Privacy Policy

Last updated: October 6, 2026

Octopus Villas Bali respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect when you visit octopusvillasbali.com, make a reservation, contact us, or use our services, how we use that information, and what rights you may have regarding your personal data.

1. Data Controller

The website and accommodation services are operated by:

Octopus Villas Bali
Banjar Bulakan
Tembok, Tejakula, Buleleng
Bali, Indonesia 81173

Phone: +62 857 37 24 9103
Email: info@octopusvillasbali.com

For any questions concerning this Privacy Policy or your personal information, please contact us using the email address above.

2. Information We Collect

Depending on how you use our website and services, we may collect the following categories of personal information:

Contact information

When you contact us through our website, by email, phone, or other communication channels, we may collect:

• your name;

• email address;

• telephone number;

• the content of your message;

• any other information you voluntarily provide.

Reservation and accommodation information

When you search for availability, make or manage a reservation, we may collect:

• your name and contact details;

• arrival and departure dates;

• selected villa;

• number of guests;

• information about adults and children included in the reservation;

• reservation number or booking reference;

• special requests relating to your stay;

• other information required to provide the accommodation or services you request.

Payment information

When you make a payment, payment processing may be handled by third-party payment providers such as PayPal or by financial institutions involved in bank transfers.

We do not normally receive or store your complete credit or debit card details when payment is processed directly by an external payment provider. Such payment information is processed according to the privacy and security policies of the relevant payment provider.

We may receive transaction-related information such as:

• payment status;

• transaction or payment reference;

• amount paid;

• currency;

• payer name or email address;

• date and time of payment.

Technical information

When you visit our website, certain technical information may be collected automatically, including:

• IP address;

• browser type and version;

• device type;

• operating system;

• language settings;

• date and time of access;

• pages visited;

• referring website;

• basic server and security logs.

This information may be necessary for the proper and secure operation of the website.

3. How We Use Your Personal Information

We may use your personal information to:

• process and manage reservations;

• confirm availability and bookings;

• communicate with you before, during, and after your stay;

• process or verify payments;

• provide accommodation and additional services requested by you;

• respond to enquiries submitted through our contact forms;

• provide customer support;

• maintain the security and functionality of our website;

• prevent fraud, misuse, or unauthorized activity;

• maintain accounting and transaction records;

• comply with applicable legal, tax, accounting, regulatory, or governmental requirements;

• establish, exercise, or defend legal claims.

We will not use your personal information for purposes that are incompatible with the purposes described in this Privacy Policy unless permitted or required by law.

4. Legal Bases for Processing

Where applicable data protection laws, including the EU General Data Protection Regulation (GDPR), require a legal basis for processing, we may process personal data on one or more of the following grounds:

Performance of a contract — when processing is necessary to process your reservation, payment, accommodation, or other requested services.

Legitimate interests — when necessary for the operation, administration, security, and improvement of our website and services, provided that these interests are not overridden by your rights and interests.

Legal obligation — when we are required to process or retain information under applicable law.

Consent — where you have voluntarily provided consent for a specific type of processing. Where processing is based on consent, you may withdraw your consent at any time.

5. Contact Forms and Communications

When you submit a contact form, send us an email, or otherwise communicate with us, we use the information you provide to respond to your enquiry and, where relevant, provide or arrange the requested services.

Please do not submit sensitive personal information through general contact forms unless it is necessary for your request.

6. Reservations

Information provided during the reservation process is used to:

• check availability;

• create and administer your reservation;

• identify guests;

• calculate booking costs;

• arrange requested accommodation or additional services;

• communicate important information relating to your reservation;

• process payments and refunds where applicable.

Reservation information may also be retained for accounting, tax, dispute resolution, fraud prevention, and legal compliance purposes.

7. Payments and PayPal

Our website may allow you to make payments online or receive payment instructions.

Payments may be processed through PayPal or other banking and payment service providers.

When you use PayPal, information required to process the payment is transmitted to or collected directly by PayPal. PayPal processes your information under its own privacy policy and terms.

Octopus Villas Bali does not control how PayPal independently processes personal information collected through its services.

8. Cookies

Our website may use cookies and similar technologies.

Cookies are small text files stored on your device that can help websites operate correctly, remember preferences, improve security, or provide statistical information.

Cookies may include:

Essential cookies

These cookies are necessary for functions such as:

• website navigation;

• language selection;

• reservation functionality;

• session management;

• security.

These cookies generally cannot be disabled without affecting the operation of the website.

Preference and functional cookies

These may remember choices such as language or other website preferences.

Analytics or third-party cookies

If analytics, embedded content, maps, videos, social-media functionality, or other third-party services are enabled on the website, those providers may place their own cookies or collect technical information.

Where required by applicable law, non-essential cookies will be used only after obtaining appropriate consent.

You can also control or delete cookies through your browser settings. Blocking certain cookies may affect website functionality.

9. Third-Party Services

Our website or services may interact with third-party providers, including providers of:

• payment processing;

• banking services;

• hosting and website infrastructure;

• email services;

• website security;

• maps or location services;

• booking-related technology;

• analytics or website performance tools.

These providers may process personal information only where required to provide their services or where they independently determine the purposes and means of processing under their own privacy policies.

10. Sharing of Personal Information

We do not sell your personal information.

We may disclose personal information when reasonably necessary to:

• payment processors and banks;

• service providers supporting our website or reservation system;

• accommodation staff or service providers involved in fulfilling your reservation;

• accountants, professional advisers, or legal representatives;

• governmental, regulatory, tax, law-enforcement, or judicial authorities where disclosure is legally required;

• prevent or investigate fraud, security incidents, or unlawful activity.

We aim to disclose only the information reasonably necessary for the relevant purpose.

11. International Data Transfers

Octopus Villas Bali is located in Indonesia and serves international guests.

As a result, personal information may be processed or stored in countries other than the country in which you reside, including Indonesia and countries where our technology, banking, hosting, communication, or payment service providers operate.

Where applicable law requires safeguards for international transfers of personal data, appropriate legal or contractual measures will be used where required.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:

• completing and administering reservations;

• providing customer service;

• maintaining business and accounting records;

• complying with tax and legal requirements;

• handling complaints or disputes;

• preventing fraud;

• protecting our legal rights.

Retention periods may differ depending on the type of information and applicable legal requirements.

13. Data Security

We take reasonable technical and organizational measures designed to protect personal information against:

• unauthorized access;

• loss;

• alteration;

• disclosure;

• misuse;

• destruction.

However, no method of transmission over the Internet or electronic storage can be guaranteed to be completely secure.

14. Your Privacy Rights

Depending on your country of residence and applicable law, you may have rights concerning your personal information, including the right to:

• request access to your personal data;

• request correction of inaccurate or incomplete information;

• request deletion of your personal data;

• request restriction of processing;

• object to certain processing;

• withdraw consent where processing is based on consent;

• request data portability where applicable;

• lodge a complaint with a competent data protection authority.

Some rights may be subject to legal exceptions, including situations where we are legally required to retain information.

To exercise your rights, please contact:

info@octopusvillasbali.com

We may need to verify your identity before processing certain requests.

15. Rights of Visitors from the European Economic Area

If the GDPR applies to the processing of your personal information, you may exercise the rights provided under the GDPR, including access, rectification, erasure, restriction, objection, and data portability where applicable.

You also have the right to lodge a complaint with the data protection supervisory authority responsible for your place of residence, place of work, or the location of an alleged GDPR infringement.

16. Children’s Information

Our accommodation services may be used by families travelling with children, and reservation information may therefore contain limited information concerning children, such as their age where required for the booking.

Such information should be submitted by a parent, legal guardian, or another adult authorized to make the reservation.

We do not intentionally use children’s personal information for advertising or unrelated marketing purposes.

17. External Links

Our website may contain links to external websites or services.

We are not responsible for the privacy practices, security, or content of third-party websites. We recommend reviewing the privacy policy of any external website you visit.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• our website;

• reservation or payment functionality;

• our services;

• applicable legal requirements;

• third-party service providers.

The current version will be published on this page together with its latest revision date.

19. Contact Us

If you have questions about this Privacy Policy, how we process personal information, or wish to exercise your privacy rights, please contact:

Octopus Villas Bali
Banjar Bulakan
Tembok, Tejakula, Buleleng
Bali, Indonesia 81173

Phone: +62 857 37 24 9103
Email: info@octopusvillasbali.com