How we handle the information you share.

Last updated: June 2026.

Who we are

The Annum (“we”, “us”) arranges curated family stays in Bali. We are the data controller for the personal information described in this notice. If you would like our full registered details, or wish to exercise any of the rights below, write to us at hello@theannum.com.

What we collect

We only collect what you choose to give us, plus a little technical information that helps the site work and improve.

When you make an enquiry, we collect the details you enter into the form: your name, your email address, what you have in mind, your rough timing, where you are currently based, your children and their ages where you choose to give them, anything you tell us in your note, and how you found us. These reach us by email through our forms provider and are stored in our private CRM so we can respond carefully and keep track of the conversation.

When you sign up to the Correspondence, we collect your email address so we can send you the occasional letter. You can ask us to stop at any time.

When you write to us directly, by email, we keep the correspondence so we can reply and refer back to it.

When you browse the site, we collect anonymised, aggregated information about how pages are used — for example which Journal entries are read. This is measured without cookies and cannot be linked to you or to any individual visitor, and nothing is stored on your device. Our hosting provider also keeps standard server logs for security and reliability.

Why we use it, and our legal basis

We use your information to reply to your enquiry and, where it leads somewhere, to take the steps needed to arrange a stay; to send the Correspondence if you have asked for it; and to understand and improve the site. Under UK and EU data protection law, our legal bases are: your consent (for the Correspondence sign-up, which you can withdraw at any time); steps taken at your request before entering into a contract (for handling your enquiry); and our legitimate interests in running and improving a secure website, including anonymous, cookieless analytics that identify no one. We do not use your information for automated decision-making or profiling.

Cookies

The site uses no advertising, tracking or analytics cookies, and we do not share anything with advertisers. The only thing kept on your device is the small amount of local storage described below, which the site needs to function.

Essential: on the enquiry form, the site keeps a short-lived draft of some of the fields you have typed, so they are not lost if the page reloads. This draft is held only in your browser’s session storage on your own device; it deliberately excludes your free-text note and any details about your children; it expires after twelve hours; and it is deleted as soon as your enquiry is sent. It is never sent anywhere to track you.

Analytics: we use Plausible to understand in aggregate how the site is used — which pages are read, and roughly where visitors arrive from. Plausible does not use analytics cookies or build personal profiles, stores nothing on your device, and the reports we receive do not identify individual visitors.

Who we share it with, and where it is stored

We do not sell your information. We share it only with the service providers that help us run the site and reply to you, each acting on our instructions:

• Formspree — delivers enquiry and Correspondence form submissions to our inbox (United States).
• Supabase — stores enquiry records in our private CRM, protected by authentication and access controls (United States / global infrastructure).
• Netlify — hosts the website and keeps standard server logs (United States / global edge network).
• Plausible Analytics — privacy-friendly, cookieless analytics; stores nothing on your device and identifies no one (European Union).
• Our email provider — used when we reply to you directly.

Because some of these providers are based outside your country, your information may be transferred internationally. Where that happens, it is protected by appropriate safeguards such as standard contractual clauses. We may also disclose information where the law requires it.

How long we keep it

We keep information only as long as we have a reason to, and the periods below are the defaults we work to:

• Enquiries that do not lead to an engagement: up to 24 months after our last contact, then deleted or anonymised.
• Enquiries and correspondence that lead to a stay: for the life of the engagement and up to 7 years afterwards, where we are required to keep records for tax, legal or contractual reasons.
• Correspondence (newsletter) sign-ups: until you unsubscribe, after which your address is removed.
• Direct emails to us: up to 24 months after the conversation ends, unless they form part of an ongoing relationship.
• Server logs held by our host: a short period for security and reliability, typically up to 30 days.
• Analytics: retained only in aggregate form that identifies no one, with no fixed expiry.

When a period ends, we delete or anonymise the information.

Your rights

You have the right to ask us for a copy of the information we hold about you; to have it corrected or deleted; to restrict or object to how we use it; to receive it in a portable format; and to withdraw consent at any time. To exercise any of these, write to hello@theannum.com and we will respond within the timeframe the law requires. If you are in the UK or EU and are unhappy with how we have handled your information, you may also complain to your local supervisory authority — in the UK, the Information Commissioner’s Office (ico.org.uk).

Children

The site is intended for adults arranging a family stay. We do not knowingly collect information directly from children. Where you tell us about your children as part of an enquiry, we treat that information with particular care and use it only to plan the stay you have asked about.

Changes to this notice

We may update this notice from time to time. When we do, we will change the date at the top. Material changes will be made clear on this page.

Contact

For anything to do with your privacy or this notice, write to hello@theannum.com.

The Annum  ·  Bali · New Zealand  ·  By introduction