Controller and contact
STREX LLC operates Bali Shortlist and determines how information submitted through this website is used. Privacy questions and requests can be sent to sean@balishortlist.com.
Information we collect and process
- Contact details such as your name and email when you subscribe, request a quiz report or contact us.
- Your selected quiz answers while the report is calculated, plus the calculated region result, relevant interests, consent choice and signup source used to personalise and deliver it.
- Contact-form topic and message.
- Purchase, tax, receipt, refund and licence information supplied by Lemon Squeezy.
- My Bali account email, sign-in provider and the regions or places you choose to save.
- Technical information needed for security and access, such as IP-derived rate-limit data, an essential paid-access cookie and licence activation status.
- Page, event and campaign parameters, including UTM parameters, only after you allow optional analytics.
Why we use it
We use information to provide a quiz report or newsletter you request, answer enquiries, process and support purchases, provide My Bali account features, match a verified Lemon Squeezy purchase to the checkout email, activate guide access, prevent abuse, maintain necessary records, improve the product and meet legal obligations. Ongoing marketing email is based on a separate consent choice; you can unsubscribe at any time.
Quiz reports, newsletters and forms
The region quiz sends your answer identifiers to a Netlify server function, which calculates the result again on the server. MailerSend receives the email address, first name and calculated result needed to send the requested report. We do not intentionally retain the individual quiz answers after that calculation. Netlify Forms receives a backup record of a confirmed submission containing contact details, consent status, signup source and the calculated result, but not the individual quiz answers.
Requesting a quiz report and joining the Bali Shortlist newsletter are separate choices. The report checkbox is required only to deliver the requested report. The newsletter checkbox is optional. MailerLite receives contact details, consent status and calculated result fields only when the optional newsletter choice is selected. Newsletter forms submit consented contact details through a Netlify function to MailerLite. Contact forms are handled by Netlify Forms so we can respond.
Service providers
We use service providers that process information for defined purposes:
- MailerSend for transactional delivery of requested quiz reports.
- MailerLite for consent-based newsletter subscriptions, personalisation and unsubscribe management.
- Netlify for website hosting, server functions, contact forms, confirmed-submission backups, rate limiting and security controls.
- Lemon Squeezy as merchant of record for checkout, payment, tax, receipt, licence and refund administration.
- Supabase for passwordless and Google account authentication, saved-place storage and server-side purchase-entitlement records. The browser never receives the Supabase secret key or purchase-entitlement table.
- Google Analytics only after you allow optional analytics, for page, event, campaign and aggregated funnel measurement. Names, email addresses, contact messages, licence keys, quiz answers and calculated quiz results are not sent to Google Analytics.
These providers may process information in the United States or other countries under their own safeguards and privacy terms. Where required, international processing is supported by the provider’s contractual and legal transfer mechanisms.
Cookies and local storage
The site uses essential storage for your analytics preference, a browser session for My Bali sign-in, and a secure, HTTP-only cookie after the server confirms Bali Unlocked access so that your browser can access the paid guide. Google Analytics and campaign-parameter storage start only after you choose “Allow analytics”. You can clear browser storage or adjust browser settings, although this may remove guide access from that browser and require signing in again.
Retention and security
We retain information only while it is reasonably needed for the purposes above, legal records, dispute handling or security. Transactional quiz-report delivery records may remain in MailerSend, consent-based newsletter records and calculated region result fields may remain in MailerLite, and confirmed Netlify form backups may remain until they are no longer needed, you ask us to delete them, or the applicable provider retention setting removes them. Email suppression records may be retained to honour an unsubscribe. Purchase, licence, tax and refund records may be kept for legal, accounting, fraud-prevention and support requirements. No internet service is completely secure, but we use access controls, server-side credentials and restricted data flows to reduce risk.
Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, withdraw consent, or receive a copy of your information. You may also complain to your local data-protection authority. To make a request, email sean@balishortlist.com. We may need to verify your identity.
Children
Bali Shortlist is not directed to children under 13 and we do not knowingly collect their personal information. If you are a parent or guardian and believe a child under 13 has submitted personal information through a newsletter, quiz or contact form, contact sean@balishortlist.com so we can investigate and delete it where required.
Changes
We may update this policy when our services, providers or legal obligations change. The updated date at the top shows when this version took effect.