Effective date: 9 June 2025

1. What are cookies

Cookies are small text files that a website transfers to your browser. They enable the site to function properly, remember your choices, protect against malicious activity, and—if you agree—collect statistics or show relevant advertising.

2. Who we are

The site cube.apartments is owned and operated by PT THE CUBE GROUP (Indonesia). Our primary audience is located in the United States, Australia, and the EEA. Static content is hosted on servers in Ireland, and form submissions are temporarily stored by our hosting partner Tilda Publishing in the UAE and other countries with adequate data‑protection safeguards (30 days by default, up to 90 days).

3. What cookies we use

Strictly necessary cookies
Examples: __ddgN, PHPSESSID, userid, lang, tildautm
Purpose: site display, DDoS protection, session management, language preference, storing UTM parameters
Storage period: from end‑of‑session up to 1 year
Can you disable them? No – they are required for the website to work

Analytics cookies
Examples: tt_stat_*, Google Analytics, Yandex Metrica
Purpose: help us understand how you use the site
Storage period: 90 days or vendor‑specific
Can you disable them? Yes

Advertising cookies
Examples: Facebook Pixel, Google Ads, TikTok
Purpose: show you relevant ads
Storage period: 90 days or vendor‑specific
Can you disable them? Yes

Additional / Custom cookies
Examples: widget scripts, embedded maps, chat plugins
• Purpose: enhance site functionality
• Storage period: up to 1 year
• Can you disable them? Yes

Strictly necessary cookies are essential for the operation and security of our website and the underlying hosting infrastructure (including DDoS protection). They therefore cannot be disabled.

4. Legal basis for processing

• GDPR Art. 6(1)(a) — Analytics, advertising and additional cookies are processed only after we receive your explicit consent.
• GDPR Art. 6(1)(f) — Strictly necessary cookies are processed on the basis of our legitimate interest in ensuring the security and functionality of the site.
• CCPA/CPRA (California) — We do not sell your personal information. California residents have the right to “Opt‑out of the sale or sharing of personal information.”
• Australian Privacy Act (APP 8) and Indonesian PDP Law — Cross‑border transfers are protected by contractual safeguards and technical encryption measures.

5. Managing cookies

The cookie‑consent banner is displayed on your first visit and lets you:

1. Accept all cookies (analytics, advertising and additional cookies).
2. Reject all non‑essential cookies, loading a minimal version of the site that uses only strictly necessary cookies.
3. Change your choice later via the floating “Cookie settings” button.

Until you make a selection, analytics and advertising scripts are not activated.
You can also delete or block cookies in your browser settings (Chrome, Firefox, Safari, Edge, etc.). Doing so may affect some site functions.

6. Data transfers to third parties

Cookies may be accessed by:

• Tilda Publishing (hosting and DDoS protection).
• Analytics providers (Google Analytics, Meta Ads, etc.).
• Partners whose widgets you activate (maps, chats, payment systems).

All data is minimised and encrypted via HTTPS.

7. Your rights

EU/EEA (GDPR)
• Rights: access, rectification, deletion, restriction, portability, withdraw consent, lodge a complaint
• How to exercise: email us at privacy@cubebali.com
California (CCPA/CPRA)
• Rights: know, delete, opt‑out of sale/share, limit use of sensitive information
• How to exercise: email us at privacy@cubebali.com
Australia (Privacy Act / APP)
• Rights: access, rectification, complaint
• How to exercise: email us at privacy@cubebali.com
Indonesia (PDP Law)
• Rights: consent/withdrawal, access, rectification, deletion, restriction, breach notification
• How to exercise: email us at privacy@cubebali.com

We respond within 30 days.

8. Changes to this policy

We may update this document by posting a new version on this page. For material changes, we will notify you via banner or email at least seven days before they take effect.

9. Contact

Data controller: PT THE CUBE GROUP
Jalan Pantai Suluban, Desa Kelurahan Pecatu, Bali 80361, Indonesia
Email: privacy@cubebali.com

Last update: 9 June 2025