Privacy Policy
Effective Date: 30 August 2026
Last Updated: 30 August 2026
COCA Theatre (“COCA”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your Personal Data.
This Privacy Policy explains how we collect, use, store, disclose, and protect Personal Data when you visit or use the COCA Theatre website, ticketing system, online booking platform, or related services.
This Privacy Policy is intended to apply to the processing of Personal Data in connection with COCA Theatre's ticketing services and is prepared with reference to applicable Indonesian data-protection laws and regulations, including Law No. 27 of 2022 concerning Personal Data Protection (Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi).
1. Who We Are
The party responsible for the processing of your Personal Data is:
PT TITIK TITIK TERANG
Operating COCA Theatre
Jl. Cok Rai Pudak No.48, Peliatan
Kecamatan Ubud, Kabupaten Gianyar, Bali 80571, Indonesia
For privacy-related questions or requests, please contact:
Email: info@titikdua.id
Telephone/WhatsApp: +62 811-9693-9391
Where a third-party ticketing or technology provider processes Personal Data on our behalf, that provider may act as a Personal Data Processor or other service provider in accordance with the applicable arrangement and applicable law.
2. Personal Data We May Collect
Depending on how you use our services, we may collect:
Information you provide directly, such as:
full name;
email address;
telephone or mobile number;
booking information;
selected film, screening date and time;
selected seat;
transaction or booking reference;
membership or loyalty information, where applicable;
information provided when contacting customer service; and
other information you voluntarily provide to us.
Transaction information, such as:
ticket purchase details;
payment status;
transaction reference;
refund or cancellation information; and
products or services purchased.
We generally do not need to receive or store your complete payment-card details when payment is processed by a third-party payment provider. Payment information may instead be processed directly by the relevant payment service provider according to its own terms and privacy policy.
Technical information, which may include:
IP address;
browser type;
device information;
operating system;
approximate location derived from technical information;
pages or features accessed;
date and time of access;
cookies and similar technologies; and
information relating to errors or technical problems.
3. How We Use Personal Data
We may process Personal Data for the following purposes:
Ticket booking and transaction fulfilment
To process your ticket purchase, issue your ticket or booking confirmation, process payments, manage seating, provide customer support, and administer refunds or exchanges.
Communication regarding your booking
To contact you regarding your transaction, including booking confirmations, payment issues, screening changes, cancellations, venue information, or other information necessary to fulfil your booking.
Venue operations
To manage admissions, validate tickets, prevent fraud or misuse, manage customer service enquiries, and maintain the safety and operation of COCA Theatre.
Improving our services
To understand how customers use our website and ticketing services, troubleshoot technical issues, improve functionality, and develop our services.
Marketing
Where permitted by applicable law and where you have provided the required consent or another lawful basis applies, we may use your contact details to send information about COCA Theatre screenings, events, exhibitions, dining, promotions, memberships, or other relevant activities.
You may withdraw your marketing consent or unsubscribe from marketing communications at any time.
Legal and regulatory purposes
We may process or disclose Personal Data where reasonably necessary to comply with applicable laws, regulations, legal proceedings, lawful requests from authorities, or to establish, exercise, or defend legal claims.
4. Legal Basis for Processing
Depending on the circumstances, we may process Personal Data based on:
the performance of a contract or steps necessary to enter into a contract;
your consent, where consent is required;
compliance with applicable legal obligations;
legitimate and lawful interests, where permitted by applicable law and where those interests do not override your rights; and
other lawful grounds available under applicable Indonesian law.
Where consent is required, we will seek consent in a clear and distinguishable manner.
Under Indonesia's Personal Data Protection Law, consent for processing Personal Data may be provided electronically or non-electronically and must be given in a manner that is clear and understandable.
5. Marketing Communications
If you choose to receive marketing communications from COCA, we may contact you by email, WhatsApp, SMS, or other communication channels for which appropriate consent or another lawful basis exists.
Marketing communications may include:
upcoming film screenings;
special screenings and events;
promotions;
memberships;
COCA programmes;
dining or hospitality offers; and
other COCA-related experiences.
You can unsubscribe from marketing communications at any time by using the unsubscribe function provided in the communication or by contacting us.
Withdrawing marketing consent will not affect your ability to purchase tickets or use COCA's services.
6. Sharing Personal Data
We do not sell your Personal Data.
We may share Personal Data with selected third parties where reasonably necessary to provide our services, including:
ticketing and booking technology providers;
payment service providers;
email, SMS, WhatsApp, or other communication providers;
IT, hosting, cybersecurity, and technical service providers;
customer-service providers;
professional advisers;
auditors or insurers;
government authorities or law-enforcement bodies where legally required; and
other parties where you have provided appropriate consent or where disclosure is otherwise permitted or required by law.
Third parties receiving Personal Data from us are expected to process it only for appropriate purposes and to maintain appropriate confidentiality and security.
7. Third-Party Ticketing Providers
COCA may use a third-party ticketing platform to provide online ticket sales and booking functionality.
When you use such a platform, certain information may be processed by both COCA and the relevant service provider.
The third-party provider may have its own privacy policy governing its processing activities.
Where applicable, customers should review the relevant third-party privacy policy in addition to this Privacy Policy.
8. International Transfers
Some of our technology, hosting, payment, communication, or other service providers may process Personal Data outside Indonesia.
Where Personal Data is transferred outside Indonesia, COCA will take appropriate steps to ensure that the transfer and subsequent processing comply with applicable Indonesian data-protection requirements.
9. Data Security
We take reasonable technical and organisational measures to protect Personal Data against unauthorised access, disclosure, alteration, misuse, loss, destruction, or other unlawful processing.
Depending on the service involved, security measures may include access controls, encryption, authentication procedures, secure communications, system monitoring, and other appropriate safeguards.
However, no electronic system or method of transmission over the internet can be guaranteed to be completely secure.
10. Data Retention
We retain Personal Data only for as long as reasonably necessary for the purposes for which it was collected, including to:
complete and administer transactions;
provide customer support;
maintain appropriate business and transaction records;
comply with legal, tax, accounting, and regulatory obligations;
prevent fraud and misuse; and
establish, exercise, or defend legal claims.
When Personal Data is no longer required, we will delete, destroy, anonymise, or otherwise process it in accordance with applicable law and our data-retention practices.
Specific retention periods may vary depending on the type of information and the purpose for which it is processed.
11. Cookies and Similar Technologies
Our website and ticketing system may use cookies and similar technologies to:
enable essential website and booking functions;
remember preferences;
maintain your booking session;
understand how our website is used;
diagnose technical problems;
improve website functionality; and
where permitted, support analytics and marketing activities.
You may be able to control or disable certain cookies through your browser or device settings.
Please note that disabling essential cookies may affect the functionality of the booking system.
12. Usage and Technical Data
We may automatically collect technical information such as IP addresses, browser information, device information, access times, and pages or functions used.
This information may be used for security, fraud prevention, technical troubleshooting, system administration, analytics, and improving the Ticketing Service.
Where possible, information used for analytics will be aggregated or otherwise handled in a manner that reduces the ability to identify individual users.
13. Personal Data About Other People
If you provide Personal Data belonging to another person, for example when purchasing tickets on behalf of another guest, you confirm that you are authorised to provide that information and that you have informed the relevant person about the applicable privacy practices where required by law.
You should only provide information that is reasonably necessary for the relevant booking or service.
14. Children's Personal Data
COCA does not intentionally collect children's Personal Data beyond what is reasonably necessary to provide its services.
Where the processing of a child's Personal Data is required, COCA will apply the additional protections required under applicable law.
Indonesia's Personal Data Protection Law specifically provides that the processing of children's Personal Data is subject to special treatment and requires parental or guardian consent in accordance with applicable law.
15. Your Rights
Subject to applicable law and any relevant limitations, you may have the right to:
obtain information about how your Personal Data is processed;
access your Personal Data;
correct or update inaccurate or incomplete Personal Data;
request deletion or destruction of Personal Data where legally applicable;
withdraw consent where processing is based on consent;
request restriction or suspension of processing in certain circumstances;
obtain or request transfer of your Personal Data where applicable;
object to certain processing activities; and
exercise other rights provided under applicable Indonesian data-protection law.
These rights are reflected in the rights granted to Personal Data Subjects under Indonesia's Personal Data Protection Law.
16. How to Exercise Your Rights
To submit a privacy or Personal Data request, please contact:
Please include sufficient information for us to identify your request and verify your identity where reasonably necessary.
We may need to request additional information to verify that the person making the request is the relevant Personal Data Subject or an authorised representative.
We will respond to requests in accordance with applicable law.
17. Withdrawal of Consent
Where processing is based on your consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Please note that withdrawing consent may affect our ability to provide certain services where the relevant processing is necessary to provide those services.
18. Complaints
If you have concerns about how COCA processes your Personal Data, please contact us first at:
We will review and respond to your concern in accordance with applicable law.
You may also have the right to submit a complaint to the relevant Indonesian data-protection authority or other competent authority in accordance with applicable law.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements, or data-processing practices.
The latest version will be published through the official COCA Theatre website or Ticketing Service.
Where required by law, we will provide appropriate notice before material changes take effect.
20. Contact Us
For general ticketing enquiries & Personal Data and privacy enquiries:
COCA Theatre
Titik Dua Ubud
Jl. Cok Rai Pudak No.48, Peliatan
Kecamatan Ubud, Kabupaten Gianyar, Bali 80571, Indonesia
Email: info@titikdua.id
WhatsApp/Telephone: +62 811-9693-9391
For Personal Data and privacy enquiries:
Privacy Contact
COCA Theatre / Titik Dua Ubud
Email: info@titikdua.id
Last Updated: 30 August 2026
Last updated 2 September 2026.