Privacy Policy

1. Who we are

PT Senja Sasana Parahyangan operates Senja Stayhouse at Jalan Permata Medang, Ruko Darwin Blok DRWT Nomor 63, Summarecon Serpong, Desa/Kelurahan Medang, Kec. Pagedangan, Kab. Tangerang, Provinsi Banten. This policy explains how we handle personal data collected through our website, booking communications and related services.

2. Information we collect

Depending on how you use our services, we may collect:

• name and guest identity information;
• WhatsApp number, phone number and email address;
• room selection, check-in and check-out dates, event date and booking notes;
• custom-event amount, payment mode, payment channel, payment status, order reference and transaction reference;
• communications with our staff, including requests, complaints and refund information;
• technical information such as IP address, browser type, device information, access time and basic server logs; and
• identification or other information reasonably required at check-in, for security or to comply with law.

The website checkout does not ask you to enter card numbers, PINs or payment-app passwords.

3. How we obtain information

We receive information directly from you when you submit a booking, contact us, make a payment or request support. We may also receive transaction status and limited payer details from an authorised payment provider, bank or payment application.

4. Why we use personal data

We process personal data to:

• review availability and create, manage or modify a booking;
• calculate the room total or record an agreed custom-event amount;
• generate or display QR payment instructions and reconcile payments;
• send confirmations, reminders, operational updates and customer support messages;
• handle cancellations, refunds, disputes and suspected fraud;
• provide safe accommodation and event services;
• maintain accounting, security and operational records; and
• comply with legal or regulatory obligations.

Where required, we rely on your consent. We may also process information because it is necessary to provide the requested booking or service, to protect legitimate operational interests, or to meet legal obligations.

5. When information may be shared

We do not sell personal data. We may share only the information reasonably required with:

• payment gateways, acquiring institutions, banks, QRIS participants, Alipay or WeChat Pay service providers;
• hosting, communications, security, accounting or technical-service providers acting for us;
• event vendors where necessary to provide an agreed custom event;
• professional advisers, insurers or auditors; and
• government authorities, law-enforcement agencies or courts when required by applicable law.

Some payment or technology providers may process information outside Indonesia. Where applicable, we take reasonable steps to ensure the transfer and processing are handled through lawful and appropriate safeguards.

6. Retention

We retain personal data only for as long as reasonably necessary for booking operations, payment reconciliation, accounting, security, dispute handling and applicable legal requirements. Information that is no longer required will be deleted, anonymised or securely archived as appropriate.

7. Security

We use reasonable administrative and technical measures to protect personal data against unauthorised access, alteration, disclosure, loss or misuse. No internet or storage system can be guaranteed to be completely secure, so customers should also protect their devices, payment applications and booking references.

8. Your rights

Subject to applicable law and verification of your identity, you may request information about your personal data, access a copy, correct inaccurate information, withdraw consent where processing depends on consent, or request deletion or restriction where legally available.

Some information may need to be retained when required for accounting, legal claims, security or other lawful purposes.

9. Cookies and technical data

The website may use essential session data or similar technology needed for security and the booking process. The current booking flow does not require advertising cookies. If analytics or marketing tools are added later, this policy and any required consent notice should be updated.

10. Children

Bookings should be made by an adult. Where information about a child is necessary for a stay or event, the adult making the booking confirms that they are authorised to provide it.

11. Updates and contact

We may update this policy when our systems, services or legal obligations change. The current version will be published on this page with its update date.