Last updated: 11 October 2026. This is how The KOHO Air Hotel and our spa, SomaVita, on Gili Air, Indonesia, look after your personal data. It is written in plain language; if anything is unclear, write to us.
Who we are. Lab Sukses Bali, operating The KOHO Air Hotel and SomaVita (“we”). Contact: info@thekohohotels.com.
What we collect
- Bookings — name, email, phone, country, stay dates, rooms, number of guests, transfers and extras, and anything you tell us (arrival times, dietary needs, occasions). This comes from you, from our website, or from the booking platform you booked through (for example Booking.com or Expedia).
- Online check-in — if you check in online before arriving: the email you give us, your arrival time, WhatsApp number and any early check-in wish. The email is added to your KOHO ID once you confirm it from the link we send, and becomes the address we write to instead of the booking platform’s masked one. Arrival details go to our front desk. We don’t share them with the booking platform.
- Payments — card payments on our website are handled by Stripe. We never see or store your card number; we keep only the amount, the date and Stripe’s reference.
- SomaVita treatments — the treatments you book, their dates and times, and notes you give our therapists.
- Your KOHO ID — we keep one profile per guest so a stay, a spa treatment, a portal account and newsletter choices belong to the same person. Every guest gets one, including guests who never signed up for anything. It holds your name, the emails and phone number you used with us, your country, your bookings and your newsletter choices.
- Portal account — if you sign in to our members’ portal: your sign-in email, name and the membership details shown there.
- Newsletters — your email, first name, which newsletters you get (KOHO, SomaVita, Investor updates), when and how you agreed, and whether you opened an email and which links you clicked.
- Website — pages visited and buttons used, through Google Analytics (see Cookies).
Why we use it
- To take, change and look after your booking, and to welcome you on the island — because you asked us to.
- To meet Indonesian guest-registration, tax and accounting rules — because the law requires it.
- To send newsletters — if you subscribed, or, as a past guest, about our own hotel and spa (you can stop this at any time, in one click).
- To see which emails and pages are useful to guests, so we send fewer and better ones.
Our emails
Newsletters are sent through Elastic Email. Every email has a “Manage your emails” link where you choose which newsletters you get, ask for fewer emails (at most one a month), or leave all of them — and an “Unsubscribe from all emails” link. Gmail and Yahoo’s own unsubscribe button works too. We record when an email is opened (a small image in the email) and which links are clicked (links pass through our website for a moment). Booking emails, such as confirmations, reach you whatever your newsletter choices.
Who we share it with
Only with the services that run our hotel, each bound to use it for us and nothing else:
- Cloudbeds — our reservation system.
- Stripe — card payments on our website.
- Elastic Email — sending our newsletters.
- Google (Firebase and Google Cloud) — hosting this website, our portal and our guest database; Google Analytics for website statistics.
- The booking platform you booked through, for that booking.
- Indonesian authorities, where the law requires guest registration.
We never sell your data and never share it for advertising.
Our guest database is stored in Singapore. Some of these services also process data in the United States or the European Union, under their own safeguards for international transfers.
How long we keep it
Booking and payment records: as long as Indonesian tax and accounting law requires. Your KOHO ID profile: while you are a guest of ours, and we delete it on request when the law doesn’t require us to keep the bookings in it. Newsletter data: until you unsubscribe — after that we keep only the fact that you unsubscribed, so we never email you again by mistake.
Your rights
You can ask to see the data we hold about you, to correct it, to delete it, or to stop any use you agreed to, and you can complain to the data-protection authority. Write to info@thekohohotels.com; we answer within 30 days. Newsletter choices you can change yourself, any time, from the link in any of our emails.
Cookies
This website uses what it needs to work (for example, keeping you signed in to the portal and remembering your booking while you make it) and Google Analytics to count visits and see which pages help. We don’t use advertising cookies or trackers.
Changes
When we change this policy we update the date at the top. If a change matters for you, we tell you by email.
