Privacy Policy

Who is responsible for your data

The controller is Rise Real Bali, a real estate agency based in Bali, Indonesia ("we"). You can reach us at [email protected], on WhatsApp, or by phone at +62 812 3769 2133.

This policy follows the EU General Data Protection Regulation (GDPR), the UK GDPR and Indonesian Law No. 27 of 2022 on Personal Data Protection. The GDPR applies to us under Article 3(2) because we offer our services to people in the European Union.

Our representative in the EU and the UK

We are not established in the European Union or the United Kingdom. Under Article 27 of the GDPR and the UK GDPR, you can also contact our representatives there on any data protection question.

• EU representative: —
• Address: —
• Email: —
• UK representative: —
• Address: —
• Email: —

What the site collects through its forms

There is no registration, login or newsletter on riserealbali.com. You can read every page without giving us a name, phone number or email address.

Our request forms ask for your name, a phone or WhatsApp number, an optional email and a few words about what you want. When you press Send, the form goes to our server and on to our customer relationship management (CRM) system, Kommo. With it go the page you sent it from, the site's language and domain, and any campaign tags (UTM) in the link that brought you here. Our web server does not keep a copy.

A form goes out only if you tick the consent box, and the box is never ticked for you. If sending fails, the form offers to open WhatsApp or your email app with the same text, and nothing reaches us until you send that message yourself.

What we receive and why

When you write to us or send a form, we see only what you chose to give us. That means your name or username, phone number, email address and what you wrote. If a purchase goes ahead, we also receive the documents a property transaction in Indonesia requires, such as a copy of your passport.

We keep requests and conversations in our CRM so that the person handling your request can see its history. We may use software to sort incoming requests and draft some first replies in messengers. A person on our team handles every purchase, and we do not make decisions with legal or similarly significant effects about you by automated means alone.

We do not ask for special categories of data, such as health information or political views. The site is not intended for anyone under 18.

Legal bases

• Answering the request you sent through a form or a messenger, selecting properties and supporting your purchase: steps taken at your request before and under a contract (GDPR Article 6(1)(b)). The consent box on each form confirms that you asked us to contact you.
• Keeping records of the transaction for the period Indonesian law requires: legal obligation (Article 6(1)(c)).
• Keeping correspondence to handle follow-up questions and protect our legal position, and web server logs to keep the site secure: our legitimate interests (Article 6(1)(f)).
• Visit statistics, if we switch analytics on: your consent through the cookie banner (Article 6(1)(a)). You can withdraw it at any time.

Who else sees your data

We do not sell personal data and do not share it for anyone else's marketing.

Your messages pass through the services you use to contact us (WhatsApp, your email provider) on their own terms. Inside our business, the providers we rely on also process the data. Web hosting and a content delivery network see standard server logs: IP address, browser type, time of request. Our email provider and our CRM provider (Kommo) hold messages and requests. If you consent, our analytics provider sees visit statistics. With your agreement, we share what a transaction needs with the developer or seller of the property, the notary and the lawyers working on your purchase.

Transfers outside the EU and the UK

Our team works in Indonesia, so we process your messages there. The European Commission has not issued an adequacy decision for Indonesia. We transfer your data because it is necessary to answer the request you sent us and to perform the contract you asked for (GDPR Article 49(1)(b)). Where we use a provider for a regular transfer, we rely on the European Commission's standard contractual clauses or on the provider's own transfer mechanism.

How long we keep it

We keep a conversation while it is active and for up to 24 months after the last message, so that if you come back, we can pick up where we left off. If it leads to a purchase, we keep the transaction records for as long as Indonesian law on business records requires.

After that, we delete the data or make it anonymous. If you ask, we delete it sooner, unless a signed contract or the law requires us to keep it.

Your rights

You can ask for a copy of your data and have it corrected, deleted or restricted. You can also receive it in a portable format, object to processing based on our legitimate interests and withdraw consent at any time. Write to [email protected] or to our EU or UK representative. We reply within one month.

You also have the right to complain to a data protection authority. In the EU, that is usually the authority in the country where you live or work. In the UK, it is the Information Commissioner's Office.

Security

Access to client conversations is limited to the team members working on your request. We use encrypted channels where the service allows it and do not keep copies of client correspondence on public resources.

Changes to this policy

When we change this policy, the new version replaces this page and the effective date below changes. If a change affects how we use data you have already given us, we will tell you in the conversation we already have with you.