collected by us or our legal partners.
• Property owner/seller data: if you list a property with us, we hold your contact details and information about the property; this is held internally and is not published.
• Technical & usage data: IP address, device and browser type, approximate location, pages viewed and interactions, collected via cookies and analytics (see our Cookie Policy).

3. How we use your data & our legal bases

We use personal data to: respond to your enquiries and arrange viewings; provide brokerage, rental and related services; process transactions and meet legal/KYC obligations; send marketing where you have consented; operate, secure and improve the Site; and analyse usage. Depending on the activity, our legal basis is performance of a contract or steps prior to a contract, our legitimate interests (running and improving our business and responding to you), your consent (marketing and non-essential cookies/analytics), or compliance with a legal obligation.

4. Cookies & analytics

We use cookies and similar technologies, including Google Analytics (GA4). Non-essential and analytics cookies are only set after you consent via our cookie banner (Google Consent Mode v2). See our separate Cookie Policy for the full list and how to manage your choices.

5. Who we share data with

We share personal data with: our staff and assigned agents on a need-to-know basis; our sister companies where relevant to your request (Balitecture — architecture & construction; Spacious Bali — villa management); property owners/developers in order to progress an enquiry; professional advisers (e.g. notaries, legal, KYC); and service providers acting as our processors. We do not sell your personal data.

Key processors / sub-processors include: Google (analytics), Vercel (hosting), Supabase (database/auth), Cloudflare (CDN, storage, security), Brevo (marketing email), Resend (transactional email), and Meta/WhatsApp (messaging). Each is engaged under terms requiring appropriate safeguards.

6. International transfers

We operate from Indonesia and use service providers that may store or process data outside Indonesia and outside the EEA/UK. Where data is transferred internationally we rely on appropriate safeguards (such as the provider's standard contractual clauses and security measures).

7. How long we keep data

We keep personal data only as long as necessary for the purpose it was collected, to provide our services, and to meet legal, tax and regulatory obligations, after which it is deleted or anonymised. Enquiry data is kept for as long as needed to handle your enquiry and any resulting relationship; transaction and due-diligence records for the period required by Indonesian tax and anti-money-laundering law; marketing data until you unsubscribe.

8. Your rights

Subject to applicable law (Indonesia's PDP Law and, for EEA/UK individuals, the GDPR), you may have the right to: access your data; correct inaccurate data; request erasure; restrict or object to processing; withdraw consent at any time (without affecting prior processing); data portability; and to lodge a complaint with a supervisory authority. To exercise any right, contact hello@balitecture.com. EEA/UK residents may also complain to their local data-protection authority.

9. Security

We use technical and organisational measures to protect personal data, including encryption in transit and at rest, strict access controls, field-level restriction of confidential owner data, logging and monitoring. No method of transmission or storage is completely secure; we work to protect your data but cannot guarantee absolute security. See our Security & Privacy hardening standards for detail.

10. Children

The Site is intended for adults and is not directed at children. We do not knowingly collect data from anyone under 18 (or the age of majority in their jurisdiction).

11. Third-party links

The Site links to third-party sites (including balitecture.com and spaciousbali.com, social media, and external resources). We are not responsible for their privacy practices; please review their policies.

12. Changes to this policy

We may update this policy from time to time. The current version and its effective date are shown at the top. Material changes will be notified as required by law.