Privacy Notice
Last updated: [date]
Who we are
[Legal company name] operating B-Friends Wellness Center, [address], Bali, Indonesia (“we”). We are the data controller for the information described here. Contact: [privacy email] / WhatsApp [number].
What we collect
- Full name, WhatsApp number and email address you enter when booking
- Your bookings (class, date, number of participants, attendance)
- Technical data needed to verify your email (a one-time code) and keep the site secure
We do not collect payment card data on this website.
Why we use it
- To register and manage your class booking (performance of the service you request)
- To tell you by email when a class is confirmed, changed or cancelled
- To contact you on WhatsApp about your booking if needed
- To prevent fake or duplicate bookings
We do not use this data for marketing unless you separately agree, and we never sell it.
Who can see it
Only authorised B-Friends staff, according to their role. We use trusted service providers to run the site: Supabase (database & login, servers in Singapore), Resend (email delivery) and Cloudflare (website hosting). They process data only on our instructions. Because some servers are outside Indonesia, we ensure these providers apply adequate protection.
How long we keep it
Booking contact details are kept for [24] months after your class and then anonymised automatically. Activity logs are kept for the same period for security and accounting.
Your rights
You may request access to, correction of, or deletion of your personal data, or withdraw your consent, by contacting us at [privacy email]. You can see and cancel your own bookings at any time on the “My Bookings” page.
Security
Data is encrypted in transit and stored with access controls and activity logs. If a data breach affecting you occurs, we will notify you and the authorities as required by law.