Legal

Privacy Policy

This policy describes how Ubud Atelier collects and uses personal data when visitors interact with ubudatelier.com, in particular through the contact and quote request form. It applies to data you submit directly and to data automatically collected by our hosting and analytics infrastructure.

Data Controller

The data controller is VICTORY 999, a sole proprietorship (Wiraswasta) owned by I Gede Sumarna and registered in Indonesia. The registered office is at Jl. Raya Kerobokan No 99, Lingkungan Dukuh Sari, Kelurahan Kerobokan Kelod, Kecamatan Kuta Utara, Kabupaten Badung, Bali, Indonesia. The director of publication is I Gede Sumarna. For any question related to your personal data, contact us at [email protected].

What Data We Collect

We collect data through three main channels.

From the contact form: name, company name, email address, phone (if provided), project type, destination, project message, and any other information you choose to share. We treat what you submit as deliberately offered for a commercial inquiry.

From server logs: our hosting provider Cloudflare automatically records technical information including IP address, browser type, timestamp, and the URL requested. This data is used to keep the site available and to defend it against abuse.

From analytics: see the Cookies and Analytics section below for what is recorded by Google Analytics and Cloudflare Web Analytics.

Why We Collect It

We collect and process this data to:

  • respond to commercial inquiries received through the contact form,
  • prepare project quotes, proposals, and follow-up correspondence,
  • coordinate logistics, production, and delivery for accepted projects,
  • maintain a B2B commercial relationship with active clients and qualified prospects.

Legal Basis

For visitors covered by the EU General Data Protection Regulation, the legal basis for processing is:

  • legitimate interest under Article 6.1.f, for handling B2B commercial prospects who actively initiate contact with us through the form,
  • consent under Article 6.1.a, for any future direct marketing communication you opt into.

We do not process data on the basis of contractual necessity unless and until a written commercial agreement is in place.

Retention Period

We keep personal data only as long as is necessary for the purposes above:

  • active prospects: up to 3 years from the date of last contact,
  • active commercial relationships: for the full duration of the relationship and 10 years after, in line with applicable commercial code requirements covering invoices and supporting documents,
  • server logs: held by our hosting provider Cloudflare under their own retention rules.

Data Sharing and Recipients

Personal data may be shared with:

  • our internal team and authorised collaborators involved in handling the inquiry or executing the project,
  • our hosting provider, Cloudflare, which operates the technical infrastructure of ubudatelier.com,
  • our analytics providers (Google Analytics and Cloudflare Web Analytics), for site usage measurement,
  • logistics partners involved in the execution of accepted projects, including freight forwarders, customs brokers, and installation teams at destination.

We do not sell, rent, or otherwise commercially trade personal data to any third party under any circumstance.

International Transfers

Because Ubud Atelier operates from Bali, Indonesia and uses hosting and analytics infrastructure based in the United States, your data may be processed and stored in Indonesia and in the United States. Where required by applicable law, we rely on Standard Contractual Clauses or other recognised safeguards to govern those transfers.

Cookies and Analytics

ubudatelier.com uses two analytics tools.

Google Analytics: this service uses cookies to track aggregate usage patterns, including pages viewed, session duration, and approximate geographic origin. IP addresses are processed in anonymised form. You can read more in the Google privacy policy at policies.google.com/privacy.

Cloudflare Web Analytics: this service is privacy-friendly and does not use tracking cookies or collect personal identifiers from your browser.

EU visitors have the right to refuse non-essential cookies. You may use your browser settings or any opt-out tool of your choice to limit or disable analytics cookies.

Your Rights

Depending on your jurisdiction, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. To exercise any of these rights, contact us at [email protected] with reasonable proof of identity. We respond to verified requests within 30 days.

Complaints

If you believe your data has been processed in a way that violates applicable law, you may lodge a complaint with your national data protection authority. EU and French residents may file with the Commission Nationale de l'Informatique et des Libertés (CNIL) at cnil.fr.

Updates

This policy may be updated to reflect changes in our practices or in applicable law. The effective date below indicates when the current version was published.

Effective date: May 7, 2026.