Privacy Policy

This policy explains what personal data Novus Smara Semarang Resort & Spa collects when you visit novussmara.com, why we collect it, and what you can do about it. Novus Smara Semarang Resort & Spa is part of PSB Group and is responsible for the data described here.

What we collect

• Details you send us through the contact form: your name, email address, phone number, company and your message.
• Technical data that our hosting provider processes automatically when you open a page, such as your IP address, browser type and the pages you visit. This is used to deliver the site and keep it secure.

We use Cloudflare Web Analytics to count visits and see which pages load slowly. It does not use cookies, does not follow you across other websites and only shows us totals. We do not use advertising trackers or build profiles of visitors.

How we use it

• To reply to your message and follow up on what you asked for, such as a quote, a booking or a partnership enquiry.
• To protect the site and the contact form from spam and abuse.
• To meet our legal obligations.

We use your data on the basis of your consent when you send the form, and our legitimate interest in keeping the site secure. We never sell your data, and we will not send you marketing messages unless you ask for them.

Who else handles it

• Cloudflare hosts this website, stores form messages, provides the visit statistics and runs Turnstile, the check that tells people from bots. Its servers may be outside Indonesia; Cloudflare protects the data under its own data processing terms.
• Google provides the location map. The map only loads after you click "Show map", and from then on Google may set its own cookies.
• Staff of our company, and of other PSB Group companies when your request concerns them, who need the data to answer you.
• Authorities, only when the law requires it.

Cookies

We keep cookies to a minimum and use none for advertising or tracking:

• NEXT_LOCALE remembers the language you chose.
• Cloudflare may set security cookies to protect the site from attacks.
• Google Maps sets cookies only after you choose to show the map. Your choice is saved in your browser so the map shows straight away next time.

You can delete or block cookies in your browser settings. The site still works without them.

How long we keep it

We keep contact form messages for as long as we need them to deal with your request, and no longer than two years after our last contact, unless the law requires us to keep them longer.

Your rights

Under Indonesian Law No. 27 of 2022 on Personal Data Protection, and the GDPR if you are in the European Union, you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct data that is wrong or incomplete;
• delete your data, or stop or limit how we use it;
• withdraw the consent you gave earlier.

Contact us through the contact form on this website and we will reply within the time the law allows. If you are not satisfied with our answer, you may complain to the data protection authority where you live.

Security

The site is served only over an encrypted connection (HTTPS), the contact form is protected against bots, and access to stored messages is limited to authorised staff. No system is completely secure, but we work to keep your data safe.

Children

This website is not intended for children under 18. If you believe a child has sent us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy when our website or the law changes. The date at the top shows when it was last updated.

Contact

Questions about this policy or your data can be sent through the contact form on this website.