Privacy Policy

1. Controller

PT Sanders, Jl. Raya Bumbak, Kerobokan, Kec. Kuta Utara, Kabupaten Badung, Bali 80361, Indonesia. Represented by Julius Sanders. For privacy matters: kate@graceestatesbali.com

2. Our approach

We collect as little data as possible. This website sets no advertising cookies, builds no user profiles and shares no data for advertising purposes.

3. Hosting and server logs

This website is hosted by Cloudflare, Inc. When you open a page, technically necessary data is processed, in particular your IP address, the date and time, the page requested, the amount of data transferred, your browser and your operating system. This is required to deliver the site and keep it secure. The legal basis is our legitimate interest in secure and functioning operation under Art. 6(1)(f) GDPR. Cloudflare may set a technically necessary security cookie to prevent abuse.

4. Cookies

We use no cookies for advertising or analytics. Only technically necessary cookies are used, for which no consent is required. That is why this site has no cookie banner.

5. Analytics

We use Cloudflare Web Analytics to see how often our pages are viewed. It works without cookies, without recognising individuals and without cross-device tracking. No user profiles are created. The legal basis is our legitimate interest in privacy-friendly measurement under Art. 6(1)(f) GDPR.

6. Contact form, email and WhatsApp

If you write to us through the form, by email or by WhatsApp, we process the information you provide in order to answer you. This is usually your name, your email address, the content of your message and whether you are looking to buy, to build or are still deciding. The legal basis is Art. 6(1)(b) GDPR for enquiries relating to a possible contract, otherwise Art. 6(1)(f) GDPR. Form submissions are transmitted via Formspark (Trampoline Software SRL, Belgium) and stored in Ireland and Germany, within the EU. Email is processed through Google Workspace. WhatsApp is operated by WhatsApp Ireland Ltd., and their terms apply in addition if you contact us there. You can always write to us by email instead.

7. Free guide

If you request our free guide, we process your name and email address in order to send it to you. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw that consent at any time by sending a short message to kate@graceestatesbali.com.

8. Booking a call

We use Cal.com for call bookings. The calendar is loaded from Cal.com only after you actively click to open it, so simply visiting the page sends no data to Cal.com. Once open, your name, email address, chosen time and time zone are processed so the call can take place. The legal basis is Art. 6(1)(b) GDPR.

9. Fonts and external content

All fonts are served from our own server. This website loads no fonts, scripts or images from third-party servers, so no data is transferred to them.

10. Processing outside the European Union

The controller is based in Indonesia, and some of our service providers also process data outside the EU. Where this happens, it is because it is necessary to answer your enquiry or perform a contract, or because you have consented, and we select providers with appropriate safeguards in place, in particular standard contractual clauses.

11. How long we keep data

We keep enquiries and messages for as long as we need them to respond and to meet legal obligations, and delete them afterwards. Server logs are deleted automatically after a short period.

12. Your rights

You have the right to access the data we hold about you, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on a legitimate interest. You can withdraw any consent at any time. A message to kate@graceestatesbali.com is enough.

13. Right to complain

You can complain to a data protection authority if you believe your data is not being processed lawfully.

14. Changes

We update this policy when our website or the legal position changes.

Last updated: October 2026