Privacy policy
Last updated: 7 November 2026
This policy explains which personal data we collect when you visit this website or work with us, why we use it, and which rights you have. We do not sell your data.
Who we are
PT Roses & Stars, Ungasan, South Kuta, Badung Regency, Bali, Indonesia, decides how your personal data is used on this website and in our services. You can reach us at info@rosesandstars.com or by WhatsApp on +62 881 037 23594.
What we use your data for
| Purpose | Data | Legal basis |
|---|---|---|
| Answering your question by WhatsApp, email or a form on this site | Name, contact details, your message, the villa you ask about | Steps you ask for before a contract, or our legitimate interest in answering you |
| Arranging a viewing, a rental, a stay or a purchase | The above, plus travel dates, budget and the details needed for the contract | Preparing and performing a contract |
| Listing or managing a villa for its owner | Owner contact details, property details, photos, and ownership and permit documents | Preparing and performing a contract |
| Accounting, tax and other legal duties | Invoices, payment details and contract records | Legal obligation |
| Measuring how the website is used | Pages visited, clicks on contact links, device and browser, approximate location | Your consent |
You choose what you send us. Without your contact details we cannot answer you, and without the details a contract requires we cannot complete it. Please do not send us health information or copies of identity documents unless we ask for them for a specific contract.
Cookies and statistics
We use Google Analytics only after you click "Accept". It then places cookies whose names start with _ga, which can last up to 14 months. If you decline, these cookies are not placed. We remember your choice in your browser, which is not a tracking cookie.
Who receives your data
We share data only where needed for the purposes above, or where the law requires it.
| Receiver | Role | Location |
|---|---|---|
| Vercel | Hosts this website and briefly processes technical data such as IP addresses | United States and other countries |
| Google (Analytics) | Website statistics, only after you accept | United States and other countries |
| Google, Meta (WhatsApp) or our email provider | Carry the messages you send us | Depends on the provider |
| Notaries, lawyers, accountants | Handle contracts, transfers and tax | Mainly Indonesia |
| The villa owner or the other party | Receive what is needed to arrange the viewing, rental or sale | Mainly Indonesia |
International transfers
We work from Indonesia and some of our providers operate in other countries. Your data can therefore be processed outside your own country, including outside the European Economic Area. Where the law requires it, we rely on safeguards such as your consent, the need to perform a contract you asked for, or the provider's standard contractual clauses. Contact us for more information about these safeguards.
How long we keep your data
- Questions that do not lead to a contract: up to 2 years after our last contact.
- Contracts, invoices and owner documents: for the term of the contract and as long as tax and other laws require after that.
- Website statistics: up to 14 months.
Your rights
Depending on where you live, you can ask us to:
- tell you which data we hold and give you a copy
- correct data that is wrong or incomplete
- delete your data or limit how we use it
- send your data to you or another party in a usable format
- stop using your data based on our legitimate interest
- withdraw your consent at any time, which does not affect earlier use
Email info@rosesandstars.com and we will respond within the period the law sets. We may ask you to confirm who you are. You can also complain to the data protection authority where you live, such as the Autoriteit Persoonsgegevens in the Netherlands, or to the competent authority in Indonesia.
Security
We limit access to people who need the data for their work and use providers with encrypted connections. No system is completely secure. If a breach creates a risk for you, we will inform you and the authorities where the law requires it.
Changes
We update this policy when our services or the law change. The date at the top shows the latest version. See also our contact page.