Privacy Policy
Your Story Is Safe Here
We believe every person carries a basic goodness, a natural clarity and warmth. Caring for that goodness includes caring for what you share with us.
This page explains, in plain words, what happens to your information when you visit InnerPeace.id or get in touch to arrange a session in Bali or online. We keep it simple: collect as little as possible, use it only for a clear purpose, and look after it wholeheartedly.
- Effective 2 November 2026
- No analytics, no ads
- Indonesian PDP Law and GDPR
At a Glance
No Forms
There is no contact form, account, newsletter, or comment box. You reach us through your own WhatsApp or email.
No Analytics or Ads
No Google Analytics, no advertising pixels, and no profiles of you built from your visits.
A Few Small Cookies
Only small, functional items that help the site work, plus YouTube’s own cookies if you open a video. Each one is listed in section 3.
Never Sold
Your personal data is never sold, rented, or traded to anyone, for any reason.
You Stay in Control
Ask to see, correct, or delete your data at any time, with one message.
Made for Visitors to Bali
Your hotel area, travel dates, or time zone are used only to arrange your session, then let go.
Who We Are
InnerPeace.id at innerpeace.id is the English-language home of the work of Andreas Pasolympia, a meditation and nonduality teacher based in Bali, Indonesia. Here you can learn about private meditation, Reiki, tarot, trauma healing, nonduality mentorship, and facilitator training, in Bali and online.
In this policy, “we”, “us”, and “our” mean InnerPeace.id and Andreas Pasolympia, who is responsible for your personal data as the data controller under Indonesia’s Personal Data Protection Law, Law No. 27 of 2022, referred to here as the PDP Law. Because many of our guests travel from Europe, the UK, and beyond, we also follow the principles of the EU General Data Protection Regulation, the GDPR.
What Data We Receive and Why
You never need to introduce yourself to read this website. Only a few kinds of information may reach us:
Technical Visit Data
Like almost every website, our hosting server and its security firewall automatically record technical details: your IP address, browser and device type, the pages you open, the time of your visit, and the page that referred you.
Why: to keep the site running, protect it from attacks and spam, and fix errors. We do not use this to profile you.
WhatsApp and Email Messages
The green WhatsApp button and the links on our pages open WhatsApp or your own email app, sometimes with a short greeting already written for you. When you write, we receive your name, your phone number or email address, your message, and anything you choose to share.
Why: to answer you, check availability, agree on the format and fee, and stay in touch about your session or training.
Travel and Session Details
To arrange a visit, you may tell us your preferred dates, the area of your hotel or villa, or your time zone for online sessions. When we confirm, we may also need the exact address where we will meet.
Why: only to plan and hold the session you asked for. We do not use it for anything else.
Personal and Health-Related Stories
Inner work can touch your experiences, emotions, health, beliefs, or relationships. Some of this is sensitive, specific personal data under the PDP Law and special-category data under the GDPR. We hold it in full confidence and use it only to support you, with your explicit consent.
A gentle suggestion: in your first message, a few lines about what you are looking for are enough. Deeper stories can wait until we have met and you feel safe.
Our legal bases are your consent, steps you ask for before or during our work together, legal obligations such as tax records, and our legitimate interest in keeping the site secure. We never use your data for advertising and make no automated decisions about you.
Cookies and Browser Storage
Cookies and similar storage are small pieces of data your browser keeps on your device. This is the complete list we found when checking the site on 2 November 2026:
| Name | Set By | Purpose | Duration |
|---|---|---|---|
hidectaFunctional | InnerPeace.id theme | Remembers whether a call-to-action box should stay hidden, so it does not keep reappearing. | Until you close the browser |
cache-sprite-plyrLocal storageTechnical | Plyr media player | Stores the player’s icon set so audio and video controls load faster. Contains no personal data. | Until you clear site data |
| Offline page cacheService worker storageFunctional | Super PWA plugin | Keeps copies of pages you have opened on your own device, so the site loads quickly and works offline or as an app. | Until you clear site data |
YSC, VISITOR_INFO1_LIVE and similarOn youtube.comThird Party | YouTube, owned by Google | Set only if you open one of the videos on our homepage. YouTube uses them to play the video, remember settings, and protect against abuse, under Google’s own policy. | From the end of your visit to several months |
wordpress_*, wfwaf-authcookie-*Admin Only | WordPress and Wordfence | Used only when the site owner logs in to the dashboard. Visitors never receive them. | Session, up to 14 days |
Our own items only help the site work and none of them track you for marketing, so we do not show a cookie banner. No third-party cookies are set while you simply browse. They appear only if you choose to open one of our videos. You can view and delete cookies and site data at any time in your browser settings. If we ever add analytics or similar tools, this policy will be updated first, and we will ask for your consent where the law requires it.
Tools Behind the Site
InnerPeace.id runs on WordPress with a small set of plugins. Here is what each one does with data:
Wordfence
A security firewall and login protection. It checks incoming requests, including IP addresses, to block attacks, and may share limited technical data with its developer to recognize threats. Wordfence Privacy Policy.
WP Mail SMTP
Sends the site’s own system emails, such as security alerts and notices to the site owner, through a secure mail connection. Visitors do not submit anything through it.
Click to Chat
Shows the green WhatsApp button. Tapping it opens WhatsApp with a short greeting. The plugin can report clicks to analytics tools, but none run on this site, so no click data is sent.
Super PWA
Lets you save the site to your home screen and read it offline. Its helper loads the Workbox library from Google’s servers when it installs in your browser.
Yoast SEO
Helps search engines understand our pages through titles and structured data. It does not track visitors.
W3 Total Cache
Stores ready-made copies of pages on our server so they load faster. It does not create profiles of visitors.
Third-Party Services
A few trusted services help this website and our work. Each handles data under its own policy:
- Rumahweb Indonesia hosts our server in Jakarta. Technical visit logs are stored there.
- Google provides our email through Gmail. Online sessions may use Google Meet, and some pages link to reviews on Google Maps. Google Privacy Policy.
- WhatsApp, owned by Meta, carries most of our conversations and some online sessions. WhatsApp Privacy Policy.
- YouTube, owned by Google, plays the videos on our homepage. The player loads only when you open a video, in its privacy-enhanced mode, and YouTube may then set its own cookies. How Google Uses Cookies.
- Plyr delivers the media player’s icons from its own content network, which sees your IP address.
- Zoom may be used for online sessions, if that is what we choose together.
- Partner practitioners, such as our Vedic astrology partner, are independent. When you contact them, they handle your details, including any birth data you share, under their own care.
We also link to Udemy, Instagram, LinkedIn, YouTube, Tripadvisor, and our Indonesian-language site. These links send nothing to those platforms until you click them.
Some providers, such as Google, Meta, and Zoom, may process data outside Indonesia, including in the United States. We choose providers with reasonable data protection practices, in line with the PDP Law’s rules on cross-border transfers and the safeguards of the GDPR. Otherwise, your data is shared only when the law requires it or when you ask us to.
How Long Data Is Kept
We keep data only as long as it is needed, then delete or reduce it.
- Messages and session notes: while they are relevant to our conversation or ongoing work, then reviewed for deletion. You may ask for earlier deletion at any time.
- Your hotel or villa address: deleted once the session has taken place, unless we arrange more visits.
- Payment records: as long as Indonesian tax and record-keeping rules require.
- Server and security logs: according to the standard cycles of our hosting provider and Wordfence.
- Cookies and browser storage: as shown in the table above, or until you clear them.
- Backups: may remain for a limited time until routine backups replace them.
Security
The whole site is served over encrypted HTTPS, protected by a firewall, and set up to block browser access to your camera, microphone, location, and payments. Access to the dashboard and our inbox is limited to Andreas. We will never ask for your passwords or card details through the website.
No digital system is entirely free of risk. If a breach ever affects your data, we will inform you and the authorities as the PDP Law and the GDPR require.
Your Rights over Your Data
Under Indonesia’s PDP Law, you have the right to:
- Be Informedabout who processes your data, why, and on what basis.
- Accessyour personal data and receive a copy.
- Correctdata that is wrong or incomplete.
- Eraseor have your data destroyed, as the law allows.
- Withdraw Consentat any time, where we rely on consent.
- Pause or Restrictthe processing of your data.
- Move Your Datain a commonly used format.
- Object and Seek Redressif your rights are not respected.
Send your request by email with the subject “Privacy Request”. We will reply as soon as we can, within the time limits set by law. To protect you, we may ask for reasonable proof of identity. Please do not send identity documents unless we ask.
For Visitors from the EU, EEA, and UK
If you live in or are visiting from the European Union, the European Economic Area, or the United Kingdom, the GDPR and UK GDPR also give you the rights of access, rectification, erasure, restriction, data portability, objection, and withdrawing consent. You also have the right to complain to the data protection authority in your country. Wherever you call home, we will gladly honor similar rights under your local law.
Children’s Privacy
Our website and sessions are meant for adults. If you are under 18, please ask a parent or guardian to contact us and join you. If we learn that a child’s data was shared without a parent’s or guardian’s consent, we will delete it promptly.
Changes to This Policy
We will update this policy when the site’s features, the services we use, or the law change. The latest version always lives on this page with its effective date. If a change is significant and we are in touch, we will tell you directly.
Contact Us
A question, a request, or a worry about your data? We would be glad to hear from you.
Let’s Talk
Write to us with the subject “Privacy Request”. Share only what you need to, and Andreas will reply with full attention.
May you feel safe, respected, and at home here, just as you are.