Privacy Policy – The Bali Local Business Directory

Effective Date: [NaN]
Last Updated: [30.08.2025]

Introduction

At Bali.Business, we are committed to protecting the privacy and personal information of Indonesian businesses and users of our platform. This Privacy Policy explains how we collect, use, store, and protect your information when you use our free business directory platform.

Our Commitment: We respect your privacy and are dedicated to maintaining the confidentiality and security of your personal and business information in accordance with Indonesian privacy laws and international best practices.

1. Information We Collect

Business Registration Information

When you register your Indonesian business on our platform, we collect:

Required Business Information:

Business name and trading name
Business category and industry type
Physical business address in Bali
Business owner name and contact person
Business phone number and email address
Business description and services offered
Business operating hours and availability

Optional Business Information:

Business website URL and social media links
Business photos and logo
Additional contact methods (WhatsApp, etc.)
Years in operation and business history
Special certifications or awards
Product/service pricing information

Account and Technical Information

User Account Data:

Username and display name
Account creation date and registration details
Login credentials (passwords are encrypted)
Account preferences and settings
Platform usage history and activity logs

Technical Information Automatically Collected:

IP address and geographic location
Device type, browser, and operating system
Page views, clicks, and navigation patterns
Time spent on platform and frequency of visits
Referral sources and search terms used

Communication Data

Platform Communications:

Messages sent through our contact forms
Support requests and customer service interactions
Feedback, reviews, and platform suggestions
Email communications and newsletters (if subscribed)

Chat and Community Features:

Messages sent through AtomChat platform features
User interactions and community discussions
Profile views and business connection activities

Optional Premium Service Information

Web Development Services:

Project requirements and specifications
Design preferences and branding materials
Technical requirements and hosting preferences
Payment information for premium services (processed securely)

2. How We Use Your Information

Platform Operation and Services

Business Directory Functionality:

Display your business listing to potential customers
Enable search and discovery of your business
Facilitate customer-business connections
Provide platform navigation and user experience

Account Management:

Create and maintain your business account
Authenticate user access and prevent unauthorized use
Provide account recovery and password reset services
Send important account and platform notifications

Communication and Support

Customer Support:

Respond to support requests and technical issues
Provide platform guidance and business listing assistance
Resolve disputes and address user concerns
Deliver announcements about platform updates and features

Business Communications:

Send platform updates and new feature announcements
Provide business development resources and tips
Share relevant Indonesian business news and opportunities (optional)
Deliver security alerts and important policy changes

Platform Improvement and Analytics

Service Enhancement:

Analyze user behavior to improve platform functionality
Identify technical issues and optimize platform performance
Understand user preferences and develop new features
Monitor platform security and prevent abuse

Aggregated Analytics:

Generate statistical reports about platform usage (anonymized)
Track regional business development trends in Bali
Measure platform effectiveness and user satisfaction
Support research on Indonesian small business development

Legal and Compliance Purposes

Legal Requirements:

Comply with Indonesian data protection and business regulations
Respond to valid legal requests from Indonesian authorities
Protect against fraud, abuse, and illegal activities
Enforce our Terms and Conditions and platform policies

3. Information Sharing and Disclosure

Public Business Information

Publicly Displayed Information: Your business listing information is intentionally public and visible to:

Potential customers searching for businesses
Other registered businesses on the platform
Website visitors and search engines
Social media platforms and business directories (through sharing features)

Public Information Includes:

Business name, category, and description
Business address and contact information
Business hours and availability
Photos and promotional materials
Customer reviews and ratings (when available)

Information We DO NOT Share

Private Information Protected:

Your account passwords and login credentials
Private messages and internal communications
Personal email addresses (unless part of public business contact)
Technical data like IP addresses and device information
Financial information related to premium services

Limited Sharing Scenarios

Third-Party Service Providers: We may share limited information with trusted service providers who help us operate the platform:

Hosting providers for secure data storage and platform operation
Email service providers for sending platform communications
Analytics services for understanding platform usage (anonymized data only)
Payment processors for premium service transactions (encrypted)

Legal Requirements: We may disclose information when required by Indonesian law:

Valid legal requests from Indonesian government authorities
Court orders or legal proceedings in Indonesian jurisdiction
Protection against fraud, abuse, or illegal activities
Emergency situations involving public safety

Business Transfers

In the unlikely event of business sale, merger, or acquisition:

User data may be transferred to new ownership
Users will be notified in advance of any ownership changes
New owners must commit to maintaining privacy protections
Users may opt-out or delete accounts before transfer

4. Data Security and Protection

Security Measures

Technical Safeguards:

Encryption: All sensitive data is encrypted during transmission and storage
Secure Servers: Platform hosted on secure servers with regular security updates
Access Controls: Limited employee access to personal information on need-to-know basis
Regular Monitoring: Continuous monitoring for security threats and vulnerabilities
Backup Systems: Regular data backups to prevent information loss

Administrative Safeguards:

Staff Training: Regular privacy and security training for all team members
Access Management: Individual user accounts with appropriate permission levels
Incident Response: Established procedures for responding to security incidents
Vendor Management: Security requirements for all third-party service providers

User Security Responsibilities

Account Protection:

Strong Passwords: Use unique, complex passwords for your account
Secure Access: Log out completely when using public or shared computers
Regular Updates: Keep your contact information and account details current
Suspicious Activity: Report any unauthorized access or suspicious activity immediately

Information Sharing:

Public Listings: Remember that business listings are public and searchable
Communication Security: Be cautious when sharing sensitive business information
Photo Privacy: Ensure uploaded photos don’t contain private or sensitive information

5. Data Retention and Deletion

Information Retention Periods

Active Account Data:

Business listing information: Retained while account is active
Account activity logs: Retained for 24 months for security and analytics
Communication records: Retained for 12 months for support purposes
Technical analytics: Retained for 6 months for platform improvement

Inactive Account Data:

Accounts inactive for 24+ months may be archived or deleted
Users will be notified before account deletion occurs
Critical business information may be retained longer as required by law

Account Deletion Rights

User-Initiated Deletion:

Complete Account Deletion: Remove all personal and business information
Partial Information Removal: Delete specific information while maintaining account
Business Listing Removal: Remove public listing while preserving account access

Deletion Process:

Request Submission: Contact support with deletion request and account verification
Verification Process: Confirm account ownership and deletion scope
Processing Time: Complete deletion within 30 days of verified request
Confirmation: Email confirmation when deletion is completed

Information That May Be Retained:

Legal Compliance: Information required by Indonesian law or regulation
Security Records: Anonymized security logs for platform protection
Aggregated Analytics: De-identified data used for platform improvement
Communication Records: Records of legal notifications and policy agreements

6. Your Privacy Rights

Access and Control Rights

Information Access:

View Personal Data: Access all personal and business information we store about you
Data Portability: Receive a copy of your information in a standard, readable format
Usage Reports: Understand how your information has been used and shared
Third-Party Sharing: Learn about any third parties who have received your information

Information Control:

Update Information: Modify or correct your business and account information at any time
Privacy Settings: Control visibility of certain business information elements
Communication Preferences: Choose which platform communications to receive
Account Deactivation: Temporarily disable your account while retaining information

Correction and Update Rights

Information Accuracy:

Immediate Updates: Correct inaccurate business information through your account dashboard
Bulk Changes: Request assistance with major information updates or corrections
Verification Support: Get help verifying and updating complex business information
Historical Corrections: Request correction of past information that was inaccurate

Complaint and Appeal Rights

Privacy Concerns:

Direct Contact: Raise privacy concerns directly with our support team
Appeal Process: Challenge decisions about information handling or account actions
External Authorities: Contact Indonesian data protection authorities if concerns remain unresolved
Resolution Timeline: Receive response to privacy complaints within 14 days

7. Cookies and Tracking Technologies

Types of Cookies Used

Essential Cookies:

Authentication: Remember your login status and account preferences
Security: Protect against fraud and unauthorized access attempts
Platform Function: Enable core platform features like search and navigation
Error Prevention: Prevent technical errors and improve platform stability

Analytics Cookies:

Usage Analytics: Understand how users navigate and use the platform
Performance Monitoring: Identify technical issues and optimization opportunities
Feature Effectiveness: Measure success of platform features and improvements
Regional Insights: Understand business development patterns across Bali regions

Optional Enhancement Cookies:

Personalization: Remember your language preferences and display settings
Content Recommendations: Suggest relevant business connections or resources
Communication Preferences: Remember your notification and email preferences

Cookie Management

Browser Controls:

Cookie Settings: Adjust cookie preferences in your browser settings
Selective Blocking: Block specific types of cookies while allowing others
Regular Clearing: Clear cookies periodically for enhanced privacy
Third-Party Controls: Manage cookies from external services and analytics platforms

Platform Controls:

Account Settings: Adjust tracking preferences within your platform account
Communication Controls: Choose which data is used for platform communications
Analytics Opt-Out: Request exclusion from certain analytics and tracking activities

8. International Data Transfers

Data Storage Location

Primary Storage:

Indonesian Servers: User data primarily stored on servers within Indonesia when possible
Regional Backup: Secure backup systems may be located in neighboring ASEAN countries
Cloud Services: International cloud providers with strong security standards may be used
Data Sovereignty: Compliance with Indonesian data localization requirements

Transfer Protections

Security Standards:

Encryption: All international data transfers are fully encrypted
Contractual Protections: Service providers must meet Indonesian privacy standards
Regular Audits: International partners undergo regular security and privacy audits
User Consent: Users are informed when data may be processed internationally

User Control Over Transfers

Opt-Out Options:

Local Processing: Request that data be processed only within Indonesia where possible
Service Limitations: Understand that opting out may limit some platform features
Alternative Options: Access alternative features that don’t require international processing

9. Children’s Privacy Protection

Age Restrictions

Platform Requirements:

Minimum Age: Platform is intended for users 18 years and older
Business Context: Platform designed for legitimate business owners and operators
Verification Rights: We may request age verification for account registration
Parent/Guardian Consent: Users under 18 require explicit parent or guardian consent

Child Information Protection

Information Safeguards:

No Targeting: We do not knowingly collect information from children under 18
Immediate Removal: Any discovered child information is immediately deleted
Parent Notification: Parents are notified if we discover child information collection
Enhanced Protection: Extra security measures for any accounts involving minors

10. Privacy Policy Updates

Change Notification

Update Process:

Advance Notice: Users receive 30 days advance notice of significant privacy policy changes
Email Notification: Important changes communicated via registered email addresses
Platform Announcements: Policy updates highlighted prominently on platform
Version History: Previous versions of privacy policy remain available for reference

User Consent for Changes

Continued Use: Continued platform use after policy updates constitutes acceptance of changes Opt-Out Rights: Users may delete accounts if they don’t agree with policy updates Granular Consent: Significant changes may require explicit user consent before implementation Impact Assessment: Major changes will include explanation of how they affect users

11. Contact Information and Support

Privacy Questions and Requests

Primary Contact:

Email: privacy@bali.business
Subject Line: Use “Privacy Request” for faster processing
Response Time: All privacy inquiries answered within 48 hours
Language Support: Support available in English and Bahasa Indonesia

Data Protection Requests

Supported Request Types:

Information Access: Request copy of all personal data we store
Information Correction: Update or correct inaccurate information
Account Deletion: Complete removal of account and associated data
Usage Restrictions: Limit how your information is used or shared
Complaint Resolution: Address privacy concerns or policy violations

Emergency Privacy Concerns

Immediate Response:

Security Incidents: Report suspected data breaches or security issues
Unauthorized Access: Report suspected unauthorized account access
Identity Theft: Report suspected misuse of your business information
24/7 Contact: Critical privacy and security issues receive immediate attention

12. Indonesian Law Compliance

Legal Framework

Applicable Laws:

Indonesian Constitution: Article 28G regarding privacy rights
Law No. 19/2016: Electronic Information and Transactions (ITE Law)
Government Regulation 71/2019: Electronic System and Transaction Operation
Ministry Regulations: Current Indonesian data protection and privacy regulations

Regulatory Compliance

Government Cooperation:

Authority Requests: Compliance with valid requests from Indonesian data protection authorities
Legal Proceedings: Cooperation with Indonesian legal proceedings and investigations
Regulatory Reporting: Compliance with required privacy and security reporting obligations
Policy Alignment: Regular review and alignment with evolving Indonesian privacy laws

13. Your Acknowledgment and Consent

By using Bali.Business, you acknowledge that:

✅ I have read and understood this complete Privacy Policy
✅ I consent to the collection and use of my information as described
✅ I understand my privacy rights and how to exercise them
✅ I agree to the public display of my business listing information
✅ I will keep my information accurate and up-to-date
✅ I understand how to contact support for privacy questions or concerns

Privacy Policy Summary

Quick Reference for Users:

🔒 We Protect: Your personal information, account security, and business data
👁️ We Display: Your business listing information publicly to help customers find you
🚫 We Don’t Share: Private account details, passwords, or personal communications
✏️ You Control: Your account information, privacy settings, and communication preferences
📞 We Support: Privacy questions, account issues, and information requests
🇮🇩 We Comply: With Indonesian privacy laws and international best practices

Thank you for trusting Bali.Business with your information. We are committed to maintaining your privacy while helping your Indonesian business succeed.

For questions about this Privacy Policy, please contact our privacy team at hello@bali.business.