Privacy Policy
Last updated: 20 October 2026
This Privacy Policy explains how ExportBali Sourcing Agency (“ExportBali”) collects, uses, and protects the personal data of visitors to exportbali.com and subscribers to its email communications.
1. Who ExportBali is
ExportBali Sourcing Agency is a Bali-based sourcing and export agent operated by Sasha, who is the data controller.
Location: Bali, Indonesia
Contact email: sasha@exportbali.com
Website: exportbali.com
2. What personal data is collected
Data you give directly: Name and email address when you request a guide; name, email, and additional details when you submit a contact form; any information you share via WhatsApp or email.
Data collected automatically: IP address and approximate location at country or city level, browser type, pages visited and time on site, collected through Google Analytics. Cookie data is covered in the Cookie Policy.
3. Why this data is collected (legal basis)
Personal data is only collected and used where there is a lawful reason. Sending a guide you requested: Consent. Responding to your business enquiry: Legitimate interests. Processing a service agreement: Contract. Website analytics: Consent, given through the cookie banner.
4. How your data is used
- To send the free guide you requested, by email
- To send follow-up emails about sourcing from Bali, as described at the point of opt-in
- To respond to your business enquiries
- To prepare quotations and service agreements when you engage ExportBali’s services
- To improve the website using anonymised analytics data
- Your data is never used for automated decision-making or profiling
- Your data is never sold to third parties
5. Who your data is shared with
MailerLite, email marketing, EU based. CookieYes, cookie consent management, UK based. Google Analytics, visitor data. Hostinger, website hosting and email.
Messages sent through the contact form are delivered by email to Sasha’s inbox and to the inbox of her husband, who helps with German-language enquiries. His inbox is hosted by Google (Gmail). If you send a message on WhatsApp, it runs through WhatsApp (Meta).
Your data is not shared with any other third parties.
This website uses fonts from Google Fonts, but the font files are stored on this website’s own server. Your browser does not request them from Google, and no cookie is set by this.
6. How long your data is kept
Email subscribers: as long as you remain subscribed, then deleted within 30 days of unsubscribing. Enquiry data: up to 3 years. Service agreement data: the duration of the contract plus 5 years.
7. Your rights (GDPR)
If you are in the EEA or UK, you have the right to access your data, correct inaccurate data, delete your data, restrict processing, request data portability, and object to marketing. You can withdraw any consent at any time, with effect for the future. You also have the right to complain to a data protection authority, for example in the country where you live. To exercise any right, email sasha@exportbali.com. A response will be sent within 30 days.
8. International transfers
ExportBali operates from Indonesia. If you contact ExportBali from the EEA or the UK, your data is transferred to and stored in Indonesia, which is outside the EEA and has not been granted an adequacy decision by the European Commission. Data sent through the contact form or by email is handled by Sasha and is not passed to anyone beyond the recipients listed in section 5. This transfer is necessary to answer your enquiry, send the guide you requested, or prepare and carry out an order you place (Art. 49(1)(b) GDPR).
With Google Analytics and Gmail, data may also be transferred to the United States. Google is certified under the EU-US Data Privacy Framework for this.
9. How to unsubscribe
Every marketing email contains an unsubscribe link. Click it and you will be removed immediately. You can also send an email to request removal.
10. Cookies
See the Cookie Policy for full details.
11. Contact
Questions about this policy: sasha@exportbali.com · exportbali.com/contact/