Privacy, plainly.
We collect as little as we can, and we are honest about the rest. Here is what we keep, who helps us handle it, how long we hold it, and the choices you have.
What we collect
When you enquire or book, we keep your name, contact details, stay dates, party size and any notes you share, nothing more than we need to arrange your stay.
If you start the booking form and enter your details but leave before sending, we may keep what you entered as a partial enquiry, so we can follow up with you. We rely on our legitimate interest in following up with a guest who was partway through booking. You can ask us to delete it at any time.
With your consent, the site loads measurement and advertising tools that record how pages and the booking flow are used, and set cookies or similar identifiers to do so. Nothing in this group loads until you accept it.
How we use it
To answer your messages, confirm bookings, arrange transfers and prepare your lodge.
To follow up on an enquiry you began but did not finish, based on the legitimate interest described above.
With your consent, to measure how the site is used (Google Analytics 4 and Tag Manager) and to understand and improve our advertising (the Meta Pixel, which lets us measure and target ads on Facebook and Instagram). You can decline this or withdraw it at any time, at no cost to you.
We do not sell your details.
Cookies, analytics & advertising
We use three groups. Necessary cookies keep the site secure, carry your booking through and remember your preferences, and are always on. Analytics cookies (Google Analytics 4 and Tag Manager) show us how pages are read and where the booking flow is left. Marketing cookies (the Meta Pixel) help us measure and improve our advertising on Facebook and Instagram.
The analytics and marketing groups are off by default and load only after you accept them. You can review, change or withdraw your choice at any time through the Cookie preferences link in the footer, as easily as you gave it.
Who helps us handle your data
We use a few trusted providers to run the site, take payments and look after your stay: Supabase (our database and file storage), Resend (sending and logging our emails), Netlify (hosting), Xendit (processing bank-transfer and card payments) and dhananjaya.id, our booking and reservations partner. Only after you consent, Google (Analytics 4 and Tag Manager) and Meta (the Pixel) also receive site-usage data.
Google and Meta may process data on servers in the United States, outside the EEA and the UK. Where your data leaves the EEA or the UK, we rely on the safeguards those providers put in place for such transfers, including the standard contractual clauses approved for this purpose.
How long we keep it
Enquiries and booking correspondence: while we are in contact, and up to 24 months after your last stay or message, then deleted or anonymised. Records tied to an actual paid booking, such as invoices, are kept for as long as Indonesian tax law requires, currently up to 10 years.
Partial enquiries (details entered but not sent): up to 6 months, then deleted.
Email delivery logs at Resend: up to 12 months.
Analytics data at Google: retained on a rolling window of up to 14 months, then aggregated.
Your choices
You can ask what we hold about you, correct it, ask us to delete it, or object to a use, by writing to reservations@dhananjaya.id. We answer within 30 days.
You can change or withdraw your cookie consent at any time using the Cookie preferences link in the footer.