1. Who we are
This website, rosepetalbali.com, is operated by PT Rose Petal Bali ("Rose Petal", "we", "us"), a foreign-investment limited liability company (PMA) registered in Indonesia. Rose Petal Bali operates a beauty centre in Uluwatu, Bali.
For privacy questions, contact us at [email protected]. Registered office: Jl. Labuansait, Desa/Kelurahan Pecatu, Kec. Kuta Selatan, Kab. Badung, Provinsi Bali, Kode Pos 80361, Indonesia.
2. Information we collect
We collect information in three ways:
- Information you provide directly — for example, your name, email, phone number, and booking preferences when you book an appointment, submit a contact or careers form, or message us via WhatsApp or email.
- Information collected automatically — when you visit the site, our analytics and advertising tools (described below) automatically collect technical and behavioural data such as your IP address (typically truncated), device and browser type, pages visited, time on page, referring URL, and approximate location (country/region).
- Information from third parties — if you book through our online booking partner (Fresha) or interact with our ads on Google or Meta, those platforms may share aggregated or de-identified information with us about how their users found and interacted with us.
We do not knowingly collect information from children under 16. We do not collect sensitive personal data through this website (medical history relevant to certain treatments is collected in person at the salon, not online).
3. How we use the information
We use the information we collect to:
- Respond to enquiries, manage bookings, and provide our services.
- Operate, maintain, and improve the website and our salon.
- Measure how people find and use our website (analytics).
- Run and measure online advertising on Google and Meta, including showing relevant ads to people who have visited our site.
- Comply with legal obligations and protect against fraud or misuse.
Where the GDPR or UK GDPR applies, the legal bases we rely on are: (i) consent for non-essential cookies and direct marketing; (ii) contract for managing your booking; (iii) legitimate interests for measuring and improving the site and protecting against fraud; and (iv) legal obligation where required.
4. Cookies and tracking technologies on this site
This website uses cookies and similar technologies provided by us and by third parties. The third-party services we currently use are listed below, together with the purpose of each. Identifiers shown match the tags on this page, so you can verify them in your browser's developer tools.
4.1 Google Analytics 4 (GA4)
Provider: Google LLC. Measurement ID: G-GZH9BMN3FG. Purpose: aggregate, privacy-respecting analytics about how visitors find and use the site. We have IP anonymisation enabled by default in GA4. You can opt out by installing the Google Analytics opt-out browser add-on. Privacy: policies.google.com/privacy.
4.2 Google Ads conversion tracking & remarketing
Provider: Google LLC. Conversion ID: AW-18031310447. Purpose: measure the effectiveness of ads we run on Google and (with your consent where required) show relevant ads on Google's network. We also use Google's cross-domain linker to share your session with our booking partner Fresha so a booking can be attributed to a click on our ad. You can manage Google ads personalisation at adssettings.google.com.
4.3 Meta Pixel (Facebook / Instagram)
Provider: Meta Platforms Ireland Limited. Pixel ID: 1588343922273599. Purpose: measure ads we run on Facebook and Instagram and (with your consent where required) show relevant ads to people similar to our existing visitors. You can manage Meta's ad preferences at facebook.com/adpreferences. Privacy: facebook.com/privacy/policy.
4.4 Microsoft Clarity
Provider: Microsoft Corporation. Project ID: wnvgs10avm. Purpose: anonymous session recordings and heatmaps that help us understand how visitors interact with our pages so we can improve them. Clarity masks form inputs and sensitive content by default. Privacy: privacy.microsoft.com/privacystatement.
4.5 Fresha booking system
Provider: Fresha Group Limited. When you click "Book Now" or any booking link, you are redirected to Fresha's platform, which is the data controller for the booking record itself. Fresha provides Rose Petal with the information you submit to complete the booking. Privacy: fresha.com/privacy-policy.
4.6 Google Fonts & Google Maps
Provider: Google LLC. We embed a Google Maps frame on the contact section of our homepage and load fonts from Google Fonts. Google may set cookies and receive your IP address as part of these requests.
4.7 Cloudflare
Provider: Cloudflare, Inc. We use Cloudflare for DNS and CDN. Cloudflare may set a small number of strictly-necessary cookies to deliver and secure the site (e.g. bot mitigation). Privacy: cloudflare.com/privacypolicy.
5. How to control cookies
Most browsers let you block or delete cookies through their settings. Doing so may affect site functionality, especially measurement of bookings. You can also use the opt-out and ad-preference links provided in section 4.
6. Sharing of information
We do not sell your personal information. We share information only with:
- Service providers who help us run the website and the salon (the providers listed in section 4, plus our hosting and email providers Cloudflare and Google Workspace).
- Advertising partners (Google, Meta) when you have visited our site or interacted with our ads, for measurement and remarketing purposes as described above.
- Authorities if required by law, regulation, or a valid legal request.
7. International transfers
Some of the providers above are based outside Indonesia (for example, in the United States, Ireland, or the United Kingdom). When we share information with them, we rely on the contractual and technical safeguards those providers offer, including standard contractual clauses where applicable.
8. Data retention
We keep booking records and customer correspondence for as long as necessary to operate the salon and meet our legal obligations under Indonesian tax and consumer-protection law. Analytics data is retained for the default period configured in each tool (typically 14 months for GA4 and Microsoft Clarity, and up to two years for Meta and Google Ads). We delete or anonymise records when they are no longer required.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal information, or to object to processing for direct marketing. Indonesian residents have the rights set out in Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi (the Personal Data Protection Law / "UU PDP"). Visitors in the European Economic Area or the United Kingdom have the rights set out in the GDPR / UK GDPR. To exercise any of these rights, email us at [email protected] and we will respond within a reasonable time.
10. Security
We use industry-standard measures to protect information transmitted to and from this website, including HTTPS for all pages and access controls on the systems we use. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the latest revision. Material changes will be highlighted on the website's homepage or by other reasonable means.
12. Contact
If you have any questions about this privacy policy or our data practices, please email [email protected] or write to PT Rose Petal Bali, Jl. Labuansait, Desa/Kelurahan Pecatu, Kec. Kuta Selatan, Kab. Badung, Provinsi Bali, Kode Pos 80361, Indonesia.
See also: Terms of Service · About Rose Petal