1. General Provisions
This Privacy Policy describes the procedures for collecting, using, storing, and protecting the personal data of users of the website https://grassini.online/wedding_agency_bali.
The data controller is Julian Yehezkiel, located at Graha Periwi Bok A, Tabanan.
Contact email: telegrampochta123@gmail.com.
When processing personal data, we comply with the applicable laws of the Republic of Indonesia, including Law No. 27 of 2022 on Personal Data Protection (Personal Data Protection Law).
2. What Data We Collect
Depending on how users interact with the website, we may collect:

• First and last name.
• Phone number and email address.
• Information provided by users in inquiry forms.
• Information about services of interest, planned dates, and preferences.
• Correspondence and information provided when contacting us.
• Technical data, including IP address, browser type, device information, pages visited, and cookie usage.

We collect only the data necessary for specific processing purposes.
3. How We Collect Data
Personal data may be received through website forms, email, messaging applications, and other communication channels used by us.
Technical data may be collected automatically when users visit the website through connected analytics and advertising tools.
4. How We Use Personal Data
We process personal data for the following purposes:

• Responding to inquiries and providing consultations.
• Preparing service proposals.
• Organizing bookings and fulfilling contractual obligations.
• Communicating with clients regarding their inquiries.
• Ensuring the security and proper functioning of the website.
• Analyzing website traffic and advertising effectiveness, where the relevant tools are used.
• Sending marketing communications where the necessary consent has been obtained.
• Fulfilling legal obligations.

Depending on the purpose, the legal basis for processing may include user consent, performance of a contract or pre-contractual activities, compliance with legal obligations, or other grounds provided under Indonesian law.
5. Cookies and Advertising Technologies
The website may use essential cookies necessary for its operation, as well as analytics and advertising technologies.
The following analytics and advertising services may be used on the website: Google Analytics, Google Ads, Tilda's built-in statistics, Yandex Metrica, and Meta Pixel. The actual use of these services depends on the website settings and requires technical verification.
Where required, we obtain users' consent before using non-essential tracking technologies.
Information about cookie categories, their purposes, and available management options is provided in our Cookie Policy.
6. Sharing Personal Data with Third Parties
Personal data may be shared with providers of technical services, hosting, CRM systems, communication tools, analytics and advertising services, as well as partners involved in providing the requested services, where necessary.
The actual categories of personal data recipients include the website platform provider (Tilda), providers of services used to receive inquiries and messages (email and Telegram), and providers of analytics and advertising services actually used on the website.
Such sharing is carried out on appropriate legal grounds and in compliance with applicable personal data protection requirements.
7. International Data Transfers
Some technical service providers may process information outside Indonesia.
When transferring personal data internationally, we undertake to comply with the applicable requirements of Indonesian law, including requirements relating to the protection of personal data during cross-border transfers.
8. Data Retention Periods
We retain personal data for as long as necessary for the purposes of processing, taking into account the requirements of the laws of the Republic of Indonesia.
Where a statutory minimum retention period of five years applies to certain categories of data in electronic systems, we comply with that requirement unless specific legal provisions establish otherwise.
Data retention by category:

• Inquiries and requests: for the period necessary to process the inquiry and fulfill related obligations, and for longer where required by law.
• Client and booking data: for the period of service provision and subsequent fulfillment of legal obligations, including mandatory retention periods where applicable.
• Marketing data: until consent is withdrawn or the applicable retention period expires, subject to mandatory legal requirements.
• Technical data, including analytics and cookies: depending on the services actually used, their configured retention periods, and applicable legal requirements.

At the end of the relevant retention periods, personal data is deleted, destroyed, or anonymized unless further retention is required by law.
9. User Rights
Subject to applicable law, users have the right to:

• Receive information about the processing of their personal data.
• Request access to and a copy of their personal data.
• Request correction of inaccurate data.
• Request deletion of personal data in cases provided for by law.
• Withdraw previously given consent.
• Request restriction of processing where permitted by law.
• Object to certain decisions made exclusively through automated processing.
• Exercise other rights provided under applicable legislation.

To exercise these rights, please send a request to telegrampochta123@gmail.com.
We may request verification of identity where necessary to protect personal data.
10. Data Security
We implement necessary technical and organizational measures to protect personal data against unauthorized access, loss, alteration, and unlawful disclosure.
Access to personal data is granted only to authorized individuals. Secure connections and other appropriate measures are used to protect information, taking into account the nature of the processed data and potential risks.
11. Children's Personal Data
The website is not intended for children to independently submit personal data.
If processing a child's personal data becomes necessary, the relevant legal requirements will apply, including obtaining consent from a parent or legal guardian.
12. Changes to This Privacy Policy
We may update this Privacy Policy when legislation or our data processing procedures change.
The current version will be published on this page. Where necessary, users will also be notified of changes.
13. Contact Information
For questions regarding the processing and protection of personal data:
Data Controller: Julian Yehezkiel
Address: Graha Periwi Bok A, Tabanan
Email: telegrampochta123@gmail.com
Website: https://grassini.online/wedding_agency_bali