Anteya — Global investments property consultants

Privacy Policy

Website: anteyac.com Brand: Anteya ("Anteya", "we", "us", "our") Last updated: 16 April 2026 Effective date: 16 April 2026

1. Who we are (Joint Data Controllers)

Anteya operates as a real estate marketing and advisory agency for properties located in Bali, Indonesia. The Anteya brand is operated jointly by the following two legal entities, which act as Joint Controllers of your personal data within the meaning of Article 26 GDPR:

1.1. PT ANTEYA REAL ESTATE ("Anteya Indonesia")

  • A limited liability company (Perseroan Terbatas Penanaman Modal Asing) incorporated in the Republic of Indonesia.
  • Registered address: Emerhub Virtual Office, Jalan Sunset Road Nomor 89, Pertokoan Sunset Indah I, Nomor 3B, Desa/Kelurahan Kuta, Kecamatan Kuta, Kabupaten Badung, Provinsi Bali 80361, Indonesia.
  • NIB: 2806240056034 · NPWP: 19.744.279.1-905.000 (NPWP-16: 0197 4427 9190 5000) · KPP Pratama Badung Selatan
  • Role: on-the-ground operations — property viewings, client meetings, local KYC/AML, liaison with Indonesian developers, notary coordination.

1.2. ANTEYA COMPANY LIMITED ("Anteya HK")

  • A limited company incorporated in the Hong Kong Special Administrative Region.
  • Registered address: Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong 999077.
  • Business Registration Number: 76493770
  • Role: website operation, international marketing, CRM administration, international invoicing for non-Indonesian counterparties.

The two entities have entered into a Joint Controller arrangement. The primary point of contact for all data-subject requests is Anteya HK:

Privacy contact email: office@anteyac.com Postal contact: attn. Data Protection Officer, at the Hong Kong address above.

2. Scope of this Policy

This Policy covers personal data we collect when you:

  • visit anteyac.com or any subdomain we operate;
  • submit a contact / enquiry / viewing-request form on our website;
  • subscribe to our newsletter;
  • message us via WhatsApp, email or other communication channels we publish;
  • meet with us in person or view a property with us.

We do not process payments from buyers. Property purchases are transacted directly between you and the developer/seller. Anteya receives its remuneration as a commission paid by the developer. We may still collect limited KYC information when required by Indonesian AML law (UU No. 8/2010) or developer requirements.

3. What personal data we collect

3.1. Data you provide directly

  • Identity & contact data: full name, email, phone number, WhatsApp handle, country of residence, preferred language.
  • Property preferences: budget, location, type of property, investment goals, timeframe.
  • KYC data (only when required for a transaction): passport scan, address proof, source-of-funds declaration, tax residency.
  • Correspondence: content of messages you send us, viewing notes, call summaries.

3.2. Data collected automatically

  • Device & usage data: IP address, browser type, device type, operating system, referring URL, pages visited, time spent, UTM parameters.
  • Cookies and similar technologies — see Section 9.

3.3. Data from third parties

  • Developers, notaries and legal counsel (when they share counterparty details with us in connection with a transaction).
  • Advertising platforms (Google, Meta) when you click through our ads — see Section 9.

We do not knowingly collect data from children under 16 and do not market to them.

4. Why we use your data (purposes & legal bases under GDPR)

# Purpose Legal basis (GDPR Art. 6)
a Responding to enquiries, arranging viewings, providing information on listings Art. 6(1)(b) — pre-contractual measures at your request
b Facilitating the purchase process between you and the developer (introductions, coordination, negotiation support) Art. 6(1)(b) — performance of our advisory service
c Sending newsletters and marketing emails about new listings and market insights Art. 6(1)(a) — consent; withdrawable at any time
d Website analytics and performance measurement Art. 6(1)(a) — consent via cookie banner
e Retargeting and advertising on Meta / Google Art. 6(1)(a) — consent via cookie banner
f KYC / AML compliance Art. 6(1)(c) — legal obligation (Indonesia AML law); Art. 6(1)(f) — legitimate interest in preventing fraud
g Accounting, tax, and internal record-keeping Art. 6(1)(c) — legal obligation under Indonesian and Hong Kong law
h Defending legal claims Art. 6(1)(f) — legitimate interest

For California residents, the equivalent CCPA "business purposes" apply (providing services, security, compliance, analytics, advertising).

5. Who we share your data with

We do not sell your personal data. We share it only with:

  • Developers and property sellers — when you express interest in a specific property, to the extent strictly necessary to arrange a viewing or proceed with a purchase.
  • Notaries (PPAT), lawyers, tax advisors — on your instruction, to execute the transaction.
  • Service providers (processors) acting on our instructions:
    • Vercel Inc. (USA) — website hosting.
    • Kommo LLC (EU region) — CRM and lead management.
    • Google LLC (USA/EU) — Google Analytics 4, Google Ads.
    • Meta Platforms Ireland Ltd. (EU) — Meta Pixel, Meta Ads.
    • WhatsApp (Meta) — messaging with clients who initiate WhatsApp contact.
    • [Email service provider, e.g. Google Workspace] — business email and newsletter delivery.
  • Banks and payment processors — only if a direct payment is made to Anteya for an advisory retainer (rare).
  • Public authorities — where required by law, court order or valid regulatory request in Indonesia, Hong Kong, the EU or another applicable jurisdiction.

Between the Joint Controllers (Anteya Indonesia ↔ Anteya HK), personal data is shared under an internal Data Sharing Agreement on a need-to-know basis.

6. International data transfers

Because the Joint Controllers are based in Indonesia and Hong Kong, and some of our processors are in the USA, your data will be transferred outside the European Economic Area, the United Kingdom and Switzerland.

We rely on the following safeguards under GDPR Art. 46:

  • Standard Contractual Clauses (SCCs) concluded with Vercel, Google, Meta and other non-adequacy processors;
  • Supplementary technical measures (TLS in transit, encryption at rest, access controls);
  • For Indonesia: transfers comply with UU No. 27/2022 on Personal Data Protection (Indonesia PDP Law);
  • For Hong Kong: transfers comply with the Personal Data (Privacy) Ordinance (Cap. 486).

You can request a copy of the SCCs and the Joint Controller arrangement by emailing office@anteyac.com.

7. How long we keep your data

Data category Retention period
Lead / enquiry data (no transaction) 24 months from last contact, then deleted or anonymised
Client data (transaction completed) 10 years from transaction close (Indonesian tax & AML recordkeeping requirement)
Newsletter subscriber data Until you unsubscribe + 12 months backup retention
Website analytics (GA4) 14 months
Advertising cookies Max 13 months (EU standard)
Accounting records 10 years (ID) / 7 years (HK)
Correspondence unrelated to transactions 3 years

8. Your rights

Depending on where you live, you have some or all of the following rights:

8.1. Under GDPR (EEA / UK / Switzerland)

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure / "right to be forgotten" (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object, incl. to direct marketing (Art. 21)
  • Right to withdraw consent at any time (Art. 7(3)) — without affecting prior lawful processing
  • Right to lodge a complaint with your local Data Protection Authority

8.2. Under the CCPA/CPRA (California, USA)

  • Right to know what personal information we collect, use, disclose
  • Right to delete
  • Right to correct
  • Right to opt out of "sharing" for cross-context behavioural advertising — use the "Do Not Sell or Share My Personal Information" link in the cookie banner.
  • Right to non-discrimination
  • We do not sell personal information for money.

8.3. Under Indonesia PDP Law (UU 27/2022)

  • Similar rights to GDPR, plus the right to know the legal basis, purpose, accountability and processors involved.

8.4. How to exercise your rights

Email office@anteyac.com with a description of your request. We respond within 30 days (GDPR) or 45 days (CCPA). We may need to verify your identity before acting.

9. Cookies and tracking technologies

Our website uses the following categories of cookies / trackers:

Category Examples Purpose Requires consent?
Strictly necessary Vercel session, CSRF Site function No
Analytics Google Analytics 4 (_ga, _ga_*) Usage measurement Yes
Advertising Meta Pixel (_fbp, fr), Google Ads (_gcl_au) Retargeting, conversion tracking Yes
Functional Language preference Remember settings No (1st-party only)

On first visit you will see a cookie banner allowing you to Accept all, Reject all non-essential, or Manage preferences. You can change your choice at any time via the "Cookie settings" link in the footer.

10. Security

We apply technical and organisational measures appropriate to the risk: HTTPS/TLS, encryption at rest for CRM and backups, role-based access control, MFA for staff accounts, regular access reviews, and a documented incident response process. In the event of a personal data breach likely to result in a risk to your rights, we will notify the relevant supervisory authority within 72 hours and, where required, notify you without undue delay.

11. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you within the meaning of GDPR Art. 22.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be flagged on the homepage and emailed to newsletter subscribers at least 14 days before taking effect. The "Last updated" date above always reflects the current version.

13. Contact & complaints

Privacy contact: office@anteyac.com Anteya HK (lead contact): ANTEYA COMPANY LIMITED — Unit 1603, 16th Floor, The L. Plaza, 367–375 Queen's Road Central, Sheung Wan, Hong Kong 999077. Anteya Indonesia: PT ANTEYA REAL ESTATE — Emerhub Virtual Office, Jalan Sunset Road No. 89, Pertokoan Sunset Indah I No. 3B, Kuta, Badung, Bali 80361, Indonesia.

If you are in the EEA/UK and are not satisfied with our response, you have the right to lodge a complaint with your national Data Protection Authority. In Hong Kong, the supervisory body is the Office of the Privacy Commissioner for Personal Data (PCPD). In Indonesia, it is the Data Protection Authority established under UU 27/2022.