Privacy Policy

1. Who we are

The party responsible for your personal data (the “data controller”) is PT Magnum Estate International, a company established under the laws of the Republic of Indonesia, with its office at Jl. Bumbak No. 156, Kerobokan, Kec. Kuta Utara, Kabupaten Badung, Bali 80361, Indonesia. It is registered in Indonesia under Business Registration Number (NIB) 1245000742689.

For any question about this Policy or your personal data, please contact us using the details in the “How to contact us” section below.

2. Scope of this Policy

This Policy applies to personal data we collect through our website magnumestate.com and its subdomains, through our online forms and chat, by email, telephone, messaging apps (such as WhatsApp) and social media, and when you visit our office or attend our presentations and viewings.

Our website may contain links to third-party websites and embedded content. This Policy does not cover those third parties; please review their own privacy notices.

3. The personal data we collect

We only collect personal data that we need. Depending on how you interact with us, this may include:

Data you give us

• Identity and contact data: your name, email address, telephone or WhatsApp number, country or city of residence, and preferred language;
• Enquiry data: the content of your messages and requests, your budget, timeline, preferred location, property type and target yield, and any other details you choose to share;
• Transaction-related data: where you move towards a reservation or purchase, information needed for due diligence, contracts and payments. This may include identity-document and “know-your-customer” information, which we handle with additional care.

Data we collect automatically

• Device and usage data: IP address, browser type and settings, operating system, referring pages, the pages you view and links you click, and the dates and times of your visits;
• Cookies and similar technologies: see the “Cookies and similar technologies” section below.

Data from other sources

• Referrals and partners: real-estate agents, introducers and partners who pass on your enquiry with your consent;
• Advertising and analytics providers and social-media platforms, where you interact with our ads or content;
• Publicly available sources, where lawful and relevant to your enquiry.

We do not seek to collect sensitive personal data (such as data revealing health, religion or political views). Please do not send us such data unless it is strictly necessary.

4. How and why we use your data, and our legal bases

We use your personal data for the purposes below. Under the PDP Law we rely on one or more lawful bases for each purpose: your consent; the performance of a contract or pre-contractual steps you ask for; compliance with a legal obligation; the protection of vital interests; or our legitimate interests in running and promoting our business in a way that does not override your rights and freedoms.

• To respond to your enquiries, prepare and send tailored property selections and price lists, and arrange calls, viewings and visits (contract and pre-contractual steps; legitimate interests);
• To provide our services and support a reservation or purchase, including legal, leasehold, PT PMA and due-diligence support (contract; legal obligation);
• To send you marketing about projects, offers and events that may interest you, where permitted, and from which you can opt out at any time (consent and/or legitimate interests);
• To operate, secure and improve our website and services, and for analytics and statistics (legitimate interests; consent for non-essential cookies);
• To prevent fraud and misuse, ensure security, and establish, exercise or defend legal claims (legitimate interests; legal obligation);
• To comply with applicable laws, regulatory and tax requirements, and lawful requests from public authorities (legal obligation).

Where we rely on your consent, you may withdraw it at any time. Withdrawing consent does not affect processing we carried out before the withdrawal.

5. Cookies and similar technologies

Cookies are small files placed on your device. We use strictly necessary cookies to make the website work and, with your consent where required, functional, analytics and marketing cookies to remember your preferences, measure traffic and improve our content and advertising.

You can accept or decline non-essential cookies through our cookie banner (where shown) and manage or delete cookies in your browser settings. Blocking some cookies may affect how the website works. For more detail on the cookies we use, please contact us.

6. Marketing and your choices

We will only send you marketing where we are permitted to do so. Every marketing email includes an unsubscribe link, and you can also ask us to stop at any time by contacting us. If you opt out of marketing, we will still send you service messages that relate to an enquiry or transaction you have with us.

7. How we share your data

We do not sell your personal data. We share it only where necessary and with appropriate safeguards, with the following categories of recipient:

• Service providers (processors) acting on our behalf, for example hosting, IT and communications, CRM, email, analytics, advertising and customer-support tools, under contracts that require them to protect your data and use it only on our instructions;
• Professional advisers, such as notaries (PPAT), lawyers, accountants, tax and due-diligence advisers, where relevant to your enquiry or transaction;
• Developers, project owners and partners, where this is needed to answer your enquiry or progress a reservation, and with your knowledge;
• Payment, banking and “know-your-customer” providers, where you proceed to a transaction;
• Public authorities, regulators and courts, where required by law or to protect our rights;
• A buyer or successor, if our business or assets are reorganised, merged or transferred, subject to this Policy.

8. International transfers

We are based in Indonesia, and some of our service providers operate in other countries. As a result, your personal data may be transferred to, stored or processed outside Indonesia and outside your own country, where data-protection laws may differ.

Where we transfer personal data across borders, we do so in line with the PDP Law: we check that the destination country provides an adequate level of protection, we put appropriate safeguards (such as contractual protections) in place, or we rely on your consent. For transfers concerning visitors from the EEA or the United Kingdom, we use recognised safeguards such as standard contractual clauses where applicable.

9. How long we keep your data

We keep personal data only for as long as we need it for the purposes set out in this Policy, for example to handle your enquiry and our relationship with you and for a reasonable period afterwards, and to meet legal, tax, accounting and dispute-handling requirements. When data is no longer needed, we delete it or anonymise it securely.

10. How we protect your data

We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, disclosure or alteration, including encryption in transit, access controls and staff confidentiality obligations. No method of transmission or storage is completely secure, so we cannot guarantee absolute security; please also keep your own login details and communications secure.

11. Your rights

Subject to applicable law, you have the right to:

• be informed about how we process your personal data;
• access the personal data we hold about you and obtain a copy;
• have inaccurate or incomplete data corrected or updated;
• have your data erased (the “right to be forgotten”) in certain circumstances;
• restrict or object to certain processing, including direct marketing;
• withdraw your consent at any time where we rely on consent;
• receive certain data in a portable, machine-readable format;
• not be subject to a decision based solely on automated processing that significantly affects you; and
• lodge a complaint with the competent authority.

To exercise any of these rights, please contact us using the details below. We may need to verify your identity, and we will respond within the period required by applicable law. Exercising your rights is free of charge in most cases.

12. Children’s privacy

Our website and services are intended for adults and are not directed at children. We do not knowingly collect personal data from anyone under the age of 18 (or the age of majority in their jurisdiction) without the consent of a parent or guardian, as required by the PDP Law. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Third-party links and content

Our website may link to or embed content from third parties, for example maps, video, social-media feeds and messaging widgets. We are not responsible for the privacy practices of those third parties, and your use of them is governed by their own policies.

14. Automated decision-making

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. We may use analytics and basic profiling to understand interest in our projects and to improve our communications; this does not have a legal or similarly significant effect on you.

15. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices, technology or the law. We will post the updated version on this page and change the “Last updated” date above. Where changes are significant, we will take reasonable steps to notify you. Please review this page periodically.

16. How to contact us, and complaints

If you have any question, request or complaint about this Policy or your personal data, please contact us. We will do our best to resolve your concern.

You also have the right to complain to the competent data-protection authority in Indonesia and, if you are in the EEA or the United Kingdom, to your local supervisory authority.