Privacy Policy

Effective Date: 12 March 2026

This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, contact us, make a reservation, place an order, or sign up for updates about events and promotions.

At The Shack Lombok, we respect your privacy and are committed to protecting your personal data.

1. Who We Are

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us using the details above.

The Shack Lombok
Jl. Raya Kuta No.5C, Kuta, Kec. Pujut, Lombok, Nusa Tenggara Barat 83573, Indonesia
Email: [email protected]
Phone: +62 821-4736-8006

2. Information We Collect

We may collect personal data that you provide directly to us, including:

  • First name

  • Last name

  • Email address

  • Phone number

  • Reservation or order details

  • Any other information you choose to send to us through our website, WhatsApp, email, or other contact methods

We may also collect information when you choose to receive updates about our events, promotions, or marketing messages. Your homepage currently shows a contact form asking for first name, last name, email, phone number, consent to receive text messages, and an opt-in for daily events and promos, plus WhatsApp links for reservations and online orders.

3. How We Use Your Information

We use your information to:

  • respond to enquiries

  • manage reservations and bookings

  • process takeaway or order requests

  • send service-related messages about your booking or enquiry

  • send promotional updates, events, and offers when you have chosen to receive them

  • improve our website, services, and customer experience

  • protect our business, website, and customers from misuse or fraud

  • comply with applicable legal obligations

Under Indonesia’s PDP Law, consent is one valid basis for processing, and the law also recognizes other bases such as contractual necessity.

4. Marketing Communications

If you choose to receive promotional messages from us, we may contact you by email, phone, text message, or WhatsApp about events, offers, promotions, or updates related to The Shack Lombok.

You may opt out of marketing communications at any time by:

  • clicking unsubscribe where available

  • replying with a stop request

  • contacting us directly using the contact details above

Indonesia’s PDP Law recognizes the right to withdraw consent.

5. Cookies and Website Data

Like most websites, our website and hosting tools may automatically collect limited technical information such as browser type, device type, pages visited, date and time of access, and IP-related data through cookies, logs, or similar technologies.

Like most websites, our website and hosting tools may automatically collect limited technical information such as browser type, device type, pages visited, date and time of access, and IP-related data through cookies, logs, or similar technologies.

Indonesia does not currently have a separate cookie-specific law, but if cookies or tracking technologies collect personal data, their use is still subject to personal data protection rules.

6. Third-Party Services

We may use third-party services to help operate our business and website, including tools or platforms for:

  • website hosting

  • contact forms

  • messaging and reservations through WhatsApp

  • maps or location services

  • email communications

  • analytics or traffic measurement, if enabled

When you click external links or use third-party services, your information may also be processed under those third parties’ own privacy policies.

If Google Analytics is installed on your website, Google requires that your privacy policy disclose its use and explain how it collects and processes data.

7. Sharing of Personal Data

We do not sell your personal data.

We may share your data only where reasonably necessary, including with:

  • service providers who help us operate the website or customer communications

  • technology providers supporting reservations, website hosting, or business operations

  • legal, regulatory, or government authorities where required by law

  • professional advisers where needed to protect our legal rights

8. International Data Transfers

Some of the service providers we use may store or process data outside Indonesia. Where that happens, we will take reasonable steps to ensure your personal data is handled with appropriate safeguards and in line with applicable law.

Indonesia’s PDP Law includes rules for cross-border transfers and expects appropriate protection measures.

9. Data Retention

We keep personal data only for as long as reasonably necessary to:

  • respond to your enquiry

  • manage bookings, orders, or customer service

  • send updates where you have opted in

  • comply with legal, accounting, or dispute-resolution obligations

When your data is no longer needed, we will delete it or securely anonymize it where reasonable.

10. Data Security

We take reasonable administrative, technical, and organizational steps to protect personal data from unauthorized access, misuse, loss, alteration, or disclosure.

No internet transmission or storage system is completely secure, but we work to protect the information we hold using reasonable safeguards.

Indonesia’s PDP Law requires controllers to protect personal data and notify individuals in certain breach situations.

11. Your Rights

Subject to applicable law, you may have the right to:

  • request access to your personal data

  • request correction of inaccurate or incomplete data

  • request deletion of your personal data

  • withdraw consent where processing is based on consent

  • request restriction of certain processing

  • object to certain uses of your data

  • request a copy of certain personal data

  • file a complaint if you believe your personal data has been handled improperly

Indonesia’s PDP Law recognizes rights including being informed, access, rectification, erasure, withdrawal of consent, restriction, portability, and complaint-related rights.

To exercise any of these rights, please contact us at [email protected].

12. Children’s Privacy

Our website and services are intended for a general audience and are not directed specifically to children. We do not knowingly collect personal data from children without appropriate consent where required by law.

13. Third-Party Links

Our website may contain links to third-party websites, apps, or services. We are not responsible for the privacy practices, content, or security of those third parties. We encourage you to review their privacy policies before sharing personal data with them.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, or legal obligations. Any updates will be posted on this page with the revised effective date.

15. Contact Us

The Shack Lombok
Jl. Raya Kuta No.5C, Kuta, Kec. Pujut, Lombok, Nusa Tenggara Barat 83573, Indonesia
Email: [email protected]
Phone: +62 821-4736-8006

If you have any questions or requests about this Privacy Policy or your personal data, please contact: