Privacy & Data Statement
Last updated: 20 August 2026
This Privacy & Data Statement explains how AF Creative Bali ("we", "us", "our") collects, uses, and protects your personal data when you visit our website, book a studio, or contact us via WhatsApp. We aim to handle your data in line with Indonesia's Personal Data Protection Law (UU No. 27 of 2022).
1. What we collect
When you book a studio or contact us, we may collect:
- Name
- Phone number / WhatsApp number
- Email address
- Booking details (date, time, studio, number of people)
- Payment confirmation details (we do not store full card numbers — payments are processed securely by our payment provider)
- Messages you send us via WhatsApp or our website contact form
2. How we use your data
We use your data only to:
- Confirm and manage your booking
- Send booking confirmations, reminders, and updates (including via WhatsApp)
- Respond to enquiries
- Process payment for your booking
- Improve our studio services
We do not sell your personal data, and we do not use it for purposes beyond running and improving the studio booking service.
3. Who we share it with
We share limited data with:
- Our booking system provider (SimplyBook.me / Setmore), to manage your reservation
- Our payment processor (Stripe / Xendit), to process your payment securely
- WhatsApp, when we send you booking confirmations or respond to your enquiries via WhatsApp Business
We do not share your data with any other third party except where required by Indonesian law.
4. WhatsApp communication
If you message us or book via WhatsApp, your phone number and message content are processed through WhatsApp's own platform, which has its own privacy policy. By messaging us on WhatsApp, you consent to us using that channel to communicate booking-related information with you.
5. Data retention
We retain booking and contact data only for as long as needed to fulfil your booking, meet accounting/tax obligations, and respond to any related enquiries afterward. You can request deletion of your data at any time (see Section 7).
6. Your rights
Under Indonesian data protection law, you have the right to:
- Ask what personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data, where we are not required to retain it for legal or accounting reasons
- Withdraw consent to receive WhatsApp communications from us at any time
7. Contact
To exercise any of these rights, or if you have questions about how we handle your data, contact us at [EMAIL ADDRESS] or via WhatsApp at [WHATSAPP NUMBER].
8. Changes to this statement
We may update this statement from time to time to reflect changes in our practices or the law. The current version will always be available on our website.
This document is a starting template, not legal advice. As we process personal data (including via WhatsApp and a payment provider) for a Bali-based business, it is worth a brief local legal review before publishing to confirm compliance with Indonesia's PDP Law.
