Privacy policy

Who we are

Luma Numa is operated by PT Luma Numa Umah, Jalan Raya Semat, Tibubeneng, Canggu, Badung, Bali 80351, Indonesia. We are responsible for the personal data we collect and process through our website, bookings, and communications. If you have any questions about your personal data, you can contact us at +62 821 8187 502 or lumanumabali@gmail.com.

What we collect and why

• Booking information: We collect your name, email address, phone number, chosen workshop, date, and number of places. This information is used to process your booking, secure your place, and send booking confirmations and relevant information about your session.
• Payment information: Payments are processed securely by Stripe. We do not receive or store your full card details. We may receive payment references and confirmation of payment status.
• Contact enquiries: When you contact us through our website or by email, we may collect your name, email address, and the contents of your message. We use this information only to respond to your enquiry and provide assistance.
• Analytics and marketing Where applicable, analytics or marketing technologies are used only in accordance with your cookie preferences.

How long we keep it

We retain personal data only for as long as necessary for the purposes described above and to meet applicable legal, accounting, and tax requirements. Contact enquiries are generally retained for up to 12 months, unless a longer period is necessary for a legitimate purpose or legal obligation.

Who we share it with

We may share personal data with trusted service providers who help us operate our business, including payment processors, booking and database providers, and email service providers. Some of these providers may process or store data outside Indonesia. Where this occurs, we take appropriate steps to ensure that personal data remains protected in accordance with applicable Indonesian data protection requirements. We do not sell your personal data.

Your rights under the PDP Law

Under Indonesia’s Law No. 27 of 2022 on Personal Data Protection (PDP Law), you may have rights including requesting access to your personal data, correcting inaccurate information, requesting deletion or destruction where applicable, withdrawing consent, restricting certain processing, and obtaining your data in a commonly used format. To exercise your rights, please contact us at lumanumabali@gmail.com. We will review and respond to your request in accordance with applicable law.

Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. Access to personal data is limited to people who need it for legitimate business purposes. Payments are processed through Stripe’s secure payment infrastructure. If a personal data breach occurs that is subject to notification requirements under the PDP Law, we will take the required steps to notify affected individuals and the relevant authority within the applicable legal timeframe.

Children

Guests under the age of 17 may attend our workshops with a parent or legal guardian. Where we process personal data relating to a child, we require the appropriate consent from their parent or guardian in accordance with applicable law.

Contact

For any questions, requests, or concerns regarding your personal data, please contact: PT Luma Numa Umah Jalan Raya Semat, Tibubeneng, Canggu, Badung, Bali 80351, Indonesia Email: lumanumabali@gmail.comPhone: +62 821 8187 502