Privacy notice

Reading the website

You can read every page of this website without telling us who you are. We measure every visit from the moment a page opens, and a short notice says so on your first visit; its button only closes the notice, and your browser remembers that you closed it. The website works the same for everyone.

Three things measure your visit. First, our own statistics: this browser is given a random visitor number, and the 12 Seas Alliance platform that runs this website’s marketing (on the resort’s behalf) receives it together with how you arrived — the website or app that sent you (its name only, never the page you were on), the campaign tags in the link, and the click number Google or Meta adds to an advert’s link — and the steps you take towards a booking: the rooms and activity pages you open, the dates and party you search for and what the search found, the bungalows you add, the start of the booking form, the booking reference once your bungalows are held, the payment method you choose and the amount, and whether you tap a WhatsApp button. Your name, email address, phone number and anything you type are never part of it, and nor is the text of a WhatsApp message. When you book, the visitor number goes with the booking to the resort’s booking system, so that a paid booking can be linked to the advert or link that brought you. Second, Google’s tags, loaded through Google Tag Manager: Google Analytics counts the pages you view and the same booking steps (never your name, email address, phone number or anything you type), and Google Ads learns whether a visit that began with one of our adverts ended in a booking.

Third, PostHog, the statistics tool the 12 Seas Alliance platform uses for this website (its data is kept in the European Union): it records the pages you open, what you click on them and the booking steps above, and a replay of each visit in which everything you type is hidden. It is tied to the same random visitor number, never to your name, and web addresses are sent without anything after the “?”.

How you arrived (the advert or link you came from) is kept in this browser tab, and your random visitor number in this browser’s local storage, so that a booking can be linked to the visit that brought you. Google’s tags may store their cookies on your device, including advertising cookies, and PostHog keeps its own identifier in this browser. You can remove all of them by clearing this website’s data in your browser.

Like any website, it is delivered by servers that receive your IP address and browser details with each request: the host that serves the pages, the content delivery network that serves the photographs, and Google Fonts, which serves the typefaces.

When you search for dates, the dates, the number of guests in each age group and the number of divers are sent to the resort's booking system so that it can answer with availability and prices.

When you book

We ask the person making the booking for:

• your full name, email address and phone number with its country code, so that we can confirm your booking and reach you;
• if you choose to answer, your citizenship, your gender and your home address — the details on the resort's registration card, so that you do not have to fill it in when you arrive;
• where you are travelling from, and if you choose to answer, where you are going next and how you heard about us — to plan your arrival and to learn how guests find the resort;
• any notes you write for us;
• the stay itself: the dates, the bungalows, the rate plan, how many guests will sleep in each bungalow and in which age group, and how many of them dive, which can change the price;
• the language of the page you booked on, so that your confirmation email is written in it.

We ask these questions about you, the person filling in the form, and not about the people travelling with you: the resort registers the rest of your party when you arrive.

Your answers are stored with your reservation in the resort's booking system, and the resort's staff use them to prepare and run your stay.

Paying your deposit

Deposits are paid on the hosted payment page of the resort's payment provider, DOKU. You enter your card details or scan the QRIS code on DOKU's page, so your card number never reaches this website or the resort's booking system.

To open that page, the booking system sends DOKU the amount, a payment reference, and your name, email address and phone number. DOKU tells the booking system whether the payment was made, and your booking is confirmed only when it does.

Your confirmation email

Once your deposit has arrived, the booking system emails a confirmation to the address you gave, with your reservation codes and the details of your stay.

Manage my booking

Manage my booking opens your stay with your reservation code (RES-…) and your surname. It shows your stay, lets you change where you are travelling from and where you are going next, and shows no payment details.

While you are signed in, a session key is kept in this browser tab's session storage so that reloading the page does not sign you out. It expires after one hour and is removed when you sign out or close the tab.

What stays in your browser

While you book, this browser tab keeps your form answers and the booking you are paying for in its session storage, so that a reload or a step back does not empty the form. Session storage belongs to the tab: it is cleared when you close it. The same storage keeps how you arrived on the website. Your random visitor number, and that you closed the cookie notice, are kept in this browser’s local storage until you clear it.

WhatsApp and email

If you write to us on WhatsApp or by email, your message and your contact details reach us through that service. Some buttons on this website prepare a WhatsApp message for you, with your dates or your booking reference in it; nothing is sent until you send it yourself.

Your questions and requests

To ask how long your details are kept, to see what we hold about you, or to have it corrected or deleted, contact us at theclifftogean@gmail.com or on WhatsApp at +62 822 3649 1077.