Privacy Policy

1.Who is responsible for your information

Villa Rice is located in Kerobokan, Bali, Indonesia. The operator of Villa Rice is responsible for the personal information processed for the purposes described in this policy. Its full legal name and registered address are available on request from the privacy contact below.

Privacy contact: rik@nivaregroup.com

2.Information we collect

Depending on how you interact with us, we may collect:

• Your name, email address, telephone number and contact details.
• Reservation dates, guest numbers, villa selection and booking preferences.
• Information needed for guest registration or legally required reporting, including identification details where necessary.
• Payment status, transaction references and billing information.
• Messages, enquiries, feedback and requests.
• Technical information collected through our website, such as IP address, browser type and pages visited.
• Marketing preferences and records of consent, where relevant.

Please provide only information necessary for your enquiry or reservation. If you provide information about other guests, ensure you are authorised to do so and make this policy available to them.

Children’s information is collected only where necessary for the reservation, guest registration or applicable legal requirements, with parental or guardian consent where required.

3.How we use your information

We use personal information to:

• Respond to enquiries and manage reservations.
• Process payments, cancellations and refunds.
• Arrange check-in, accommodation and requested services.
• Communicate important information about your stay.
• Meet legal, tax, accounting and guest-registration obligations.
• Protect guests, staff and property, and address fraud or disputes.
• Maintain and improve the security and operation of our website.
• Send marketing communications where we have an appropriate legal basis.

We process information as necessary to enter into or perform a booking contract, comply with legal obligations, pursue legitimate interests where permitted and appropriately balanced against your rights, or act on your consent.

Where we rely on consent, you may withdraw it. Withdrawal does not affect processing lawfully carried out beforehand.

4.Who receives your information

We may share relevant information with:

• Authorised villa management and staff.
• Booking systems and channel managers.
• Payment processors and financial institutions.
• Website hosting, IT and communications providers.
• Service providers arranging activities or services you request.
• Professional advisers and public authorities where necessary or legally required.

We limit sharing to information necessary for the relevant purpose and require appropriate safeguards from service providers.

Bookings made through third-party platforms are also subject to those platforms’ privacy policies.

Providers currently used by Villa Rice:

• Vercel — website hosting. Processes technical request data such as IP address when you visit the site or send an enquiry.
• Vercel Web Analytics — anonymous, cookieless visitor statistics (see section 6).
• Google Maps — the map on our location page only loads if you choose to show it. Google then receives your request (including your IP address) and may set its own cookies, under Google’s privacy policy.
• Airbnb — booking platform. Our website reads the villas’ Airbnb availability calendar, which contains dates only, not guest details.
• WhatsApp and email — when you contact us or hand off an enquiry through these services, their providers process your messages under their own privacy policies.
• Google Analytics — website analytics, used only if you accept analytics cookies (see section 6).

We do not currently use an online booking engine, channel manager or online payment processor on this website. We will update this list before introducing one.

5.Payments

Payment information is handled according to the payment method selected at booking. Where a third-party payment processor collects card details, its privacy policy also applies.

Please do not send complete payment-card details through ordinary email or messaging services.

6.Cookies and similar technologies

Our website does not set its own cookies. It stores your cookie choice in your browser’s local storage (villa-rice-consent) so we don’t ask again on every visit. This is kept until you change it or clear your browser data.

Visitor statistics: we use Vercel Web Analytics to count visits and see which pages are viewed. It does not use cookies or store anything on your device, does not identify you, and does not track you across other websites. Visits are counted using a temporary anonymous identifier that is discarded after 24 hours.

Optional analytics: if you accept, we load Google Analytics to understand how the site is used (for example which pages are visited and whether enquiries are sent), with IP anonymisation enabled. Google Analytics sets cookies beginning with _ga, which typically last up to two years. We do not include your name, email or phone number in analytics data. We do not use advertising cookies.

Nothing that sets cookies is loaded unless you accept. You can change or withdraw your choice at any time through Cookie settings (also in the footer of every page). Withdrawing consent removes the Google Analytics cookies from this site. Browser settings may also allow you to block cookies, although some features may be affected.

7.International processing

Some technology providers may process information outside Indonesia. Where this occurs, we apply safeguards and meet the cross-border transfer requirements applicable to that processing.

8.Retention and security

We retain personal information only for as long as necessary for the purposes described in this policy, including applicable legal retention requirements and the handling of claims.

We use appropriate organisational and technical measures to protect personal information and restrict access to authorised persons. No electronic system can guarantee absolute security.

Where a personal-data incident requires notification, we will notify affected individuals and relevant authorities within the applicable legal deadlines.

9.Your rights

Subject to applicable law, you may request information about our processing, access to your personal information, correction, deletion, restriction or termination of processing, withdrawal of consent, and portability where applicable. You may also raise a complaint or seek remedies available under law.

Send requests to rik@nivaregroup.com. We may need to verify your identity before acting. We will respond within applicable legal deadlines and explain any lawful reason that prevents us from fulfilling a request.

10.Marketing

Where we send marketing communications, you may opt out using the unsubscribe method provided or by contacting us. Booking and service messages may still be sent where necessary to manage your reservation.

11.External links and updates

External websites have their own privacy policies.

We may update this policy as our services or legal obligations change. The current version and effective date will appear on this page. Where required, we will provide additional notice or obtain fresh consent.