Privacy Policy

Last updated 8 October 2026

This policy explains what personal data Cabo Bali collects when you use cabobali.com, book a villa with us, or contact us about managing your villa, and what we do with it.

Who we are

Cabo Bali is run by PT Cabo Bali Indonesia (NIB 1707240049972), a villa management company in Bali, Indonesia. We are responsible for the personal data described on this page. Questions about it go to hello@cabobali.com.

What we collect

Details you give us. When you fill in a form on this site, such as a rental forecast, List with us, or a partner or creator application, we collect what you enter. That is usually your name, email, WhatsApp number, country, and details about your villa or your request. When you message us by WhatsApp, Instagram or email, we keep that conversation.

Booking details. Direct bookings are made through our booking engine, which is run by Guesty. To book, you give your name, contact details, dates, number of guests and payment details. Card payments are handled by a payment processor that meets the PCI DSS card security standard. We never see or store your full card number.

Usage data. When you browse the site we collect technical data such as the pages you view, the page you came from, your device and browser type, your approximate location based on your IP address, and how you move around a page.

Job applications. If you email us your CV, we keep it to assess your application.

Cookies and browser storage

Analytics and advertising. We use Google Tag Manager to load Google Analytics and Google advertising measurement, and Microsoft Clarity, which records clicks, scrolling and page interactions so we can see what works on the site. We set these tools up to avoid capturing what you type into forms.

Our own cookies. cabo_aud, cabo_aud_c and cabo_aud_fs remember whether you have looked at guest pages, owner pages or both, for up to 400 days. cbo_ft and cbo_lt remember how you first found us and the source of your latest visit, for 400 days and 30 days, so an enquiry is credited to the right channel.

Browser storage. cabo_rv remembers the villas you viewed recently so we can show them again. It stays on your device and expires after 30 days.

You can block or delete cookies in your browser settings. The site still works without them.

How we use your data

We use your details to answer your questions, take and manage your booking, look after you before and during your stay, send you the messages a booking needs, talk with villa owners about managing their villa, consider job applications, keep the site secure and work out which pages and ads are useful.

We only send marketing emails if you have asked for them, and every one has a way to stop them. We do not sell your personal data.

Our legal basis

We handle personal data under Indonesia's Personal Data Protection Law (Law No. 27 of 2022). For guests in the EU or UK we also follow the GDPR. We rely on what is needed to carry out your booking or request, our legal duties (for example tax records and guest registration), our legitimate interest in running and improving the business, and your consent where the law asks for it, such as marketing emails.

Who we share it with

We share only what each party needs: Guesty (our booking and guest messaging system), the payment processor that takes your card, Webflow (which hosts this site), Google and Microsoft (analytics and measurement), Meta (ad measurement, if you arrive from one of our ads), the villa team who look after your stay, and government bodies when the law requires it.

If you book one of our villas through Airbnb, Booking.com or another platform, that platform's own privacy policy also applies to what you share with them.

Data stored outside Indonesia

Some of the services above keep data on servers outside Indonesia, for example in the United States or Europe. When that happens we use providers that protect it with security and contract terms that meet the standards the law expects.

How long we keep it

We keep booking and payment records for as long as Indonesian tax and accounting rules require. Enquiries and job applications are kept only as long as they are useful, then deleted. Cookie lifetimes are listed above.

Your rights

You can ask us to show you the data we hold about you, correct it, delete it, stop or limit how we use it, or send you a copy. You can withdraw consent at any time. Email hello@cabobali.com and we will reply within the time the law allows. If you are not happy with our answer you can complain to the data protection authority where you live.

Security

This site is served over HTTPS, card details go straight to the payment processor and never touch our team, and only the people who need booking details can see them. No system is perfect, so if we ever have a breach that puts you at risk, we will tell you and the authorities as the law requires.

Children

Bookings must be made by an adult. Children can stay with their families, and we only hold what an adult tells us about them for the booking, such as names and ages for guest registration.

Changes and contact

If we change this policy we will update the date at the top of this page. Questions about your data go to hello@cabobali.com, PT Cabo Bali Indonesia, Bali, Indonesia.