Privacy notice

Your details, kept with care

Version of 17 October 2026.

Who we are

ANAKŌSA Villa Management, Bali, Indonesia. For anything about your personal data, write to concierge@anakosa.com.

What we keep

When you enquire: your name, email, phone or WhatsApp, the house, dates, number of guests, the occasion and your message. When you join the Circle: also your country, a password (stored only as a one-way hash, never readable, not even by us), your preferences, and the stays you complete with us.

Why we keep it

To answer you, to prepare and look after your stay, to apply your Circle rate and privileges, and to recognise you when you return. We do not sell your data, share it for advertising, or use tracking cookies.

Who sees it

Only the ANAKŌSA team, signed in with a personal password, and the host of the house you stay in, for what your stay needs. Emails pass through our email and hosting provider. Nothing else leaves us unless the law requires it.

How we protect it

Your data lives in a private database on our own server, outside the public website, reached only over an encrypted connection (HTTPS). Your phone number, preferences and messages are encrypted inside the database. Passwords are hashed. Sign-in attempts are limited, and every change the team makes is logged. A protected backup is made each day and kept for fourteen days.

How long we keep it

Your guest record, stays and preferences: for as long as you are our guest, so that we can recognise and look after you, and as our accounts require. If you close your Circle account, your page and sign-in end at once, while your record stays with our team so your history is waiting if you return. Enquiries that did not become a stay: twenty-four months. Network addresses used to stop abuse: ninety days.

Your rights

You may see, download and correct your data at any time from your Circle page, and close your account there. To ask for your personal data to be erased completely, or to withdraw your consent, write to concierge@anakosa.com; we will answer within the time the law allows, keeping only what the law obliges us to keep. We follow Indonesia’s Personal Data Protection Law (Law No. 27 of 2022), and treat guests from every country with the same care.

Cookies

Only what signing in needs: one session cookie, and one small marker that tells the page you are signed in. No advertising or analytics cookies.