The Guest Society respects your privacy. This Privacy Policy explains what personal data we collect when you use guestsociety.com (the “Website”), contact us, join our membership or apply for a job, how we use it, and the choices you have. It is written to comply with Indonesia’s Personal Data Protection Law (Law No. 27 of 2022) and, where it applies to you, the EU and UK General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The data controller is [PT company legal name] (“The Guest Society”, “we”, “us”), Jl. Pemelisan Agung, Tibubeneng, Kec. Kuta Utara, Kab. Badung, Bali 80361, Indonesia. For any privacy question or request, contact us at info@guestsociety.com.
2. What we collect
Information you give us
- Enquiries: your name, email address and message when you use our contact or “Work with us” forms or email us;
- Membership: the details you provide when you register or sign in, such as your name, email address and stay preferences;
- Job applications: your CV, cover letter and any other information you choose to send us;
- Consents: your agreement to receive communications from us, where you give it.
Information collected automatically
- technical data such as your IP address, browser type, device and operating system;
- usage data such as the pages you visit and how long you stay, collected through cookies and similar technologies (see section 7).
Bookings
Room reservations are made on the secure website of our booking engine partner. Your booking and payment details are collected by that partner and the property you book, and are handled under their privacy policies. We receive the booking information we need to prepare for your stay.
3. How we use your data
- to reply to your enquiries and provide the services you ask for;
- to manage your membership and give you member benefits;
- to consider your job application and contact you about it;
- to send you news and offers, only where you have agreed and with an easy way to unsubscribe;
- to operate, secure and improve the Website;
- to meet our legal and accounting obligations.
4. Legal basis
We process your personal data because you have given consent (for example, to marketing emails), because it is necessary to provide a service or take steps at your request (for example, answering an enquiry or managing your membership), because we have a legitimate interest in running and improving our business in a way that does not override your rights, or because the law requires it.
5. Sharing your data
We do not sell your personal data. We share it only with:
- the hotels, restaurants and venues in The Guest Society portfolio, where needed to provide a service you asked for;
- service providers who help us run the Website and our business, such as our hosting provider, booking engine, email and form tools, under contracts that protect your data;
- authorities, where we are legally required to.
6. International transfers
Some of our service providers may store or process data outside Indonesia. When this happens we take steps to make sure your data receives an adequate level of protection, as required by applicable law.
7. Cookies
The Website uses cookies that are necessary for it to work, and may use analytics cookies to understand how visitors use it. You can control or delete cookies in your browser settings. Blocking some cookies may affect how the Website works. [List the analytics or marketing tools in use, if any.]
8. How long we keep your data
We keep personal data only as long as needed for the purpose it was collected: enquiries for up to [24 months], membership data while your membership is active, job applications for up to [12 months] unless you agree to a longer period, and records we must keep by law for the period the law requires.
9. Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate or incomplete data;
- ask us to delete your data, or to restrict or stop processing it;
- withdraw your consent at any time, without affecting earlier processing;
- receive your data in a portable format;
- complain to the relevant data protection authority.
To exercise any of these rights, email info@guestsociety.com. We will reply within the time required by law.
10. Security
We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
11. Children
The Website is not intended for children under 18, and we do not knowingly collect their personal data.
12. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page shows when it last changed.
13. Contact
For any question about this policy or your personal data, contact us at info@guestsociety.com or write to us at Jl. Pemelisan Agung, Tibubeneng, Kec. Kuta Utara, Kab. Badung, Bali 80361, Indonesia.