Book now on Airbnb

Privacy Policy

Last updated: [12.07.2026]

1. Who We Are

This Privacy Policy explains how personal data is collected, used, stored and protected by:

PT Sgura Villa Rental Group
Operating as nyawa Retreat Villas Bali
Gg. Nyawa No. 1
Buwit, Kediri, Tabanan 82121
Bali, Indonesia

Email: info@nyawavillas.com

For the purposes of applicable data protection laws, PT Sgura Villa Rental Group is responsible for the personal data processed in connection with direct bookings and stays at nyawa Retreat Villas Bali. We process personal data in accordance with applicable Indonesian data protection laws, including Law No. 27 of 2022 on Personal Data Protection, and, where applicable, the European Union General Data Protection Regulation. Indonesian data protection law requires personal data to be processed for specific, lawful and transparent purposes and grants individuals rights including access, correction, deletion and withdrawal of consent.

2. Our Commitment

We are committed to handling all guest information discreetly, responsibly and only for legitimate purposes connected with a booking, payment, stay, legal obligation or requested service. We do not sell or rent guest data. We do not keep copies of passports, full payment credentials or other sensitive guest documents on nyawa-owned computers, personal devices, local servers or paper files unless this is temporarily necessary to resolve a specific issue or comply with a legal requirement. Certain information is processed and stored on our behalf by the secure booking, guest-management, check-in and payment systems described below.

3. Personal Data We Collect

Depending on how a guest makes a booking or communicates with us, we may collect:

  • name, address, email address and telephone number;
  • arrival, departure, villa and booking information;
  • number and names of accompanying guests;
  • messages, requests and communication preferences;
  • passport or identification document;
  • date of birth and nationality;
  • payment status, transaction reference and limited payment information;
  • information required for optional services requested by the guest;
  • records of consent to receive promotional communications.

We only request information that is reasonably necessary for the relevant purpose.

4. Why We Process Personal Data

Personal data may be processed to:

  • create, confirm and manage a booking;
  • communicate with guests before, during and after their stay;
  • complete online check-in and guest registration;
  • verify guest identity and prevent fraudulent bookings;
  • process and document payments, refunds and chargebacks;
  • provide access codes and Guest Portal information;
  • provide accommodation and requested guest services;
  • comply with legal, tax, accounting or regulatory obligations;
  • protect guests, employees and property;
  • respond to questions, complaints or legal claims;
  • maintain booking and guest history; and
  • send offers and promotional information where the guest has agreed to receive them.

The processing is based, depending on the circumstances, on performance of the accommodation agreement, compliance with legal obligations, our legitimate operational and security interests, or the guest’s consent.

5. Booking and Guest-Management Systems

Booking, communication and guest information is primarily managed through Hostaway. Hostaway’s relevant privacy entity is:

Hostaway Opco Oy
Registration No. 3472936-9
Finland

Hostaway’s published Finnish head office is:

Bulevardi 21
00180 Helsinki
Finland

Hostaway Opco Oy is established in Finland and processes personal data in accordance with the GDPR. Hostaway may use approved service providers and international data-processing locations, subject to appropriate contractual and legal safeguards. Depending on the booking and check-in process used, personal data may also be processed through the online travel agency or booking platform through which the reservation was made. These providers process data according to their own privacy policies.

6. Identity and Check-in Information

Passport or identification images, date of birth and nationality are collected for identity verification, guest registration, security and compliance with applicable requirements. We intend to remove passport or identification images, date of birth and nationality from our active guest records after completion of the stay, once the information is no longer required for:

  • guest registration;
  • an unresolved payment;
  • a complaint, damage claim or legal dispute; or
  • another applicable legal obligation.

We do not retain separate local copies of these documents.

7. Information Retained After the Stay

After a stay has been completed, the following information may remain in our Hostaway guest records:

  • guest name;
  • telephone number;
  • email address;
  • dates of stay;
  • booked villa;
  • number of guests;
  • booking value and payment status;
  • booking source; and
  • relevant booking communications.

This information may be retained for guest-service history, accounting, fraud prevention, legal compliance, dispute resolution and future booking administration. Guests may request deletion of this information by emailing info@nyawavillas.com.

We will comply with a deletion request unless continued retention is reasonably necessary or required for legal, accounting, contractual, security or dispute-resolution purposes.

8. Payment Information

Payments are processed by:

PT Red Dot Indonesia
Grand Slipi Tower
38th Floor, Unit C
Jl. Letjen S. Parman Kav. 22–24
Jakarta Barat 11480
Indonesia

Red Dot’s official Indonesian address and privacy information identify PT Red Dot Indonesia as the payment-data processor responsible for its payment platform. Full credit card numbers, bank-account credentials and card security codes are submitted directly through the payment provider’s systems. nyawa Retreat Villas Bali does not receive or store full card or bank credentials. We may receive limited transaction information, including:

  • cardholder or payer name;
  • payment amount;
  • payment status;
  • transaction reference;
  • payment method;
  • partially masked card details; and
  • information required to manage refunds, disputes or chargebacks.

Red Dot may retain payment-related personal data for as long as required for payment processing, regulatory compliance, accounting, fraud prevention, anti-money-laundering requirements, dispute resolution and other legal obligations. Red Dot states that it applies payment-industry security standards, including measures for the protection of card information.

9. Guest Communication and Marketing

We use the email address and telephone number provided by the guest to communicate about:

  • the booking;
  • payment;
  • online check-in;
  • arrival and access information;
  • requested services;
  • matters arising during the stay; and
  • necessary post-stay communication.

We may send information about future offers, promotions or news. Guests may withdraw their marketing consent at any time by:

Withdrawal from marketing does not affect necessary booking or guest-service communications.

10. Cookies and Website Data

Our website and booking systems may use cookies and similar technologies to:

  • provide essential website functions;
  • remember preferences;
  • maintain security;
  • operate the booking process;
  • understand website performance.

Visitors can also manage cookies through their browser settings. Disabling necessary cookies may affect the operation of the website or booking process.

11. Third-Party Websites and Booking Platforms

Our nyawa Guidebook or Guest Portal may contain links to independent websites, booking platforms, payment pages or service providers. Those third parties are responsible for their own data-processing practices. Guests should review the relevant provider’s privacy policy before submitting personal information directly to that provider. Where a booking is made through an online travel agency, the privacy policy of that booking platform applies in addition to this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology providers, legal requirements or data-processing practices. The latest version will be published on our website with the date of the most recent update.

13. Contact

Questions, requests or complaints concerning personal data may be directed to:

PT Sgura Villa Rental Group
Operating as nyawa Retreat Villas Bali

Email: info@nyawavillas.com

Address:
Gg. Nyawa No. 1
Buwit, Kediri, Tabanan 82121
Bali, Indonesia