The data controller is PT TEPI SUN GAI, a company incorporated in Indonesia, with its registered office at Jalan Gunung Tangkuban Perahu, GG. Dewi Sri, Dusun Tegal Buah, Padangsambian Kelod, Denpasar Barat, Kota Denpasar, Bali 80117, Indonesia. It operates under the Lawang Estate brand and is the owner of this website.
You can write to us about any matter relating to your data at sales@lawangproperties.com.
When you contact us — through our forms, WhatsApp, email or phone — we collect the data you choose to share: name, email, phone number and the message or preferences you send us. When you request property materials through the download form, we collect your email address, the page or property you were viewing, the date and time, and your IP address. If you book a call from the calendar embedded on a model's page, Calendly itself collects the name, email and phone you enter to schedule it — see point 6 below. Our own system does not receive that contact data; to alert our sales team that a new booking needs confirming, it does store an internal reference to the booking, the model you were viewing, the campaign you arrived from, your IP address, the date and time, and any preference on extras, island or view you picked before booking.
When you chat with us on WhatsApp, we collect your phone number, the name on your profile and the content of the messages, and a summary of the conversation is saved in your record.
If you agree to it in the chat, we also record your answer, the date and the exact question you answered, as proof of that consent.
Quotations. If our sales team prepares a quotation for you, it records your name, copied from your record when the quotation is issued, together with the properties, prices, any discount and the reason noted for it, the payment schedule, the validity date, the description our team writes for each line and each instalment, any notes our team adds and, if you reply, whether you accepted or declined it and any reason noted. Your email and phone number stay in your record and are not copied into the quotation. If we send it to you as a link, anyone who has the link can see the quotation, including your name, the descriptions of its lines and instalments and the notes (but not the reasons noted for the discount or for your answer). The link stops working no later than 31 days after the validity date; we can cancel it at any time, and issuing a new version cancels the link to the previous one. For each link we record how many times it has been opened and the date and time of the first and the last opening (at most one opening is counted every 10 minutes). This tells our team whether and when the quotation was opened; we do not track whether you open our emails. We use this count only to follow up on your enquiry, on the basis of our legitimate interest (Article 6(1)(f) GDPR; Article 20(2)(f) UU PDP). We do not save your IP address or your browser with the quotation or in our database: to block abusive requests, our system holds your IP address only in its working memory, and it is lost when that process restarts. Our database provider, Supabase (see point 6), may also record technical data about each request, such as the IP address, in its own security logs, for the short period it sets.
Server logs. Like any website, our hosting server automatically records technical data each time it serves a file: your IP address, the date and time, the file requested and the browser or email program making the request. This happens when you visit this site and also when you open an email from us that loads images or fonts from our domain (lawangproperties.com). These records contain no identifier linked to you as a recipient and are not used to track whether or when you read our emails. We use them only for security, to prevent abuse and to keep the service running, on the basis of our legitimate interest (Article 6(1)(f) GDPR and, for Indonesia, Article 20(2)(f) of UU PDP No. 27/2022). They are processed by our hosting provider, Hostinger International Ltd. (see point 6), and kept for the period Hostinger sets for its technical logs.
Construction progress photos. Our investor presentation shows photos of our building sites, taken by our team and contractors and collected from a shared Google Photos album. We do not publish photos in which a person can be recognised; if one gets through and you appear in it, write to sales@lawangproperties.com and we will remove it within 72 hours (3 × 24 hours). The basis is our legitimate interest in showing investors how the works are progressing (Article 6(1)(f) GDPR; Article 20(2)(f) UU PDP). The photos are stored with Supabase Inc., our database and file storage provider, and we stop showing a photo as soon as it is hidden or removed from the album.
If you reserve or buy with us. To prepare and perform the reservation or the contract, collect and evidence payments and handle the procedures before the notary, we keep your identity and contact details, a copy of your passport or other identity document, the contract details, the payments and their receipts (including the entries in our bank accounts where you appear as the payer), invoices and receipts, the messages you send us from your buyer portal and the access to that portal, and our team's notes on your transaction. We do this to perform that contract and the pre-contractual steps you ask for (Article 6(1)(b) GDPR; Article 20(2)(b) UU PDP) and to meet our legal, accounting and tax obligations (Article 6(1)(c) GDPR; Article 20(2)(c) UU PDP).
Under Indonesian law, the photo in your passport (biometric data) and your payment details (personal financial data) are specific personal data (Article 4(2) UU PDP). We use them only to identify you in the contract and before the notary, and to collect and evidence your payments. The files of your documents are not copied to Google Drive.
If you work with us. For the members of our team, sales agents and partners, suppliers and notaries we keep their name, email, phone number, role and the companies and projects they work on, their commissions and payment requests with the tax details of the withholding, and a record of what each of them does in our intranet (who changed what and when). We use this to manage that relationship, make payments and keep internal control, on the basis of the contract between us and our legal and tax obligations (Article 6(1)(b) and (c) GDPR; Article 20(2)(b) and (c) UU PDP). Commissions and payments are personal financial data, which Indonesian law treats as specific personal data (Article 4(2) UU PDP): we use them only to pay and to comply with the tax authorities. We keep this data for as long as the relationship lasts and afterwards for as long as legal, accounting and tax obligations require.
Shareholders, representatives and attorneys. For the shareholders of our companies and of our units, for the people who sign on behalf of a company and for the attorneys who act before the notary, we keep their name, position, tax number or Indonesian identity number (NIK) and, where the contract requires it, their address, age and occupation, as well as each company's bank accounts for payments and their holders. We use this to draft and sign contracts, invoices and deeds, on the basis of our legal obligations and our legitimate interest in documenting each transaction properly (Article 6(1)(c) and (f) GDPR; Article 20(2)(c) and (f) UU PDP), and we keep it while they are involved and afterwards for as long as legal, accounting and tax obligations require.
If a partner recommends you. A partner may give us your details through our referral form: your name, email, phone number, country and what you are interested in, together with their own details. We only accept them if the partner confirms that you have agreed to us writing to you or calling you, and the first time we contact you we will tell you where we got your details. We use them to follow up on your interest and, if you buy, to pay the partner's commission, on the basis of our legitimate interest (Article 6(1)(f) GDPR; Article 20(2)(f) UU PDP). If you do not want us to contact you, write to us and we will delete them; otherwise we keep them like any enquiry that does not lead to a purchase (see section 8).
Access accounts. If you have an account to access our systems, such as our intranet, our database provider stores your email, an encrypted fingerprint of your password (never the password itself), your open sessions and the date of your logins, so that you can sign in securely, on the basis of the relationship or contract between us (Article 6(1)(b) GDPR; Article 20(2)(b) UU PDP). The account is kept while you have access; when we remove that access, we deactivate it.
We use your data solely to respond to your enquiry, send you the information or dossiers you request and follow up on curated opportunities. We do not sell your data.
We process your data on the basis of your consent and our legitimate interest in responding to your enquiry. You can withdraw consent at any time. We also rely on our legitimate interest in keeping a record of the conversations and of what we quoted, to handle claims and disputes (Article 6(1)(f) GDPR; Article 20(2)(f) UU PDP).
Follow-up messages. If you tell our WhatsApp assistant that you would like us to write to you again, we send you up to two follow-up messages on WhatsApp, about 2 days and 7 days after our last message, on the basis of your consent (Article 6(1)(a) GDPR; Article 20(2)(a) UU PDP). It is optional, and you can withdraw it at any time by replying STOP or by writing to sales@lawangproperties.com, without affecting anything done before.
With your consent, this website uses the Meta Pixel (Meta Platforms Ireland Ltd.) to measure the performance of our advertising and to show relevant ads to people who have shown interest in our properties. This involves cookies and similar technologies that record which pages you visit on this site.
None of this runs until you accept. If you decline, or simply ignore the cookie notice, no advertising or measurement technology is loaded at all — only the storage strictly needed to remember your language preference and your cookie choice. You can change your decision at any time from the link in the footer.
We work with the following providers. All of them, except Calendly (see the note below the list), process data on our behalf as processors (Article 28 GDPR):
Note on Calendly: unlike the other providers above, Calendly collects your contact data directly to run its own scheduling service — not on our behalf or under our instructions, so it acts as an independent controller of that processing, not as an Article 28 processor. See their own policy at calendly.com/privacy.
Where strictly necessary to progress a transaction, your data may also be shared with notaries or legal partners bound by confidentiality. We do not share your data with anyone else.
We are an Indonesian company and some of our providers are in the United States, so your data leaves the European Economic Area. The safeguards for each transfer are:
If you ask us to delete your data, we delete your conversation history with our assistant, stop contacting you, and apply the deletion to our providers' systems too. We keep only the short conversation summary and the minimum record needed to attach it (your name, phone number, appointments and the fact that you asked not to be contacted), because we have a legitimate interest in keeping a record of what was discussed and quoted so that we can respond to any later claim or dispute. We keep it only for as long as the criterion above allows, we do not use it to contact you or for advertising, and access is restricted to our team. You can object to this at any time by writing to sales@lawangproperties.com; we will review your objection and, unless there is an actual dispute or claim that requires us to keep it, we will delete the summary and confirm to you in writing. Data we must keep by law (for example, if you signed a reservation or contract) is not deleted before the legal period ends.
Backups. Our database provider, Supabase, keeps automatic backup copies that are overwritten on a rolling basis, for up to 7 days. In addition, our technology provider makes copies of our database and of the files we store (such as signed contracts and identity documents), encrypted with its own key, and keeps them on its own computers; to check that they can be restored, it occasionally loads one into a Supabase test database that is deleted within a few hours. A copy of the database, without the files, is also stored in Google Drive, encrypted before upload with a key Google does not have (see points 6 and 7). Data we have deleted can remain in these copies for up to 30 days, after which we delete them. When we delete a copy from Google Drive, Google takes up to about two months to remove it from its systems and may keep it for up to six months in its own backups, always encrypted and without being able to read it. We do not use the copies for any other purpose. The internal copy described above is separate and has its own period.
You may request access, correction or deletion of your data, object to or restrict its processing, request portability, or withdraw a consent you previously gave, by writing to sales@lawangproperties.com. We act within 72 hours (3 × 24 hours) of receiving your request when you ask for access to your data, for a correction or for its processing to be restricted, and when you withdraw a consent: within that time we give you the access, make the correction, apply the restriction or stop the processing that relied on that consent. We answer all other requests (deletion, objection and portability) within one month.
If you are in the European Economic Area and believe we have not handled your request properly, you may lodge a complaint with your national supervisory authority — in Spain, the Agencia Española de Protección de Datos.
This wording is pending review by qualified legal counsel.
Lawang Tropical Properties ("Lawang", "we", "us") curates, structures and develops real-estate opportunities in Bali and Sumba, Indonesia. These terms govern your use of this website and the information presented on it.
All content — including prices, areas, renders, availability, delivery dates and projected returns — is indicative, may change without notice and does not constitute a binding offer, financial advice or a guarantee of return. Nothing here creates a contractual relationship until a signed reservation or purchase agreement is executed.
Published prices for villas and plots include notary fees and, where they apply, Indonesian VAT (PPN) and the transfer tax (BPHTB). Any other cost is set out in the reservation or purchase agreement.
Foreign ownership in Indonesia is subject to specific legal structures (e.g. leasehold or a PT PMA company). Any structure is arranged with independent notaries and legal counsel. Buyers are responsible for their own due diligence and for obtaining independent legal and tax advice before committing.
Reservation fees, payment schedules and hand-over conditions are defined in the individual reservation and purchase agreement for each project and prevail over any figure shown on this site.
The brand, logo, texts, images and designs on this site belong to Lawang or its licensors and may not be reproduced without written permission.
To the extent permitted by law, Lawang is not liable for decisions taken on the basis of the indicative information published here. External links are provided for convenience and are outside our control.
These terms are governed by the laws of the Republic of Indonesia. Disputes will be submitted to the competent courts of the relevant jurisdiction.
This wording is pending review by qualified legal counsel.