Privacy & Cookies

Last updated 5 September 2026.

Who is responsible for your data

Kubu Gajah Villas is a Usaha Mikro (sole proprietorship) operated by Tjokorda I.A Sri Krisna Dewi, registered in Indonesia under NIB 9120204950856, at Jl. Kesari 7 Batu Jimbar, Kel. Sanur, Kec. Denpasar Selatan, Kota Denpasar, Bali 80228, Indonesia. We are the controller of the personal data described here. To ask what we hold about you, to correct it, or to have it deleted, write to stay@kubugajah.com.

What we collect, and why

When you enquire or message us — your name, email address, the dates you ask about and whatever you write to us. We also record the IP address and browser the form was sent from, to block automated spam. We use this to answer you and arrange your stay.
When you book — booking and guest details, your stay dates, and the payment record. We need these to hold the reservation and to meet Indonesian tax and accommodation-reporting obligations.
When you use this website — a session cookie so pages work, and, only if you agree, analytics cookies described below. We do not sell personal data, and we do not use it for advertising.

Who else processes it

We use these providers. Each receives only what its job requires.

Provider	What it receives	Why
Hostaway	Booking, guest and message data	The channel manager our reservations and guest messaging run on
Anthropic	The text of your message thread with us, your first name, and which villa and dates it concerns	To draft a suggested reply for a member of our team. See below
PayPal	Payment details you enter with them	To take payment. We never see or store your card number
Amazon Web Services	Everything above, at rest	Hosting, database and the email we send you
Google	Your IP address and browser details	The map on our location page. Loading that page contacts Google

About the reply assistant

When you message us, the conversation so far is sent to Anthropic's Claude model to draft a suggested reply. A person at Kubu Gajah reads and approves every message before it is sent to you — nothing is sent automatically. Anthropic processes the text under its commercial API terms, which state that inputs are not used to train its models. If you would rather we did not do this, tell us and we will handle your thread manually.

Cookies

This site sets one cookie: a session cookie that keeps pages working while you browse. It carries no advertising identifier, and we cannot identify you from it.

Google Analytics tells us how many people visit and which pages are useful. In the UK, Switzerland and across the European Economic Area we ask first, through a banner, and nothing is written unless you accept — decline and the site behaves exactly the same. Elsewhere these cookies are on by default and you can decline at any time using the banner.

We never enable advertising cookies, and we do not ask for them. To change your answer, clear this site's data in your browser and the banner returns.

How long we keep it

Booking and payment records are kept for as long as Indonesian tax and accounting rules require. Enquiries that never became a booking are kept while they are still useful to answer and then removed. Analytics data is retained by Google for at most 14 months.

Where your data goes

Our servers are in Singapore and Japan, and the providers above operate in the United States and elsewhere. This means your data is transferred outside Indonesia and outside the country you are writing from.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Write to stay@kubugajah.com and we will reply within 30 days. If you booked through Airbnb, Booking.com or Expedia, that platform holds its own copy under its own policy, and you will need to ask them separately.

See also our booking terms and business information.