Privacy policy

Who is responsible

Mangroove Bay Boutique Hostel in Sumberkima, Bali, Indonesia is responsible for personal information processed through this website.

For privacy questions or requests, contact us at mangroovebay@gmail.com.

Information we collect

We collect only the information needed to operate the website and respond to guests:

• Information you submit, including your name, email address and message, together with the page and form used to send it.
• Technical request information, such as an IP address, browser or device details, requested URL and date and time, which may be processed by our hosting platform for delivery, security and troubleshooting.
• If you allow Google Analytics, pseudonymous usage information such as pages viewed, session activity, approximate location and browser or device type.
• Anonymous audience measurements from cookieless PostHog and Cloudflare analytics, including page views, selected interactions, aggregate country and referrer information, and website performance.

How we use information

We use information to:

• answer enquiries and take steps you request before a booking or stay;
• operate, secure, troubleshoot and prevent abuse of the website and contact form;
• understand and improve website use through cookieless PostHog and Cloudflare analytics and, when you allow it, Google Analytics; and
• meet legal obligations and protect guests, Mangroove Bay and others where necessary.

Services that process information

We use a small number of providers to operate this website. They process information under their own terms and privacy notices:

Cookies and local storage

The website saves your analytics choice in your browser's local storage. This preference is needed to remember whether you allowed or declined analytics.

If you allow analytics, Google Analytics may set first-party cookies such as _ga to distinguish visits and sessions. This website has no visitor login, comment or publishing cookies.

PostHog and Cloudflare audience measurement operates without analytics cookies or browser storage. PostHog uses a short-lived, irreversible server-side hash to estimate anonymous visitors and does not create person profiles.

Your choices

Google Analytics is optional. Declining it does not limit the website. You can change your choice at any time through the Cookie settings button shown on the site.

Cookieless PostHog and Cloudflare analytics remains limited to anonymous audience, interaction and performance measurement; neither receives the information you enter in the contact form.

The Kuula tour loads automatically when you visit the immersive tour page. Providing contact-form information is optional, but we need a name, a working email address and a message to reply; you can instead contact us by email or WhatsApp.

Your privacy rights

Depending on the law that applies to you, you may ask us to:

• confirm whether we hold personal information about you and provide access to it;
• correct information that is inaccurate or incomplete;
• delete, restrict or object to certain processing where the law allows; and
• withdraw consent for future processing that relies on your consent.

How long we keep information

We keep enquiries only as long as reasonably needed to reply, provide guest service, maintain necessary business records, resolve disputes and meet legal or security obligations.

A visitor IP address is used for a short contact-form rate-limit window. Hosting, email and analytics providers retain information according to their configured settings and policies.

International processing

Our service providers operate internationally, so information may be processed outside Indonesia or your country. Where required, we and our providers use appropriate contractual or legal safeguards for those transfers.

Security and children

We use reasonable technical and organisational measures to protect information, but no internet transmission or storage system can be guaranteed completely secure.

The website is for travellers and is not designed to collect information directly from children. A parent or guardian should contact us on a child's behalf.

External booking and social services

Our booking engine, WhatsApp, Google Maps and social-media links open services operated by other organisations. Their privacy practices apply once you visit or communicate through those services. We do not collect payment-card details on this website.

Changes to this policy

We may update this policy when the website, providers or legal requirements change. The latest version and revision date will appear on this page.