Last updated: August 1, 2026
1. Who we are
This website is operated by JRR Marketing PTE LTD on behalf of Elysian Cove (“Elysian Cove”, “we”, “us” or “our”). JRR Marketing PTE LTD is the controller of the personal data described in this policy where it determines how and why that data is processed.
Elysian Cove is based at Kini Village, Sekongkang, West Sumbawa, Indonesia. You can contact us about privacy at bookings@kirana-retreat.com or by WhatsApp on +62 821 4495 6038.
2. What this policy covers
This policy explains how we handle personal data when you:
- visit elysian-hotels.com;
- submit an investment or property enquiry;
- contact us by email or WhatsApp;
- interact with maps, videos or other embedded content; or
- follow a link to a third-party booking or communications service.
Third-party websites and apps have their own privacy policies. This policy does not control how those services use information you provide directly to them.
3. Personal data we collect
Information you provide
When you submit an investment enquiry, we collect your name, email address, WhatsApp number and budget range. You may also provide how you heard about us and a message. We also receive information you include in later emails, WhatsApp messages or other communications with us.
Please do not send sensitive personal data unless we specifically request it and it is necessary for your enquiry.
Information collected when you use the website
Our website and service providers may collect technical and usage information, including:
- IP address and approximate location derived from it;
- browser, device and operating-system information;
- pages viewed, links used, dates, times and referring pages;
- marketing source, medium, campaign, keyword and landing-page information; and
- cookie identifiers and similar online identifiers.
We use WhatConverts to connect enquiries with the marketing source that led to them. WhatConverts may use cookies, including the wc_client_current attribution cookie, and similar technologies for this purpose.
Google Maps and YouTube may receive technical information when their content is loaded or used. Google Fonts may receive technical request information when fonts are loaded.
Information collected by other services
If you contact us through WhatsApp or book through Airbnb, Booking.com, Kini Resort or another linked service, that provider processes information under its own privacy terms. We may receive the information needed to respond to your message or manage your booking.
4. How and why we use personal data
We use personal data to:
- respond to enquiries and provide requested property, pricing or booking information;
- understand your requirements and manage an investment or booking opportunity;
- communicate with you by email, telephone or WhatsApp at your request;
- operate, secure, maintain and troubleshoot the website;
- measure enquiries and understand which marketing sources and pages are effective;
- prevent spam, misuse and fraud;
- keep appropriate business and transaction records; and
- comply with legal obligations and establish, exercise or defend legal claims.
Depending on the circumstances and applicable law, our legal basis may be:
- taking steps at your request before entering into a contract, or performing a contract;
- our legitimate interests in responding to enquiries, operating the website, managing opportunities and understanding marketing effectiveness, where those interests are not overridden by your rights;
- your consent, including for non-essential cookies where consent is required; or
- compliance with a legal obligation.
We do not sell personal data. We do not add investment-enquiry details to a general marketing mailing list unless we separately explain that use and obtain any consent required by law.
6. Who we share personal data with
We share personal data only where reasonably necessary for the purposes described above. Recipients may include:
- WhatConverts, which provides lead tracking, attribution, lead management and enquiry notifications;
- Cloudflare, which provides website hosting, delivery, security and request processing;
- authorised personnel and service providers responsible for responding to enquiries;
- Kini Resort, where it is involved in booking or guest-service management;
- Google, when Google Fonts, Google Maps or YouTube services are used;
- WhatsApp and Meta, when you choose to communicate through WhatsApp;
- Airbnb, Booking.com or another booking provider when you choose that service;
- professional advisers, insurers, auditors or contractors where access is necessary; and
- public authorities or other parties where disclosure is required by law.
Service providers may process data only for agreed services or as otherwise permitted or required by law. Their own terms also apply when you interact with them directly.
7. International data transfers
Some providers and recipients may process personal data outside Indonesia or outside the country where you live, including in the United States and other countries whose data-protection rules may differ from yours.
Where applicable law requires a transfer mechanism, we will rely on an adequacy decision, binding contractual safeguards such as standard contractual clauses, another legally available safeguard, or your consent. Contact us for information about safeguards relevant to your data.
8. How long we keep personal data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected. We consider how long it takes to manage an enquiry or booking, whether a relationship continues, applicable business and tax record requirements, limitation periods, fraud prevention and legal claims.
When personal data is no longer needed, we will delete or anonymise it, subject to technical backup cycles and legal retention requirements.
9. Security
We use reasonable technical and organisational measures intended to protect personal data against accidental or unlawful loss, misuse, alteration, disclosure or access. No website, transmission or storage system can be guaranteed completely secure.
10. Your rights and choices
Subject to the law that applies to you, you may have the right to:
- ask whether we process your personal data and request access to it;
- ask us to correct incomplete or inaccurate data;
- ask us to delete data or stop, restrict or object to certain processing;
- withdraw consent at any time where processing is based on consent;
- request a portable copy of certain data;
- object to direct marketing; and
- complain to a competent data-protection authority or seek another available remedy.
Withdrawing consent does not affect processing that was lawful before withdrawal. Some rights are subject to legal exceptions, including where data must be retained for legal obligations or claims.
To make a request, email bookings@kirana-retreat.com. We may need to verify your identity before acting and will respond within the period required by law.
11. Automated decision-making
We may use automated attribution to associate a visit or enquiry with a marketing source. We do not use solely automated decisions that produce legal or similarly significant effects on you.
12. Children
The investment enquiry service is intended for adults. We do not knowingly collect personal data from children through that form. If you believe a child submitted personal data, contact us so we can review and, where appropriate, delete it.
13. Changes to this policy
We may update this policy to reflect changes to the website, our services, providers or applicable law. We will post the updated version here and change the “Last updated” date. If a change materially affects how we use data already collected, we will provide any additional notice or choice required by law.
14. Contact and complaints
For questions, requests or complaints about this policy or our handling of personal data, contact:
Elysian Cove
Kini Village, Sekongkang
West Sumbawa, Indonesia
Email: bookings@kirana-retreat.com
WhatsApp: +62 821 4495 6038
If you are not satisfied with our response, you may have the right to complain to the competent data-protection authority where you live or where the relevant processing occurred.