01 How We Obtain Your Personal Data
Your Personal Data may reach Us through any of the following routes:
- Provided by you directly, whether when registering, using the Services, or contacting our customer support team.
- Provided by you through a specific third party you have asked to pass it on to Us.
- Recorded automatically from the Platform, the browser, and the device you use to access the Services.
02 The Personal Data We Collect
Depending on how you use the Services, the Personal Data We process may include:
- Identity and contact data — your name, business name, phone number, and email address, as provided directly to Us.
- Usage activity data — the record of how you use the Services. This includes the data you enter, the transactions you process, the parties who communicate or exchange content with you, and activity on connected third-party sites and applications that work with our Services.
- System log data — technical information recorded on our servers. This includes your device IP address, date and time of access, the features or pages opened, how processes run within the Services and other system activity, browser type, and the site or service you visited immediately before reaching the Services.
- Subscription billing data — the billing record for the Service plan you use. This includes payment history, the type of payment method used, transaction amount and status, and billing and invoice details. Your card or bank account details are handled directly by the payment provider and are not stored by Us.
We do not request specific categories of data such as health records, biometric data, or criminal history through the Services.
03 Why We Process Your Personal Data
We process your Personal Data for the following purposes:
- Providing our Services and products to you.
- Registering you as a Platform user, and administering and managing your account.
- Notifying you of activity taking place within our Platform or on connected systems.
- Communicating with you directly and informing you of any update or change to the Services.
- Sending you information relating to your use of the Services.
- Maintaining, troubleshooting, developing, and tailoring the Services to better suit your needs and preferences.
- Sending you advertising, communications, and marketing material relevant to your profile, where you have given separate consent for it. We may send this through the Platform, short messages, chat applications, push notifications, telephone calls, or email. You can withdraw that consent at any time, either through the unsubscribe link in each message or by contacting Us, without affecting the Services you use.
- Developing, testing, improving, and enhancing both existing and new Services.
- Providing assistance and following up on complaints about operational issues you encounter with the Services.
- Carrying out corporate transactions involving Us or our affiliates, such as a merger, acquisition, or transfer of assets.
- Meeting obligations under Applicable Law, including responding to requests, investigations, or directions from competent authorities.
- Maintaining the security and reliability of the Services, including detecting and preventing fraud, abuse, criminal activity, and technical problems that could harm Us, our users, or the wider public, as well as securing our systems and networks.
- Producing anonymised statistical data for analysis, so We can better understand our user base and improve the quality of the Services.
- Preventing, detecting, and investigating prohibited, unlawful, unauthorised, or fraudulent activity.
- Any other purpose We notify you of beforehand, or that Applicable Law requires, seeking your consent where that is required.
04 Basis for Processing
We process Personal Data under Indonesian Law No. 27 of 2022 on Personal Data Protection and its implementing regulations. The bases We rely on are your consent, performance of a contract or of your request for the Services, compliance with our legal obligations, and our legitimate interest in keeping the Services secure and improving them.
06 Disclosure of Personal Data to Others
We will not disclose, grant access to, share, or distribute your Personal Data without your consent, save as set out in this notice. Disclosure will only occur where you have given consent, where Applicable Law permits or requires it, where a competent government authority so instructs, or under a court order or ruling.
If you consent to your Personal Data being disclosed to a third party, you authorise Us to pass that data to the party you have nominated. Processing carried out by that party falls outside our control, so We recommend you first read and understand the privacy policy they apply.
We do not sell or rent your Personal Data to anyone.
07 Retention and Security
We keep your Personal Data for as long as you use the Services and for as long as it remains necessary for the purposes described above, or for any period required by legislation. Once your Personal Data is no longer needed for those purposes, We delete or anonymise it.
We apply reasonable technical and organisational safeguards, including encrypted connections (HTTPS), restricted internal access rights, and regular system monitoring. Even so, no method of storing or transmitting data over the internet can be guaranteed entirely secure.
08 Your Rights
In relation to the processing of your Personal Data through our Platform, you have the right to:
- Update and correct Personal Data held on the Platform that is inaccurate or incomplete.
- Withdraw consent you previously gave for the processing of your Personal Data.
- Obtain access to and a copy of the Personal Data held in our systems, as provided for by Applicable Law.
- Request the deletion or destruction of your Personal Data.
- Object to particular processing activities, including decisions taken by automated means.
- Suspend or restrict the processing of your Personal Data in the circumstances set out in legislation.
- Lodge a complaint regarding an alleged breach in the protection of your Personal Data.
Requests to exercise these rights can be sent to [email protected]. We will respond within the period set by Applicable Law. We may first ask you to verify your identity, to confirm the request genuinely comes from you.
09 Children’s Personal Data
The Services are intended for adult business owners and are not directed at minors. We do not knowingly process children’s Personal Data. If you believe We have received such data, please tell Us promptly so We can delete it.
10 Changes to This Notice
We may update this notice from time to time, for instance as the Services develop or as regulations change. The date of the most recent update appears at the top of this page. We will announce material changes through the Platform.
11 Contact Us
Questions, requests, or complaints concerning your Personal Data can be sent to [email protected].
PT Bantu Teknologi Digital — AKR Tower, West Jakarta, Indonesia.
