Privacy Policy

1. Data We Collect

• Identity data: name, email address, phone number
• Delivery data: address, district, delivery notes
• Transaction data: order history, payment method (processed by iPaymu — we never store card numbers)
• Account data: password (encrypted), loyalty points, preferences
• Technical data: IP address, device type and site usage data

2. Legal Basis & Purposes

We process your data to: fulfil and deliver orders, manage accounts and subscriptions, provide customer support, send order communications, improve our service, and meet legal obligations. Our legal bases are performance of a contract, your consent, and legitimate interest.

3. Google Sign-In

If you sign in with Google we receive your name, email address and profile photo from Google to create and manage your account. We never receive your Google password.

4. Data Sharing

We do not sell your personal data. Data is shared only with: our payment provider (iPaymu), delivery couriers (name, address, phone), and the site's technical infrastructure providers. The site is technically managed by S.J Consulting Group Asia under confidentiality obligations.

5. Storage & Security

Data is stored on secured servers with password encryption and access controls. We keep data while your account is active or as required for legal and accounting obligations, after which it is deleted or anonymised.

6. Your Rights (UU PDP)

Under Indonesia's Personal Data Protection Law you have the right to:

Contact [email protected] to exercise these rights. We respond within 14 working days at the latest.

• Access and obtain a copy of your personal data
• Correct inaccurate data
• Have your data deleted ("right to be forgotten")
• Withdraw consent to processing
• Object to certain processing

7. Minors

Our services are not directed at children under 18 without parental or guardian consent.

8. Changes to This Policy

Material changes will be announced on the site or by email. The latest version is always available on this page.