Privacy Policy & Personal Data Protection Guidelines
1. Introduction
At PT Bantu Teknologi Digital (“Company”, “we”, “us”, or “our”), we are committed to protecting the privacy and personal data of our customers, employees, partners, and stakeholders. This Privacy Policy outlines our approach to the collection, use, storage, disclosure, and protection of personal data in compliance with applicable laws and recognized international standards.
2. Scope
This Privacy Policy applies to:
- All personal data processed by PT Bantu Teknologi Digital, whether collected through our website, mobile applications, systems, or other communication channels.
- All individuals whose personal data we process, including customers, employees, contractors, suppliers, and business partners.
3. Definition of Personal Data
Personal Data refers to any information relating to an identified or identifiable natural person. This includes, but is not limited to:
- Name, address, email, phone number
- National ID number, passport number
- Financial information
- IP address, device identifiers
- Any other data that can directly or indirectly identify a person
4. Principles of Personal Data Processing
We process personal data based on the following principles:
- Lawfulness, Fairness, and Transparency: Personal data shall be processed lawfully, fairly, and transparently.
- Purpose Limitation: Personal data shall be collected for specified, explicit, and legitimate purposes only.
- Data Minimization: We will collect only the personal data necessary for the purposes described.
- Accuracy: We will ensure that personal data is accurate and kept up-to-date.
- Storage Limitation: Personal data shall not be kept longer than necessary.
- Integrity and Confidentiality: Personal data shall be processed securely to protect against unauthorized access, loss, or damage.
5. Collection of Personal Data
We may collect personal data through:
- Direct interactions (e.g., registration forms, customer service, account creation)
- Automated technologies (e.g., cookies, mobile applications)
- Third-party sources (e.g., partners or public databases)
6. Purpose of Data Collection
We collect and use personal data for the following purposes:
- To provide and manage our products and services
- To process transactions and fulfill contractual obligations
- To communicate important updates, promotions, and service announcements
- To comply with legal and regulatory requirements
- To enhance user experience through data analytics
- To detect and prevent fraud or security threats
7. Legal Basis for Processing
We process personal data based on one or more of the following legal grounds:
- Consent from the data subject
- Necessity for the performance of a contract
- Compliance with legal obligations
- Legitimate interests pursued by PT Bantu Teknologi Digital
8. Data Sharing and Disclosure
We may share personal data with:
- Authorized employees and departments within PT Bantu Teknologi Digital
- Trusted third-party service providers under contractual confidentiality obligations
- Legal and regulatory authorities, as required by applicable laws
We do not sell, rent, or lease personal data to third parties.
9. Data Protection Measures
PT Bantu Teknologi Digital implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of personal data at rest and in transit
- Access control based on roles and responsibilities
- Regular security assessments and audits
- Secure data storage and backup systems
- Training and awareness programs for all employees
10. Rights of Data Subjects
Individuals whose personal data we process have the following rights:
- Right to Access: Request access to their personal data.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of personal data, subject to legal obligations.
- Right to Restriction of Processing: Request restriction on the processing of their data.
- Right to Data Portability: Receive their data in a commonly used machine-readable format.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
Requests related to data rights can be submitted to our Data Protection Officer (DPO) at dppo@bantudagang.com.
11. Data Retention
Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Upon expiration of the retention period, data will be securely deleted or anonymized.
12. Cross-Border Data Transfers
Where personal data is transferred outside Indonesia or the originating country, we will ensure that appropriate safeguards are in place to protect the data in accordance with applicable data protection laws.
13. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance user experience and analyze website traffic. Users have the option to manage cookie preferences through their browser settings.
14. Policy Updates
We reserve the right to amend this Privacy Policy from time to time. Any changes will be communicated through appropriate channels and will be effective upon publication.
15. Contact Information
For any questions regarding this Privacy Policy or our data protection practices, please contact:
Data Protection Officer (DPO)
PT Bantu Teknologi Digital
Email: dppo@bantudagang.com