Last updated: 6 September 2026

Firefly Retreat Bali (“Firefly”, “we”, “us” or “our”) respects your privacy. This policy explains what personal information we collect when you visit fireflyretreatbali.com, contact us or book a retreat, why we use it, who may receive it and the choices available to you.

1. Information we collect

Information you provide may include your name, email address, phone number, booking dates, accommodation preferences, messages, payment and transaction details, and any other information you choose to share when you contact us or make a booking. Payment-card details are processed by our payment and booking providers and are not stored directly by Firefly.

When you use our website, we may receive technical and usage information such as your IP address, browser and device type, approximate location, pages viewed, referring page, clicks and interactions, and cookie or consent preferences. We only activate non-essential analytics or marketing technologies after you consent through our privacy settings.

Please do not send health, dietary or other sensitive information through general website forms unless it is necessary for your stay. If you provide such information, we use it only to respond to your request and support your retreat experience.

2. How we use information

We use personal information to answer enquiries and provide support; administer reservations, payments, cancellations and retreat services; communicate important booking information; operate, secure and improve our website; measure website use and marketing effectiveness where you have consented; and meet legal, accounting and safety obligations.

3. Our legal bases

Depending on the situation, we process information because it is necessary to take steps at your request or perform our contract with you; because we must comply with a legal obligation; because it supports our legitimate interests in running and protecting our business; or because you have given consent. You may withdraw consent at any time using the Privacy Settings control on the website or by contacting us. Withdrawal does not affect processing that was lawful before it.

4. Cookies and analytics

Essential technologies are used to operate and secure the website. With your permission, analytical or marketing technologies may be used to understand website use and advertising performance. Our website uses Wix and Usercentrics for website operation and consent management, PostHog for product analytics, and Google services for analytics and advertising. You can accept, deny or change non-essential categories at any time through Privacy Settings.

With your Analytics consent, we use PostHog session replay to understand how visitors navigate and interact with our website and identify problems in the booking journey. Replays may include pages viewed, clicks, scrolling and visible page content. PostHog is configured to mask form inputs; ordinary page text and images may remain visible. You can change your Analytics choice through Privacy Settings.

5. Bookings and payments

Bookings and payments may be processed by WeTravel and other providers selected for a particular reservation. These providers process information under their own privacy terms. We receive the booking information needed to administer your stay, but we do not directly store full payment-card numbers.

6. Sharing information

We may share information with service providers that help us host the site, manage consent, process bookings and payments, provide communications, analyse website use, prevent fraud, maintain security or meet professional and legal obligations. These providers include Wix, Usercentrics, PostHog, Google and WeTravel where applicable. We may also disclose information where required by law, to protect rights or safety, or as part of a business transfer. We do not sell personal information.

7. International transfers

Firefly is based in Indonesia and serves international guests. Our providers may process information in Indonesia, the European Economic Area, the United States or other countries. Where data-protection law requires safeguards for an international transfer, we rely on the relevant provider’s lawful transfer mechanism or other appropriate safeguards.

8. Retention and security

We keep personal information only for as long as reasonably needed for the purpose for which it was collected, including providing your retreat, responding to enquiries, resolving disputes, maintaining tax or accounting records, preventing fraud and meeting legal obligations. Retention periods vary by record type and provider. We use reasonable organisational and technical measures to protect information, but no online service can guarantee absolute security.

9. Your choices and rights

Depending on where you live, you may have rights to request access to, correction or deletion of your information; restrict or object to certain processing; receive a portable copy; withdraw consent; or complain to a data-protection authority. These rights are not absolute and may be limited by law.

To exercise a right, email Love@fireflyretreatbali.com. We may need to verify your identity before completing a request. You may also change cookie consent at any time through Privacy Settings.

10. Children

Our website and retreat services are not directed to children who make bookings independently. If you believe a child has provided personal information without appropriate permission, contact us so we can review and, where required, delete it.

11. Changes to this policy

We may update this policy when our services, providers or legal obligations change. The current version and effective date will always appear on this page.

12. Contact us

Firefly Retreat Bali
Br. Sakti, Jl. Suweta, Ubud, Bali, Indonesia
Email: Love@fireflyretreatbali.com
Phone: +62 811 94 9294