Privacy Policy

Last Updated: October 30, 2025

HOSPO HERO PTY. LTD. (ABN: 64 607 799 477), trading as Bali.love ("we", "us", "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our wedding planning platform and services.

By using the Bali.love platform, you consent to the collection and use of your information as described in this Privacy Policy.

1. Information We Collect

Personal Information

When you use our platform, we may collect the following personal information:

• Contact Information: Name, email address, phone number, mailing address
• Wedding Details: Wedding date, preferred venues, guest count, budget preferences
• Account Information: Username, password (encrypted), profile information
• Booking Information: Service selections, vendor bookings, payment information
• Communication Records: Messages, inquiries, support requests
• Partner Information: Details about your partner if provided for booking purposes

Automatically Collected Information

• Usage Data: Pages visited, time spent on pages, links clicked
• Device Information: IP address, browser type, operating system, device type
• Cookies and Tracking: Session data, preferences, analytics information
• Location Data: General location based on IP address (not precise GPS location)

2. How We Use Your Information

We use your personal information for the following purposes:

Service Delivery

• Processing and managing your wedding bookings
• Connecting you with appropriate vendors in Bali
• Coordinating services between you and vendors
• Managing payments and financial transactions
• Providing customer support and responding to inquiries

Communication

• Sending booking confirmations and updates
• Providing important service notifications
• Responding to your questions and requests
• Sending marketing communications (with your consent)

Platform Improvement

• Analyzing usage patterns to improve our services
• Personalizing your experience on the platform
• Developing new features and services
• Conducting research and analytics

3. Information Sharing and Disclosure

With Vendors

Important: When you make a booking through our platform, we share your relevant personal information with the vendors you have selected. This includes:

• Your name and contact information
• Wedding date and event details
• Specific service requirements and preferences
• Any special requests or dietary requirements

Vendors are independent service providers and are responsible for their own use of your personal information in accordance with applicable privacy laws.

With Service Providers

We may share your information with third-party service providers who assist us in operating our platform:

• Payment Processors: To process payments securely
• Email Services: To send communications and notifications
• Analytics Providers: To understand platform usage and improve services
• Hosting Services: To store data and maintain platform functionality

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Legal processes (subpoenas, court orders)
• Government requests or regulatory requirements
• Protection of our rights, property, or safety
• Investigation of fraud or security issues

Business Transfers

If Bali.love is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

4. Cross-Border Data Transfers

Important Information: Bali.love is an Australian company operating in Indonesia. Your personal information may be transferred to and stored in:

• Australia: Where our company is registered and operates
• Indonesia: Where our subsidiary operates and vendors are located
• Other Countries: Where our service providers (hosting, email, payment processors) are located

By using our platform, you consent to these international data transfers. We take reasonable steps to ensure your information is protected in accordance with this Privacy Policy, regardless of where it is processed.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Sensitive data is encrypted in transit and at rest
• Access Controls: Limited access to personal information on a need-to-know basis
• Secure Hosting: Data stored on secure servers with regular backups
• Regular Audits: Security practices reviewed and updated regularly

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., financial records for 7 years)
• Resolve disputes and enforce our agreements
• Maintain business records for operational purposes

After your wedding is completed, we may retain certain information for customer service purposes, analytics, and to comply with legal requirements. You can request deletion of your data at any time (subject to legal retention requirements).

7. Your Rights and Choices

Access and Correction

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Update your account information at any time

Deletion and Restriction

You can request that we:

• Delete your personal information (subject to legal retention requirements)
• Restrict processing of your information in certain circumstances
• Stop sending you marketing communications

Data Portability

You have the right to request a copy of your personal information in a structured, commonly used format.

Marketing Communications

You can opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us directly at hello@bali.love
• Updating your preferences in your account settings

Note: Even if you opt out of marketing communications, we will still send you essential service-related messages (booking confirmations, updates, etc.).

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for platform functionality (e.g., maintaining your session)
• Analytics Cookies: Help us understand how you use our platform
• Marketing Cookies: Used to show relevant advertisements and track campaign performance

You can control cookies through your browser settings. However, disabling cookies may affect platform functionality.

Analytics: We use analytics services (such as Google Analytics, PostHog) to understand platform usage. These services may collect information about your use of our platform and other websites.

9. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe we have collected information about a child, please contact us immediately.

10. Third-Party Links

Our platform may contain links to third-party websites (vendor websites, social media, payment processors). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For significant changes, we will notify you by email or platform notification
• Your continued use of the platform after changes constitute acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. International Users

European Union (GDPR)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to object to processing of your personal information
• Right to lodge a complaint with your local data protection authority
• Right to withdraw consent at any time (where processing is based on consent)

California (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how we use it
• Right to delete your personal information (subject to exceptions)
• Right to opt out of the "sale" of personal information (we do not sell your information)
• Right to non-discrimination for exercising your privacy rights

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Response Time: We will respond to your privacy requests within 30 days (or as required by applicable law).

14. Australian Privacy Principles

As an Australian company, we comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This Privacy Policy is designed to meet our obligations under Australian privacy law. If you have concerns about our privacy practices, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).