This Privacy Policy explains how PT. Palma Islands Properties (“Palma Islands,” “we,” “us,” or “our”) collects, uses, stores, and protects your personal data when you submit your information through our Meta (Facebook/Instagram) Lead Generation Forms.
We are committed to protecting your privacy in compliance with Indonesia’s Law No. 27 of 2022 on Personal Data Protection (UU PDP) and applicable international standards including the GDPR where relevant. By submitting our lead form, you confirm that you have read and understood this policy.
2. What Data We Collect
When you submit our Meta Lead Generation Form, we collect the following:
Full name
Email address
WhatsApp / phone number
Nationality or country of residence
Investment budget range and property preferences
We do not collect sensitive data such as passport numbers, bank account details, or health information through lead forms.
3. How We Collect It
Your data is collected through Meta Lead Generation Forms embedded within our Facebook and Instagram advertisements. When you tap “Submit,” your data is transmitted from Meta’s platform to our secure systems. If you follow up by WhatsApp, email, or phone, information you share during that conversation may also be retained.
4. Why We Collect It and Legal Basis
We process your data for the following purposes, based on your explicit consent given at the time of form submission:
To contact you via WhatsApp, email, or phone with villa listings, pricing, and availability
To schedule site visits, virtual tours, or private consultations
To send marketing updates about Bali real estate investment opportunities
To match your investment profile to appropriate properties and ownership structures (leasehold, PT PMA)
To share relevant data with notaries (PPAT) and legal partners during the due diligence and transaction phase — only upon your explicit instruction
You may withdraw your consent at any time without affecting the lawfulness of prior processing.
5. Data Storage and Security
Your data is stored securely within our CRM system and accessible only to authorised Palma Islands team members. We implement industry-standard technical and organisational measures to protect your data against unauthorised access, loss, or misuse.
We retain your personal data for a maximum of 24 months from your last interaction with us. If a property transaction is completed, data may be retained for the duration required by Indonesian law. Data is securely deleted when no longer needed.
6. Third-Party Sharing
We do not sell, rent, or share your data with unrelated third parties for commercial purposes. Your data may be shared only with:
Notaries and PPAT — for property due diligence and transaction registration, upon your instruction
Legal and tax consultants — for PT PMA establishment or leasehold structuring, at your request
CRM and marketing technology providers — who act as data processors under our instruction and are bound by data processing agreements
Law enforcement or regulatory authorities — where required by Indonesian law or court order
7. Your Rights
Under UU PDP and GDPR, you have the right to:
Access the personal data we hold about you
Rectify any inaccurate or incomplete data
Erase your data from our systems
Withdraw consent at any time
Restrict how we process your data
Object to marketing communications
Lodge a complaint with Indonesia’s data protection authority (BSSN / Kominfo)
To exercise any of these rights, email hello@palmaislands.com with the subject line “Data Privacy Request.” We will respond within 14 business days.
8. Opt-Out
You may unsubscribe from our marketing communications at any time by:
Replying “STOP” to any WhatsApp message from our team
We will remove you from all marketing lists within 5 business days.
9. Compliance with Indonesian Law (UU PDP)
Palma Islands Indonesia complies fully with Indonesia’s Law No. 27 of 2022 on Personal Data Protection (UU PDP), which governs the collection, processing, storage, and use of personal data for businesses operating in Indonesia. Where we serve individuals in the European Economic Area, we additionally apply the standards of the GDPR.
10. Children’s Privacy
Our services are intended for adults aged 18 and above. We do not knowingly collect data from individuals under 18. If you believe a minor has submitted data through our form, contact us at hello@palmaislands.com and we will delete it immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When material changes are made, we will update the effective date above. Continued engagement with Palma Islands after any changes constitutes acceptance of the updated policy.
12. Contact
PT. Palma Islands Properties
Jl. Pantai Berawa 7, Berawa, Canggu, Bali 80361, Indonesia
