When you book a stay or use this website, you trust us with some of your personal information. We take that seriously. This policy explains what we collect, why, and what we do with it. If anything here isn't clear, our team is always happy to talk it through.
We only collect what we need to manage your booking and look after you during your stay. This typically includes your name, contact details (email and phone), booking and payment information, and any preferences or requests you share with us. If you contact us through the website or social media, we'll also keep a record of that conversation. When you browse the site, we may automatically collect basic technical information such as your device type, browser, and how you use our pages.
Your information is used to confirm and manage your reservation, communicate with you before, during, and after your stay, process payments, respond to your questions, and improve your experience with us. With your permission, we may also send you occasional updates, offers, or news from Coco. You can opt out of these at any time.
Payments are handled through secure, trusted third-party payment providers. We do not store your full card details on our own systems. These providers process your payment information under their own privacy and security standards.
We do not sell your data, and we don't share it with third parties for their own marketing. We only share information where it's necessary to deliver your stay — for example, with payment processors, booking platforms, or service providers who help us run the resort — and only to the extent they need it. We may also disclose information where we're required to by law.
Our website uses cookies and similar technologies to help the site function, understand how it's used, and improve your experience. You can control or disable cookies through your browser settings, though some parts of the site may not work as well if you do.
We take reasonable steps to protect your personal information against loss, misuse, and unauthorised access. While no system can be guaranteed completely secure, we work to keep your data safe and only hold it for as long as we need it for the purposes described here or as required by law.
You have the right to ask what information we hold about you, request that we correct or delete it, or withdraw your consent to marketing at any time. Just get in touch and we'll take care of it. We handle personal data in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022).
As we host guests from around the world, your information may be processed and stored in Indonesia or other locations where we or our service providers operate. By booking with us, you understand that your information may be transferred outside your home country.
Our website and booking services are intended for adults. We do not knowingly collect personal information from children without the consent of a parent or guardian.
We may update this Privacy Policy from time to time. The most current version will always be available on this page, so we recommend checking back now and then.
If you have any questions about your privacy or how we handle your information, please contact our team. We're here to help.
