Privacy Policy

Who we are

This policy explains how PT Arthavara Skala Kria, operating as UPSCALE (we), handles personal data on upscale.asia. We manage hotels and their distribution in Indonesia.

We decide why and how the personal data described here is used. You can reach us at contact@upscale.asia.

What we collect and why

We collect only what we need for the purposes below.

• →Contact form: your name, email address, property and location, what you are interested in, and your message. We use it to reply to you.
• →Free audit request: your property details (name, website, type, rooms, location, average daily rate and occupancy where given), the systems you use, your goals, the share of bookings from OTAs, the biggest problem you describe, and your name, email and optional WhatsApp number. We use it to prepare and send your audit report and to follow up on it.
• →Hotel Skills generator: the task description you type. It is used only to generate your Skill.
• →Messages you send by email or WhatsApp: whatever you choose to share with us.
• →Website analytics, only if you accept: pages viewed, approximate location, device and browser type, how you arrived, and actions such as sending a form. This shows us which pages are useful.
• →Technical and security data: our hosting provider records technical details of each request, such as IP address, browser type and the page requested, in server logs. We also keep short-lived counters based on a scrambled form (hash) of your IP address to stop abuse of our forms.

Why we may use it

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and, for visitors in the European Economic Area or the United Kingdom, the GDPR, we rely on the following.

• →Your consent, for analytics cookies. You can withdraw it at any time with Cookie settings in the footer.
• →Steps taken at your request and our legitimate interest in answering enquiries and preparing audits, for the contact form, the audit form, the Hotel Skills generator and your messages.
• →Our legitimate interest in keeping the site secure and preventing abuse, for technical and security data.

Who receives your data

We do not sell personal data. We share it only with the providers below, who process it for us or under their own terms.

• →Hostinger, our web hosting provider, which stores the website, its server logs and the files holding form submissions.
• →Our email provider, which delivers form submissions to our mailbox and carries our replies.
• →Google, only if you accept analytics: Google Analytics processes the analytics data described above. We have switched off Google signals and ad personalization.
• →Anthropic, provider of the Claude AI model, which receives the task description you type into the Hotel Skills generator in order to produce the Skill, and handles it under its own terms. Please do not enter personal or confidential information there.
• →WhatsApp and LinkedIn, if you use our links to contact or follow us. They handle your data under their own policies.
• →Authorities, where the law requires it.

Links to other websites, such as our Stays link, are covered by those sites' own policies.

Transfers outside Indonesia

Some providers, for example Google and Anthropic, process data outside Indonesia, including in the United States. When personal data is transferred abroad, we do so only where the recipient is bound to protect it to an adequate standard by contract or other safeguards, or where you have consented.

How long we keep it

• →Form submissions and related emails: only as long as needed to answer you and follow up, and normally no longer than 24 months after our last contact, unless we work together and the relationship requires us to keep more.
• →Analytics data: up to 14 months in Google Analytics.
• →Server logs: for the standard period kept by our hosting provider.
• →Anti-abuse counters: scrambled IP addresses are removed within about two days.
• →Your cookie choice and any unfinished audit draft stay on your own device until you clear them.

Cookies and local storage

We use very few. The language of the site is set by the page address, not by a cookie.

• →upscale-consent (local storage): remembers whether you accepted or declined analytics.
• →upscale-audit-draft (local storage): saves your answers on the audit form, without your contact details, so you can come back to it. It is removed when you send the form.
• →_ga and _ga_ cookies (Google Analytics): tell visitors and sessions apart. Set only if you accept.

You can change your choice at any time with Cookie settings in the footer, or by clearing your browser data.

Your rights

You can ask us to:

• →show you the personal data we hold about you
• →correct it if it is wrong or incomplete
• →delete it, or restrict how we use it
• →stop using it, where we rely on our legitimate interest
• →give you a copy in a common format
• →stop analytics by withdrawing your consent, which does not affect earlier use

Write to contact@upscale.asia. We may ask you to confirm who you are, and we reply within 30 days at the latest. You may also complain to the Indonesian personal data protection authority or, if you are in the EEA or the UK, to your local data protection authority.

Security

We use HTTPS, store form submissions outside the public web folder, and limit how many requests one visitor can send. No system is completely secure. If a breach affects your personal data, we will notify you and the authorities as the law requires.

Children

This site is meant for hotel owners, operators and other businesses. It is not directed at children, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is significant, we will say so on this page.

Contact

Questions or requests about your personal data: contact@upscale.asia, or WhatsApp +62 819-0157-5869.