Privacy Policy

Last updated: 30 September 2026

This Privacy Policy explains how MORE Laser & Spa collects, uses and protects your personal data when you visit this website, send us a booking request, message us or visit our studio. We process personal data in line with Indonesian Law No. 27 of 2022 on Personal Data Protection (the PDP Law).

1. Who we are

MORE Laser & Spa ("MORE", "we", "us") is a laser hair removal and Endosphères therapy studio at Jl. Sri Wedari No.52a, Ubud, Gianyar, Bali 80571, Indonesia. The studio is operated by PT The Creative Solution Bali, a limited liability company registered in Indonesia (NIB 2804220034009), Jl. Sri Wedari No.52, Kelurahan Ubud, Kecamatan Ubud, Kabupaten Gianyar, Bali 80571, Indonesia. We are the data controller for the personal data described in this policy.

Contact for privacy questions: more.laser.bali@gmail.com or WhatsApp +62 878-3624-9980.

2. What data we collect

Data you give us on this website:

your name, your WhatsApp number and the service you are interested in, when you fill in the booking form;
your consent to the processing described in this policy, with the date and time you gave it.

Data you give us in messages:

anything you send us via WhatsApp, Telegram or Instagram, for example questions or preferred appointment times.

Data we collect at the studio:

during your consultation we ask about your health, skin and hair type, medications, pregnancy and other contraindications, so that we can decide whether a treatment is safe for you and choose the right settings;
treatment records: dates, treated areas, device settings and notes, which we keep in our client management (CRM) system;
before and after photos, only if you agree to them being taken.

Health information is specific personal data under the PDP Law. We ask for your explicit consent before we collect it, use it only for your treatment and keep it confidential. Please do not include health details in the website form: we will discuss them with you in person.

Technical data:

when you visit the website, cookies and similar technologies collect your IP address, device and browser type, the pages you view and the actions you take, such as submitting a form. We use Google Analytics 4 for this (see section 8).

3. Why we use your data and on what basis

To answer your booking request, contact you on WhatsApp and arrange your appointment. Basis: your consent, given with the checkbox in the booking form, and steps you ask us to take before providing a service.
To assess suitability and provide treatments safely. Basis: your explicit consent to the processing of your health data, and the performance of our service agreement with you.
To send appointment reminders and aftercare instructions. Basis: performance of our service agreement.
To track your results with before and after photos. Basis: your explicit consent. We publish such photos on our website or social media only with your separate consent, which you can withdraw at any time.
To understand how visitors use the website and improve it. Basis: our legitimate interest in running and improving the website. You can object at any time (see section 8).
To keep accounting and tax records. Basis: our legal obligations.
To send you news and special offers. Basis: your consent only, which you can give by telling us in a message. You can opt out at any time by messaging us.

We do not sell your personal data and we do not use it for automated decision-making.

4. Who we share your data with

We share personal data only with service providers that help us run the website and the studio, and only as far as they need it:

Tilda (Tilda Platform Cloud Services Co. LLC, Dubai, UAE) — website hosting and the booking form;
Google — Gmail (email notifications about new booking requests), Google Analytics (website statistics), Google Sheets (storage of booking requests), Google Maps (the map on our website) and Google Fonts (fonts on our website);
the provider of our client management (CRM) system — storage of client and treatment records;
Telegram — messaging with you and internal notifications to our team about new booking requests;
Meta (WhatsApp, Instagram) — messaging with you;
our accountants, as far as needed for bookkeeping and tax.

We may also disclose personal data when required by law, a court or a competent authority, or to protect our legal rights.

5. Transfers outside Indonesia

Some of these providers store or process data outside Indonesia, including in the European Union, the United States and the United Arab Emirates. We rely on the data protection commitments in our agreements with these providers and on your consent to the transfer, which you give with the checkbox in the booking form. If you do not want your data to be transferred abroad, please contact us by phone or in person instead of using the form.

6. How long we keep your data

Booking requests and chats with people who do not become clients: in our records until you ask us to delete them.
Client and treatment records, including health information: while you are our client and afterwards until you ask us to delete them, unless the law requires us to keep them longer. You can ask us to delete your records at any time (see section 7).
Before and after photos: until you withdraw your consent or until your client records are deleted, whichever comes first.
Records of your consent: as long as we process the data it relates to, and afterwards as long as needed to show that we had your consent.
Accounting and tax records: for the period required by Indonesian tax law.
Website statistics: event-level data is kept for up to 14 months in Google Analytics; aggregated reports that do not identify you may be kept longer.

When a period ends, or when you ask us to delete your data and we have no legal reason to keep it, we delete or anonymize it.

7. Your rights

Under the PDP Law you have the right to:

be informed about how your personal data is processed;
access your personal data and receive a copy of it;
correct or update inaccurate or incomplete data;
have your data deleted or destroyed;
withdraw your consent at any time;
object to decisions based solely on automated processing;
restrict or suspend the processing of your data;
receive your data in a commonly used, machine-readable format and have it transferred to another controller;
claim compensation for a breach of the PDP Law in the processing of your data.

To exercise your rights or withdraw your consent, send us a message at more.laser.bali@gmail.com or on WhatsApp. We may need to confirm your identity first, for example by a message from the WhatsApp number you gave us. Where the PDP Law sets a deadline, we act within 3 × 24 hours of receiving your verified request. Withdrawing consent does not affect processing that took place before the withdrawal, but we may not be able to provide a treatment without the information we need to do it safely.

If you believe we have not handled your data properly, please contact us first. You may also complain to the Indonesian government authority responsible for personal data protection.

8. Cookies and analytics

The website uses cookies that are necessary for it and the booking form to work. We also use Google Analytics 4 to count visits, see which pages are useful and measure booking form submissions. Google Analytics uses cookies and processes your IP address; the reports we see are aggregated.

You can block or delete cookies in your browser settings, and you can stop Google Analytics from collecting your data with the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout). Blocking cookies may affect how some parts of the website work.

9. How we protect your data

We use reasonable technical and organizational measures to protect personal data against loss, misuse and unauthorized access, including access controls on our accounts and limiting access to health records to the specialists who need them. If a personal data breach occurs, we will notify you and the competent authority within 3 × 24 hours, as required by the PDP Law.

10. Children

Laser hair removal and Endosphères therapy are available to clients aged 14 and over. We treat clients aged 14–17 only with the consent of a parent or legal guardian, who must be present during the treatment. The full rules are in section 8 of our Terms & Conditions (/terms). Our website and booking form are meant for adults: if you are under 18, please ask your parent or guardian to contact us.

Children's personal data is specific personal data under the PDP Law. For clients under 18, we collect personal data, including health information, only with the consent of the parent or legal guardian, who gives it on the minor's behalf. We also keep the parent's or guardian's name, contact details and a record of their consent, and we may check their identity or authority as described in the Terms & Conditions.

11. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the date of the last update at the top.

12. Contact us

MORE Laser & Spa · PT The Creative Solution Bali
Company address: Jl. Sri Wedari No.52, Kelurahan Ubud, Kecamatan Ubud, Kabupaten Gianyar, Bali 80571, Indonesia
Studio: Jl. Sri Wedari No.52a, Ubud, Gianyar, Bali 80571, Indonesia
Email: more.laser.bali@gmail.com
WhatsApp: +62 878-3624-9980