PRIVACY POLICY

Introduction

This Privacy Policy explains how Bali Pickleball ("we", "us") collects, uses, and protects information when you use our website or services at balipickleball.com. We operate in Amed, Bali, Indonesia, and serve customers from Indonesia and internationally. By using our services, you agree to the practices described below.

Information We Collect

We collect only what we need to provide our services.

• Booking details — Your name, email, phone number, and booking preferences. Required to confirm bookings and send you confirmations.
• Account information — If you create an account, we also store a password (hashed, never readable by us) and any account settings you provide.
• Cookies — We use cookies to keep you logged in, remember your preferences, and understand how people use our site. See the Cookies section below.
• Usage data — Standard analytics data such as pages visited, referrer, device type, approximate location (country/region), and interaction patterns. Collected through Google Analytics.
• Error logs — If something breaks, we capture limited technical details (not your personal data) to fix it.

How We Use Your Information

• Booking management — To confirm and manage your bookings.
• Booking notifications — To send you booking confirmations, modifications, and cancellations by email.
• Customer support — To respond to WhatsApp or email inquiries.
• Product improvement — To improve our website and services based on how people use them.
• Advertising measurement — To measure advertising effectiveness (see Google Ads section below).
• Legal compliance — To comply with legal obligations.

Cookies

The cookies we use are either essential (needed for the site to work) or analytics (help us understand usage). We respect your choices — EU visitors see a consent banner.

• bp_consent — Remembers your cookie consent choice (1 year).
• bp_ref — Attributes your visit to a referring partner (7 days).
• bp_promo — Stores a promo code from a URL for staff to honor (7 days).
• bp_utm — Tracks which marketing campaign brought you here (7 days).
• bp_booking_state — Preserves your booking selections if you log in mid-flow (5 minutes).
• _ga, _ga_XXXXX — Google Analytics session and visitor identifiers (up to 14 months).
• Session cookies — Keep you logged in if you have an account (expires on logout).

Third-Party Services

We use these third parties to operate our service. Each has their own privacy policy.

• Google Analytics & Google Ads — Usage analytics and advertising measurement. We share hashed (one-way encrypted) email and phone with Google Ads for conversion measurement; Google cannot read these values in plain form.
• Google Tag Manager — Manages analytics and pixel tags.
• Resend — Sends your booking confirmation emails.
• Vercel — Hosts our website and processes requests.
• Neon — Database provider (stores bookings, accounts).
• Sentry — Error monitoring (does not receive your personal information).
• Google (OAuth) — If you log in with Google, Google provides us your name and email.

Your Rights

You have the right to:

To exercise any of these rights, email us at play@balipickleball.com.

• Access — Request access to the personal data we hold about you.
• Correction — Request correction of inaccurate data.
• Deletion — Request deletion of your account and associated data (subject to our need to keep booking records for business purposes).
• Export — Request an export of your data.
• Withdraw consent — Withdraw consent for analytics cookies at any time (clear your browser cookies or contact us).

Data Retention

Booking records are kept indefinitely as business records. Analytics data is retained for 14 months. Error logs are retained for 90 days. If you delete your account, we remove your personal profile but retain anonymized booking records.

Children

Our service is not directed at children under 13. Children under 17 require parental supervision to book. We do not knowingly collect personal information from children under 13. If you believe a child has submitted information, contact us and we will delete it.

International Transfers

Our service is operated from Bali, Indonesia. Some of our third-party providers (Google, Vercel, Neon) process data in data centers around the world, including the United States and the European Union. We rely on their contractual commitments to protect your data. EU and EEA visitors are covered by Consent Mode v2 and appropriate data transfer mechanisms.

Indonesian Law (UU PDP) and GDPR

We comply with Indonesia’s Personal Data Protection Law (UU 27/2022) and, where applicable, the EU General Data Protection Regulation (GDPR). If you are in the EU/EEA, you have additional rights including the right to lodge a complaint with your local data protection authority.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be highlighted at the top of this page. The "Last updated" date reflects the most recent revision.

Contact

For privacy questions or to exercise your rights: play@balipickleball.com