1. Introduction

We, Forever Promises Bali, take data protection seriously and are committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website.

2. Data Controller

PT. Forever Promises Bali

Jalan Bumbak No 22 Kerobokan, 80361 Kabupaten Badung, Indonesia

Email: hello@forever-promises.com

3. Types of Data We Collect

‍We collect the following types of personal data:

• Contact Information: Name, email address, phone number
• Payment Information: If applicable, payment details for transactions
• Usage Data: Information on how you use our website, such as IP address, browser type, and visited pages
• Cookies and Tracking Technologies: Information collected through cookies, analytics tools, and similar technologies (see section on Cookies)

4. Legal Basis for Data Processing

We process personal data based on the following legal grounds under the GDPR:

• Performance of a contract (Art. 6(1)(b) GDPR) – when you purchase a service
• Consent (Art. 6(1)(a) GDPR) – for cookies, newsletters, and marketing activities
• Legal obligations (Art. 6(1)(c) GDPR) – for compliance with tax and business regulations
• Legitimate interests (Art. 6(1)(f) GDPR) – to improve user experience and business operations

5. Cookies and Tracking Technologies

‍We use cookies to improve your browsing experience. Cookies are small text files stored on your device. We use:

• Essential Cookies: Required for website functionality
• Analytical Cookies: Help us understand website usage (Google Analytics, etc.)
• Marketing Cookies: Used for personalized advertising

You can manage your cookie preferences through our Cookie Consent Banner.

6. Data Sharing and Transfers

We only share personal data when necessary and ensure compliance with GDPR, including:

• Service Providers: Hosting providers, payment processors (PayPal, Stripe, etc.)
• Legal Compliance: When required by law
• International Data Transfers: If data is transferred outside the EU (e.g., to the US or Indonesia), we ensure compliance through Standard Contractual Clauses (SCCs) or equivalent safeguards

7. Data Retention

We store personal data only as long as necessary:

• Customer data: Retained for two years after the last transaction
• Marketing data: Retained until you withdraw your consent
• Legal obligations: Retained as required by tax and commercial laws

8. Your Rights under GDPR

As a data subject, you have the following rights:

• Right to Access (Art. 15 GDPR): Request a copy of your data
• Right to Rectification (Art. 16 GDPR): Correct inaccurate data
• Right to Erasure (Art. 17 GDPR): Request data deletion
• Right to Restriction (Art. 18 GDPR): Limit data processing
• Right to Data Portability (Art. 20 GDPR): Receive your data in a structured format
• Right to Object (Art. 21 GDPR): Withdraw consent at any time

To exercise your rights, contact us at hello@forever-promises.com.

9. Security Measures

We implement technical and organizational measures to protect your data from unauthorized access, loss, or misuse.

10. Updates to this Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date.

11. Contact Us

If you have any questions about this Privacy Policy, you can contact us:

• By email: hello@foreverpromises.com

‍