Privacy Policy

Who we are

We are the controller of the personal data processed through this website. If you have any questions, you can reach us through the channels at the end of this policy.

Information we collect

We collect personal data in two ways:

• Information you give us — when you submit the contact form we collect your name, email address, subject, and message.
• Information collected automatically — when you visit the site we record limited technical data for security and aggregate analytics: your IP address, browser type (user agent), the pages you view, the referring page, and a timestamp.
• When you submit an enquiry, we also record how you reached us — the landing page, the referring site, and any campaign parameters (UTM tags) or ad click identifiers (such as Google gclid or Facebook fbclid) in the link you followed — to understand which channels generate enquiries.
• Cookies and similar technologies — described in our Cookie Policy.

How we use your information

We use personal data to:

• respond to and manage your inquiry;
• operate, secure, and maintain the website;
• understand aggregate usage so we can improve our content;
• comply with our legal obligations.

Legal basis for processing

We rely on the following legal bases:

• Consent — when you submit the contact form and when you accept optional cookies.
• Legitimate interest — to keep the site secure and to measure aggregate traffic, using the minimum data necessary and short retention.
• Legal obligation — where we must retain or disclose data to comply with applicable law.

Cookies and tracking

We use a small number of cookies and similar technologies. You can review the full list and change your choices at any time in our Cookie Policy.

Sharing and third parties

We do not sell your personal data. We share it only with service providers who process it on our behalf, under appropriate safeguards:

• Cloudflare — bot and spam protection (Turnstile) on our forms.
• Our email/SMTP provider (Brevo) — to deliver replies to your inquiries.
• Our hosting provider — to operate the website.

International transfers

Some of these providers may process data outside Indonesia. Where they do, we rely on appropriate safeguards and limit the data to the minimum necessary.

How long we keep data

• Contact messages — kept only as long as needed to handle your inquiry and our records, then deleted.
• Visitor analytics — automatically deleted after 90 days.

How we protect your data

We protect personal data with encryption in transit (HTTPS), access controls, and security headers. No method of transmission is completely secure, but we take measures appropriate to the risk.

Your rights

Under UU PDP — and the GDPR where it applies — you have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your data;
• object to or restrict certain processing;
• withdraw consent at any time;
• lodge a complaint with the relevant supervisory authority.

Children’s privacy

This website is intended for a professional audience and is not directed to children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the current version, and material changes will be highlighted on this page.