Bright Solution Bali ("Bright Solution," "we," "us," or "our") respects your privacy and is committed to protecting the personal data of everyone who visits this website or engages our services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights available to you.

This Policy is written to be consistent with Indonesia's Law No. 27 of 2022 on Personal Data Protection ("PDP Law"), and, for visitors from the European Economic Area and United Kingdom, with the principles of the General Data Protection Regulation ("GDPR"). By using this website or engaging our services, you acknowledge that you have read and understood this Policy.

1.Who We Are

Bright Solution Bali is a privately owned business consulting firm established in 2019, based at Jl. Mertanadi No.31, Kerobokan Kelod, Kec. Kuta Utara, Kabupaten Badung, Bali 80361, Indonesia. We assist foreign investors, business owners, and property owners with company establishment, visa and KITAS processing assistance, tax and accounting, legal advisory, and property management services.

2.Scope of This Policy

This Policy applies to personal data collected through:

• The website brightsolutionbali.com and its subpages;
• Forms submitted on our website (consultation booking, contact form, free guide download);
• Direct communication with us by email, phone, WhatsApp, or in person at our office; and
• Documents and information you provide to us in connection with a service engagement.

Our affiliated property management website, brightsolutionproperty.com, is operated under the same company. Where that site collects additional data specific to property or villa management (for example, from tenants, guests, or property owners), those activities are covered by its own privacy notice, published on that site.

3.Personal Data We Collect

3.1 Data you provide to us directly

Source	Data collected
Free consultation booking form	Full name, email address, phone number, preferred consultation date/time, consultation type (phone or office), and message content
Contact form	Full name, email address, phone number, service category of interest, and message content
Free guide download form	Name and email address
WhatsApp, email, or phone enquiries	Name, contact details, and the content of your communication with us
Service engagement (once you become a client)	Identity documents (e.g. passport, KTP), business documents, tax data, financial data, property documents, and other information required to deliver the specific service you have engaged us for

3.2 Data collected automatically

When you visit our website, certain technical data is collected automatically through cookies and similar technologies, including your IP address, browser type, device type, pages visited, referring website, and general location (city/country level). See Section 6 ("Cookies & Tracking Technologies") for details.

4.How We Use Your Data

We use personal data for the following purposes:

• To respond to enquiries and schedule consultations;
• To prepare quotations and deliver the services you have engaged us for (company establishment, visa/KITAS assistance, tax and accounting, legal advisory, property management);
• To communicate with you about the status of your enquiry, booking, or engaged service;
• To send you the free guide or other requested materials;
• With your consent, to send follow-up information about our services relevant to your enquiry;
• To measure and improve the performance of our website and marketing campaigns (including Meta/Facebook and Google advertising);
• To comply with our legal, regulatory, tax, and accounting obligations; and
• To protect the security of our website and prevent fraud or misuse.

We do not use your personal data for any purpose that is incompatible with the purposes described above without informing you and, where required, obtaining your consent.

5.Legal Basis for Processing

We process personal data on one or more of the following legal bases:

• Consent — when you submit a form, subscribe to updates, or otherwise voluntarily provide your data;
• Performance of a contract — when processing is necessary to provide the service you have engaged us for;
• Legitimate interest — for example, to respond to enquiries, maintain website security, and carry out reasonable marketing analytics, provided this does not override your fundamental rights; and
• Legal obligation — where we are required to retain or disclose data to comply with Indonesian law, including tax, accounting, and immigration-related recordkeeping requirements.

6.Cookies & Tracking Technologies

Our website uses cookies and similar tools to operate correctly and to help us understand how visitors use our site. These include:

• Essential cookies — required for basic website functionality (e.g. navigation, form submission);
• Analytics tools, such as Google Tag Manager, used to understand website traffic and usage patterns;
• Advertising and remarketing tools, such as the Meta (Facebook/Instagram) Pixel and Google Ads tracking, used to measure the performance of our advertising campaigns and to show relevant ads to people who have previously visited our website; and
• Chat tools, such as our WhatsApp Business chat widget, used to enable direct messaging with our team.

You can control or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of this website. Where required by applicable law, we will request your consent before placing non-essential cookies on your device.

7.How We Share Your Data

We do not sell your personal data. We may share personal data with:

• Government authorities — such as Ditjen Imigrasi, Ditjen AHU, DJP, the OSS system, notaries (notaris), and other relevant institutions, strictly where necessary and with your knowledge, to process the specific application or filing you have engaged us to assist with;
• Service providers — including our website hosting provider, email and communication tools, WhatsApp Business, and CRM systems, who process data on our behalf under confidentiality obligations;
• Advertising platforms — Meta and Google, for the purposes described in Section 6, in accordance with their respective data policies; and
• Professional advisors — such as accountants, notaries, or legal counsel engaged to support the delivery of your service, where relevant to your engagement.

We may also disclose personal data where required by law, regulation, or a valid request from a competent Indonesian authority.

8.International Data Transfers

Some of the third-party tools we use (such as Meta and Google services) may process data on servers located outside Indonesia. Where personal data is transferred internationally, we take reasonable steps to ensure it continues to be protected consistently with this Policy and applicable law.

9.Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to satisfy any legal, accounting, tax, or reporting obligations. Enquiry and marketing data that does not result in an engagement is generally retained for a limited period and may be deleted or anonymised thereafter. Documents related to a completed service engagement may be retained for a longer period as required by Indonesian recordkeeping regulations.

10.Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11.Your Rights

Subject to applicable law, you have the right to:

• Request access to the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of your personal data, where applicable;
• Object to or request restriction of certain processing activities;
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• Request a copy of your data in a portable format, where technically feasible; and
• Lodge a complaint with the competent Indonesian data protection authority or, for EEA/UK residents, your local data protection authority.

To exercise any of these rights, please contact us using the details in Section 15. We may need to verify your identity before actioning your request.

12.Children's Privacy

Our website and services are intended for individuals aged 18 and above, such as business owners, investors, and property owners. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take reasonable steps to delete it.

13.Third-Party Links

Our website may contain links to third-party websites, including Google Reviews, social media platforms, and government portals. We are not responsible for the privacy practices of these third parties, and we encourage you to review their respective privacy policies.

14.Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The "Last updated" date at the top of this page will indicate when this Policy was last revised. We encourage you to review this Policy periodically.

15.Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, please contact us: