Privacy
Privacy Policy
1. Controller
PT Sanders, Jl. Raya Bumbak, Kerobokan, Kec. Kuta Utara, Kabupaten Badung, Bali 80361, Indonesia. Represented by Julius Sanders. For privacy matters: [email protected]
2. Our approach
We collect as little data as possible. This website sets no advertising cookies, builds no user profiles and shares no data for advertising purposes.
3. Hosting and server logs
This website is hosted by Cloudflare, Inc. When you open a page, technically necessary data is processed, in particular your IP address, the date and time, the page requested, the amount of data transferred, your browser and your operating system. This is required to deliver the site and keep it secure. The legal basis is our legitimate interest in secure and functioning operation under Art. 6(1)(f) GDPR. Cloudflare may set a technically necessary security cookie to prevent abuse.
4. Cookies
We use no cookies for advertising or analytics. Only technically necessary cookies are used, for which no consent is required. That is why this site has no cookie banner.
5. Analytics
We use Cloudflare Web Analytics to see how often our pages are viewed. It works without cookies, without recognising individuals and without cross-device tracking. No user profiles are created. The legal basis is our legitimate interest in privacy-friendly measurement under Art. 6(1)(f) GDPR.
6. Contact form, email and WhatsApp
If you write to us through the form, by email or by WhatsApp, we process the information you provide in order to answer you. This is usually your name, your email address, the content of your message and whether you are looking to buy, to build or are still deciding. The legal basis is Art. 6(1)(b) GDPR for enquiries relating to a possible contract, otherwise Art. 6(1)(f) GDPR. Form submissions are transmitted via Formspark (Trampoline Software SRL, Belgium) and stored in Ireland and Germany, within the EU. Email is processed through Google Workspace. WhatsApp is operated by WhatsApp Ireland Ltd., and their terms apply in addition if you contact us there. You can always write to us by email instead.
7. Free guide
If you request our free guide, we process your name and email address in order to send it to you. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw that consent at any time by sending a short message to [email protected].
8. Booking a call
We use Cal.com for call bookings. The calendar is loaded from Cal.com only after you actively click to open it, so simply visiting the page sends no data to Cal.com. Once open, your name, email address, chosen time and time zone are processed so the call can take place. The legal basis is Art. 6(1)(b) GDPR.
9. Fonts and external content
All fonts are served from our own server. This website loads no fonts, scripts or images from third-party servers, so no data is transferred to them.
10. Processing outside the European Union
The controller is based in Indonesia, and some of our service providers also process data outside the EU. Where this happens, it is because it is necessary to answer your enquiry or perform a contract, or because you have consented, and we select providers with appropriate safeguards in place, in particular standard contractual clauses.
11. How long we keep data
We keep enquiries and messages for as long as we need them to respond and to meet legal obligations, and delete them afterwards. Server logs are deleted automatically after a short period.
12. Your rights
You have the right to access the data we hold about you, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on a legitimate interest. You can withdraw any consent at any time. A message to [email protected] is enough.
13. Right to complain
You can complain to a data protection authority if you believe your data is not being processed lawfully.
14. Changes
We update this policy when our website or the legal position changes.
Last updated: October 2026