Privacy policy

1. Controller

The controller responsible for data processing on this website is:

PT AVANTI INDO DEV (trading as Lombok Horizon)
Medori Putih Homestay, Jalan Pemutih No. 01
Banjar Dinas Labuan Sait, Desa Pecatu
Kec. Kuta Selatan, Kab. Badung, Bali 80361, Indonesia
Email: hi@lombokhorizon.com

We have not appointed a data protection officer. We are not established in the EU and have not appointed an Art. 27 GDPR representative in the Union.

2. Your rights at a glance

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority. To exercise any of these rights, contact us at the address above.

3. Hosting and server log files

This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) on Cloudflare Workers, and is served from Cloudflare's global edge network, including data centres in the EU. When you visit the site, the host automatically collects and stores information in server log files that your browser transmits: IP address, browser type and version, operating system, referrer URL, and the time of the request. This data is not merged with other data sources. The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). We do not store these log files ourselves; Cloudflare retains them only for the limited periods required for security and operational purposes.

4. Fonts

We host all fonts on our own server. No connection to Google Fonts or other third-party font services is made, and no data about you is transmitted to such providers when the site loads its fonts.

5. Buyer profile and contact form

When you submit the buyer-profile form, we process the data you enter (for example name, email, phone/WhatsApp, country of residence, budget, timeline and your message) in order to respond to your enquiry and to prepare a possible contract. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and, for any purely voluntary fields, Art. 6(1)(a) GDPR (consent). We keep enquiry data for as long as needed to handle your request and thereafter in line with statutory retention periods, then delete it.

6. Email updates

We reply to enquiries by email. We do not send newsletters or automated email sequences. If we introduce email updates later, we will only send them with your prior consent (Art. 6(1)(a) GDPR) and will name the service provider used here.

7. Contact by WhatsApp

If you choose to contact us via WhatsApp, your communication is processed through WhatsApp (Meta Platforms Ireland Ltd.), which may transfer data to servers outside the EU, including the USA. We have no influence over WhatsApp's own processing. If you prefer to avoid this, contact us by email or through the form. The legal basis for handling a WhatsApp message you send us is Art. 6(1)(b)/(f) GDPR.

8. Cookies and analytics

This site sets no tracking cookies and uses no analytics tools or third-party embeds. Only technically necessary data processing takes place, as described above. If we introduce analytics later, we will describe it here and, where required, ask for your consent first.

9. Data transfer to a third country

Because our team operates from Indonesia, some data you send us (for example enquiry details) is accessed and processed there. Indonesia is a country outside the EU/EEA for which no EU adequacy decision exists. We take appropriate measures to protect your data and process it only as described in this policy. The legal basis for such transfers, where they relate to a contract or steps taken at your request, is Art. 49(1)(b) GDPR.

10. SSL/TLS encryption

This site uses TLS encryption for security and to protect the transmission of the content you send us. You can recognise an encrypted connection by the "https://" in your browser's address bar.