Privacy
This policy explains what personal data Bali Capital Connect ("we", "us") collects, why, who helps us process it, how long we keep it and the rights you have under Indonesia's Personal Data Protection Law (Law No. 27 of 2022, "PDP Law").
Who is responsible
Bali Capital Connect is the data controller for the personal data described here. Contact us about privacy at: [email protected]
What we collect and why
Business owners list through our listing form. Their name, email and phone number are never shown on the site.
- Listing a business: your name, email, phone/WhatsApp and the business details you enter. We use them to review and publish your listing, relay buyer enquiries to you, send you service emails (confirmation, "your listing is live", manage links, renewal reminders) and contact you about your listing.
- Contacting an owner: your name, email, phone (if given), investor type, optional budget and timeline, and your message. We send these to that owner by email and keep a record of the enquiry, so we can prevent abuse and ask later whether the owner replied.
- Deal alerts: your email, optional name and preferences, used only to send the alerts you asked for.
- Payments: handled by Stripe. We receive the payment status, amount and reference, never your full card details.
- Security: technical data such as IP address, used briefly to block spam and abuse (rate limits and the Cloudflare Turnstile check).
When you contact an owner, we send your name, email, phone (if given), investor type and message to that owner by email, and keep a record of the enquiry.
If you sign up for deal alerts, we keep your email, optional name and preferences to send those alerts. Every alert email has a one-click unsubscribe link.
The Insights page only shows totals. It never shows who sent an enquiry.
We process this data to provide the service you ask for, with your consent where the PDP Law requires it, and for our legitimate interest in keeping the site safe and free of spam.
Who processes it for us
- Airtable: our database for listings, enquiries and alert sign-ups.
- Cloudflare: website hosting, form handling and spam protection (Turnstile).
- Resend: sending our emails, including enquiries relayed to owners.
- Stripe: card payments for paid plans.
- Plausible Analytics: cookieless visit counts (see below).
These providers may store data outside Indonesia (for example in the United States or the EU). We only use providers that protect personal data to a standard comparable to the PDP Law. We do not sell your data.
How long we keep it
- Listings and owner contact details: while the listing is on the site, and up to 24 months after it is sold or removed, in case you relist or there is a dispute.
- Enquiry records: up to 24 months.
- Deal alerts: until you unsubscribe.
- Payment records: as long as Indonesian tax and accounting law requires.
- Security data such as IP addresses: no more than a few days.
Your rights
Under the PDP Law you can ask to access the personal data we hold about you, correct it, delete it, or withdraw your consent. Listing owners can also edit or take down a listing themselves with "Manage this listing". For any request, email us from the address you used and we will respond within the time the PDP Law requires: [email protected]
Cookies and analytics
We count visits with Plausible Analytics, a privacy-friendly analytics service based in the EU. It uses no cookies, collects no personal data and does not follow you across other sites. We only see totals, such as page views, which sites sent visitors, and how many enquiries, alert sign-ups and listings were sent.
We do not use advertising or tracking cookies. Your browser stores your language choice and, on the listing form, an unsent draft on your own device, so you can pick up where you left off.
Changes
We may update this policy. The current version is always on this page.