Privacy Policy

The data controller responsible for your personal information is:

We collect information in two ways: information you provide directly and information collected automatically.

2.1 Information You Provide

• Contact & enquiry forms: name, email address, phone number, country of residence, investment interests, and any message you submit.
• Lead generation via Meta Ads: when you submit a Lead Ad form on Facebook or Instagram, Meta may share with us the contact details you provide (name, email, phone number) in accordance with Meta's own privacy policy.
• Email communications: content of messages you send to our email address.

2.2 Information Collected Automatically

• Usage data: pages visited, time on site, referring URL, clicks, scroll depth, and device/browser type via Google Analytics (GA4).
• Meta Pixel data: we use the Meta Pixel on our website to track conversions from our Facebook and Instagram advertisements, optimise our ads, build audiences, and retarget users who have visited our site. The Pixel may collect your IP address, browser type, device identifiers, the URL you visited, and actions you take on the site (e.g. page view, contact form submission).
• Cookies & similar technologies: see Section 6 below.

We use the information we collect to:

• Respond to your investment enquiries and provide requested information.
• Send you follow-up communications about our real estate projects in Lombok (only where you have given consent or where we have a legitimate interest).
• Measure the effectiveness of our Meta advertising campaigns and optimise ad delivery.
• Create Custom Audiences and Lookalike Audiences on Meta platforms to show relevant advertisements to people who are likely to be interested in investing in Lombok.
• Analyse website traffic and user behaviour to improve our website and content (via Google Analytics).
• Comply with legal obligations.

Legal bases (GDPR): where applicable, we rely on (a) your consent for marketing communications and for the placement of non-essential cookies; (b) our legitimate interests in operating our business and advertising our services; and (c) contract performance when processing enquiries you initiate.

We use Meta Business Tools, including the Meta Pixel and Conversions API, to run ads on Facebook and Instagram. This means:

• Meta may receive information about your visits to our website and actions you take (such as submitting a contact form), even if you do not click on one of our ads.
• We may upload hashed contact lists (email, phone) to Meta to create Custom Audiences for targeted advertising. This data is hashed before transmission and Meta uses it only to match users.
• Meta's use of your data is governed by Meta's Privacy Policy.
• You can opt out of interest-based advertising by visiting Facebook Ad Preferences or through the Digital Advertising Alliance opt-out tool.

We do not sell your personal data. We may share it only in the following circumstances:

• Meta Platforms, Inc. — for advertising purposes as described in Section 4. Meta is a data processor acting on our behalf under their Business Tools Terms.
• Google LLC — analytics data is shared with Google Analytics (GA4). IP anonymisation is enabled. See Google's Privacy Policy.
• Service providers: we may share data with trusted third-party providers who assist us in operating our website, email services, and CRM systems, under strict confidentiality agreements.
• Legal requirements: we may disclose data if required to do so by law or in response to valid legal requests.

Our website uses cookies and similar tracking technologies. Below is a summary of the types of cookies we use:

You can control cookies through your browser settings. Disabling certain cookies may affect your experience on our site. For more information on managing cookies, visit allaboutcookies.org.

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law:

• Enquiry / lead data: up to 3 years from last contact, or until you request deletion.
• Analytics data: data retention in Google Analytics is set to 14 months.
• Meta Pixel event data: retained by Meta in accordance with their data policy.

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate data.
• Erasure: request deletion of your data ("right to be forgotten").
• Restriction: ask us to limit how we use your data.
• Data portability: receive your data in a machine-readable format.
• Object: object to processing based on legitimate interests, including for direct marketing.
• Withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing.
• California residents (CCPA): you have the right to know what personal information is collected, to opt out of the "sale" of personal information (we do not sell data), and to request deletion.

To exercise any of these rights, contact us at info@malasamadevelopments.com. We will respond within 30 days.

Our website is operated from Indonesia. When we use services such as Google Analytics and Meta Pixel, your data may be transferred to and processed in the United States and other countries where these companies operate. We ensure that such transfers are made with appropriate safeguards (e.g. Standard Contractual Clauses) where required by applicable law.

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with their information, please contact us and we will delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us: