Last updated: 2 October 2026.
1. Who we are
This website, www.premierpropertybali.com, is operated by PT Premier Property Group, a foreign investment company (PT PMA) established under the laws of the Republic of Indonesia, trading as Premier Property Bali (“Premier”, “we”, “us”).
Premier is the controller of the personal data described in this policy, meaning we decide why and how it is used. For questions or requests about your data, contact us at info@premierpropertybali.com or by WhatsApp at +62 878 1654 5155.
2. What this policy covers
This policy explains what personal data we collect when you visit this website, fill in our contact form, or contact us through a link on it, why we use it, who we share it with, and the rights you have. It applies to visitors wherever they are. If you become a client, the agreement you sign with us and any notice given with it will also apply.
We process personal data in accordance with Law No. 27 of 2022 on Personal Data Protection (UU PDP), Government Regulation No. 71 of 2019 on Electronic Systems and Transactions, and, where they apply to you, the EU General Data Protection Regulation (GDPR) and the UK GDPR.
3. The personal data we collect
Data you give us
Contact form. When you send an enquiry we collect your name and email address (required), your WhatsApp number (optional), the topic you select, the property reference if you enquired about a specific listing, and your message.
WhatsApp, email and phone. If you contact us through a WhatsApp link, email or phone, we receive your name, number or address and whatever you choose to tell us.
Data collected automatically
Technical data sent with your enquiry. When the contact form is sent, our server records your IP address and the time of sending, and includes both in the email that reaches our team.
How you found us (marketing attribution). If you arrive on our site from an advertisement or a tagged link, your browser stores, for up to 90 days, the advertising click identifier (Google Ads gclid, gbraid or wbraid, or Meta fbclid), any campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the page you landed on, the site that referred you, and the time this was recorded. A later ad click replaces the earlier record. If you then send our contact form, this information is sent with your enquiry. If you click a WhatsApp link, a short reference tag (for example “[ref gads campaign 1a2b3c4d]”) is added to the end of the pre-filled message so we know which campaign brought you; you can delete it before sending. If you choose “Reject all” in our cookie banner, this record is deleted and is not created again.
Preferences. Your browser stores your chosen language and currency, and a cache of translated text, so the site loads faster in your language next time.
Analytics and advertising data. Subject to your consent where the law requires it, Google Analytics 4, Google Ads and the Meta Pixel collect information such as the pages you view, how you interact with them, your device, browser, approximate location derived from your IP address, and whether you completed an enquiry. See section 5 and the Cookie table.
Server logs. Like any website, our server keeps standard logs of requests, including IP addresses, for security and to keep the site running. These logs are kept for a limited period.
We do not ask for, and ask you not to send us through the website, any specific personal data as defined in UU PDP (such as health, biometric, financial account, criminal record or children’s data) or the special categories under the GDPR.
4. Why we use your data, and our legal basis
| Purpose | Data used | Legal basis under UU PDP | Legal basis under GDPR / UK GDPR |
|---|---|---|---|
| Reply to your enquiry and give you the information you asked for | Contact form, WhatsApp, email data | Steps at your request before entering into a contract (Art. 20(2)(b)) | Steps at your request before a contract (Art. 6(1)(b)) |
| Provide our services if you become a client | Contact and transaction data | Performance of a contract (Art. 20(2)(b)) | Contract (Art. 6(1)(b)) |
| Understand which advertising and channels bring enquiries | Attribution data, campaign tags | Consent | Consent (Art. 6(1)(a)) |
| Measure how the website is used and improve it | Analytics data | Consent | Consent (Art. 6(1)(a)) |
| Show you relevant ads and measure ad conversions on Google and Meta | Advertising identifiers, conversion events, and any hashed contact data sent to Google or Meta | Consent | Consent (Art. 6(1)(a)) |
| Remember your language and currency, translate pages | Preferences, page text | Legitimate interest in providing the site you asked for (Art. 20(2)(f)) | Legitimate interest (Art. 6(1)(f)); storage necessary for the service you requested |
| Protect the site and our team from spam, fraud and attacks | IP address, server logs | Legitimate interest (Art. 20(2)(f)) | Legitimate interest (Art. 6(1)(f)) |
| Keep records we are legally required to keep, including anti money laundering and tax records | Client and transaction data | Legal obligation (Art. 20(2)(c)) | Legal obligation (Art. 6(1)(c)) |
Where we rely on consent, you may withdraw it at any time through the Cookie settings link at the foot of every page or by contacting us. Withdrawing consent does not affect processing that took place before you withdrew it.
We do not sell your personal data, and we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
5. Who we share your data with
We share personal data only with the following, and only as far as needed:
| Recipient | What they do for us | Where they process data |
|---|---|---|
| DigitalOcean | Hosts our website and the server that receives the contact form | The data centre of our hosting plan |
| Brevo (Sendinblue SAS) | Delivers the contact form email to our team | European Union |
| Google (Google Workspace) | Our email mailbox, where enquiries are received and kept | United States and other countries |
| Google (Tag Manager, Analytics 4, Ads) | Loads our tags, measures site use and ad conversions, advertising | United States and other countries |
| Google Fonts | Supplies the fonts the site uses. Your browser connects to Google’s servers, which see your IP address | United States and other countries |
| Meta Platforms (Meta Pixel, WhatsApp) | Advertising measurement; WhatsApp messaging when you choose to contact us that way | United States, Ireland and other countries |
| Google Translate and MyMemory (Translated srl) | Machine translation of page text when you switch language. Your browser sends page text and its IP address. No form data is sent | United States; Italy |
| OpenFreeMap | Map tiles on property pages. Your browser connects directly and its IP address is visible to the provider | Provider’s servers |
| Kesato (PT Kesato Int Partners), our digital marketing agency | Configures and manages our tags and advertising accounts, and can see aggregated reports | Indonesia |
| Property owners, co-agents, notaries (notaris), PPAT and legal advisers | Only where needed to progress a transaction you have asked us to help with | Indonesia |
| Authorities | Where Indonesian law requires it, including reporting obligations under Law No. 8 of 2010 on money laundering | Indonesia |
Meta and Google privacy information: Google Privacy Policy, Meta Privacy Policy, WhatsApp Privacy Policy, Brevo Privacy Policy, DigitalOcean Privacy Policy.
For visitors in the EU and UK: where the Meta Pixel collects data on our site and sends it to Meta, Premier and Meta Platforms Ireland act as joint controllers for that collection and transmission. Meta is solely responsible for what it does with the data afterwards.
6. International transfers
Premier is based in Indonesia, and several of our providers process data outside Indonesia, as shown above. When your data is transferred abroad, we rely on the safeguards each provider offers, including their standard data processing terms and, for transfers from the EU and UK, the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum where the provider offers them. Where no such safeguard is available, we rely on your consent, in line with Article 56 UU PDP.
For EU and UK visitors, note that Indonesia does not have an adequacy decision from the European Commission or the UK government. Data you send us is transferred to Indonesia because that is where we are and where we answer your enquiry.
7. How long we keep your data
| Data | How long |
|---|---|
| Enquiries that do not lead to a client relationship | 24 months from our last contact, then deleted |
| Client and transaction records | 10 years after the end of the relationship, the period Indonesian tax and record keeping law requires |
| Attribution data in your browser | 90 days, or until you clear your browser storage |
| Language, currency and translation cache in your browser | Until you clear your browser storage |
| Server logs | A limited period, for security and operation |
| Google Analytics data | The retention period set in our Google Analytics account |
8. How we protect your data
Our website is served over an encrypted connection (HTTPS). Contact form data travels encrypted to our server and to our email provider, and access to our mailbox and accounts is limited to the people who need it. No system is completely secure. If a breach of your personal data occurs, we will notify you and the competent authority within the period UU PDP requires, and where the GDPR applies, the competent supervisory authority within 72 hours where required.
9. Your rights
Under UU PDP you have the right, among others, to:
- be informed about how and why your data is processed;
- access your data and obtain a copy;
- correct inaccurate or incomplete data;
- end processing, delete or destroy your data;
- withdraw consent you have given;
- object to decisions based solely on automated processing;
- restrict or suspend processing;
- obtain your data in a commonly used format and have it transferred to another controller; and
- claim compensation for a breach of the law concerning your data.
If you are in the EU or UK, you also have the rights given by the GDPR or UK GDPR, including the right to object to processing based on legitimate interest, and the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner’s Office).
If you are elsewhere (for example Australia, the United Arab Emirates or the United States), you may have rights under your local law. Contact us and we will respond in line with it.
How to make a request. Email info@premierpropertybali.com with the subject “Privacy request”. We may need to confirm your identity first. We will respond within the period required by law and at the latest within one month for requests under the GDPR or UK GDPR. You may also complain to the Indonesian personal data protection authority once it is established.
10. Cookies and similar technologies
We use browser storage (localStorage) set by our own site, and cookies set by Google and Meta when you allow them. Our own site code does not set cookies. The cookie table below lists each one, its purpose and how long it lasts.
Strictly necessary and preference storage is used without asking, because it only delivers the site you asked for. Analytics, attribution and advertising technologies are used only with your consent, which you can give, refuse or withdraw at any time through the Cookie settings link at the foot of every page. You can also clear cookies and site storage in your browser settings, and install the Google Analytics opt out browser add on.
11. Children
This website is intended for adults and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe a child has sent us personal data, contact us and we will delete it.
12. Links to other websites
Our site links to WhatsApp, social media and other sites. Their own privacy policies apply once you leave our site, and we are not responsible for them.
13. Changes to this policy
We may update this policy. The date at the top shows when it last changed. If a change materially affects how we use data you have already given us, we will tell you before it takes effect, and ask for your consent again where the law requires it.
14. Governing law and language
This policy is governed by the laws of the Republic of Indonesia, without affecting any mandatory rights you have under the law of the country where you live. This policy is published in English.
15. Cookie table
Durations for Google and Meta cookies are the providers’ published defaults.
| Name | Category | Set by | Type | Purpose | Duration |
|---|---|---|---|---|---|
| ppb_lang | Preference | Premier | localStorage | Remembers your chosen language | Until cleared |
| ppb_curr | Preference | Premier | localStorage | Remembers your chosen currency | Until cleared |
| ppb_tr_cache | Preference | Premier | localStorage | Stores translated text so pages load faster in your language | Until cleared |
| ppb_attr | Attribution (consent) | Premier | localStorage | Ad click identifier, campaign tags, landing page, referrer and time, sent with your enquiry | 90 days, replaced by a later ad click; deleted if you choose Reject all |
| _ga | Analytics (consent) | Google Analytics 4 | Cookie | Distinguishes visitors | 2 years |
| ga[ID] | Analytics (consent) | Google Analytics 4 | Cookie | Keeps session state | 2 years |
| _gcl_au | Advertising (consent) | Google Ads | Cookie | Measures ad conversions | 90 days |
| _fbp | Advertising (consent) | Meta Pixel | Cookie | Identifies the browser for Meta ad measurement | 90 days |
| _fbc | Advertising (consent) | Meta Pixel | Cookie | Stores the Meta ad click identifier | 90 days |
| Google Tag Manager | Necessary to load tags | Script, no cookie of its own | Loads the analytics and advertising tags, which follow your consent choice | Not applicable | |
| Google Fonts | Functional | Request, no cookie | Supplies fonts; Google sees your IP address | Not applicable | |
| Translation requests | Functional | Google Translate, MyMemory | Request, no cookie | Translate page text when you switch language; providers see your IP address | Not applicable |
| Map tiles | Functional | OpenFreeMap | Request, no cookie | Displays maps on property pages; provider sees your IP address | Not applicable |
Categories. Preference storage delivers the site you asked for and is used without consent. Attribution, Analytics and Advertising are used only with consent.