Privacy Policy

1. Who we are

Santika Villas is operated by PT Mango and Egg International, a company registered in Indonesia under NIB 9120002280664, at Dusun Gili Air, Kel. Gili Indah, Kec. Pemenang, Kab. Lombok Utara, Nusa Tenggara Barat, Indonesia. We are responsible for the personal data described in this policy.

This policy covers this website, bookings made through its booking page, the chat on the site, and messages you send us. If you have a question about your data, email us at hello@santikavillas.com.

2. What we collect

• When you send our contact form: your name, your email address and your message.
• When you book: your name, your contact details such as your email address and phone number, your dates, the number of guests and anything you tell us about your stay. Payment card details are entered into the payment provider's own secure form and go directly to it; we never receive your full card number.
• When you chat with us: your messages, and any photos or voice notes you choose to send. The chat may answer first with an automated assistant before one of us replies.
• When you visit the site: your IP address and basic browser details, which our server records to keep the site running and secure, and the two essential cookies described below.

We do not use analytics or advertising cookies, and we do not build a profile of you. The guest reviews shown on the site come from Booking.com, where the guests themselves published them.

3. Why we use it

• To answer your questions and messages, because you asked us to.
• To take, confirm and manage your booking, take payment and make any refund, because we need to in order to provide your stay.
• To keep the records Indonesian law requires of us, such as tax and accounting records. If the law requires us to record identity details when you arrive, we collect them at the villa for that purpose only.
• To keep the website secure and to stop spam and fraud, which is in our legitimate interest and yours.

We do not sell your personal data, and we do not use it to send you marketing.

4. Who we share it with

We share personal data only with the service providers that help us run the villa, and only what each one needs:

• Qontaktly, which provides our booking engine and our chat, and stores booking and chat records for us.
• Xendit, which processes card and other payments made in the booking engine, and Stripe, which processes payments made through a link we send in chat.
• Hostinger, which hosts this website.
• Our email provider, which delivers contact form messages and email to our inbox.
• Google, whose map appears on our Home and Contact pages and whose fonts style the site. When these load, your browser connects to Google, which receives your IP address.
• Boat and activity operators, only when you ask us to arrange something with them, and only what they need to provide it.

We also share personal data with public authorities when the law requires us to. Some of our providers process data outside Indonesia; when they do, we rely on providers that protect personal data to a standard consistent with Indonesian law.

5. How it is stored and protected

• This website is served only over an encrypted (HTTPS) connection.
• Contact form messages are sent straight to our inbox. The website itself does not keep a copy.
• Booking and chat records are stored by Qontaktly in its systems. Card details are held by the payment provider, never by us.
• Access to our inbox and to our booking and chat systems is limited to the people who need it to run the villa.

6. How long we keep it

We keep messages for as long as we need them to answer you and to look after your stay. We keep booking and payment records for as long as Indonesian tax and accounting law requires. Server records of IP addresses are kept only for a short period by our host. When we no longer need personal data, we delete it.

7. Your rights

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022), you can ask us:

• for a copy of the personal data we hold about you;
• to correct it if it is wrong or incomplete;
• to delete it, or to stop or limit how we use it;
• to withdraw your consent where we rely on it;
• to give you your data in a form you can take elsewhere.

To use any of these rights, email us at hello@santikavillas.com. We may need to confirm who you are first, and we will reply within the time the law sets. If you are in the European Union or the United Kingdom, you may have similar rights under your local law, including the right to complain to your data protection authority.

8. Cookies

This website sets two essential cookies: a session cookie, and a security token that protects our contact form against forged submissions. Neither builds a profile of you, and both expire after a short period of inactivity.

The booking engine and the chat are provided by Qontaktly and may set their own cookies, which the booking window explains in its own notice. Google may set cookies when its map loads. You can block or delete cookies in your browser settings; the site still works, but the contact form needs its security token to send.

9. Children

Our website and services are not aimed at children. We do not knowingly collect personal data from children, other than the details a parent or guardian gives us as part of a family booking.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it last changed.

11. Contact us about your data

For any question or request about your personal data, email us at hello@santikavillas.com or write to us through our contact form. Our registered address is Dusun Gili Air, Kel. Gili Indah, Kec. Pemenang, Kab. Lombok Utara, Nusa Tenggara Barat, Indonesia.