Privacy policy

1. Data controller

For processing described here, the data controller (the organisation determining the purposes and means) is:

Operational activities connect to Indonesia; technical infrastructure may involve providers in other countries (see international transfers below).

2. Categories of personal data

Depending on how you interact with us, this may include:

• Website & infrastructure metadata — for example IP address, approximate location derived by networks, date and time, requested URL, user-agent, and security signals processed by hosting and/or CDN(s).
• Communication via WhatsApp — phone number, profile details visible in WhatsApp, message content, delivery metadata, and files you send after you choose to chat with us.
• Future channels — if you later add contact forms, email, or booking tools, we will extend this Policy to name those fields explicitly.

3. Purposes & legal bases (UU PDP)

UU PDP requires a lawful basis for processing (such as consent, performance of a contract, legal obligation, vital interests, public interest, or legitimate interest, subject to conditions in the law and implementing instruments). For this site, we generally rely on:

• Consent — where you actively choose to open WhatsApp or send us messages (you can stop at any time by ending the chat; some past messages may remain subject to retention rules).
• Contract / pre-contractual steps — responding to enquiries and arranging transport services you request.
• Legitimate interests — operating and securing this website, fraud and abuse mitigation, and understanding basic traffic so the site stays online, balanced against your rights.
• Legal obligations — if tax, court, or regulator rules require us to retain or disclose specific records.

Exact statutory wording, nuances, and any sector-specific rules may be further specified in Indonesian government regulations; we will update this Policy when practices or guidance materially change.

4. Cookies & similar technologies

Today this site is a simple showcase. We do not operate our own advertising or analytics cookies. Technical cookies, storage, or tokens may still be set by the hosting provider, Cloudflare, your browser, or future widgets you add (maps, embeds, analytics). Update this section when you adopt such tools and, where required, obtain consent and document it.

5. Recipients & processors

Personal data may be processed on our behalf or jointly accessed by:

• netcup GmbH — website hosting (website).
• Cloudflare, Inc. — CDN / edge security (privacy policy).
• WhatsApp / Meta— when you use our WhatsApp links, Meta Platforms' services apply. See: WhatsApp privacy information · Meta privacy policy. Opening a chat: WhatsApp.

6. International transfers

Servers, security edges, and Meta infrastructure may be located outside Indonesia. Where UU PDP or implementing rules require safeguards for cross-border transfers (for example standard clauses, assessments, or approvals), we aim to follow them as they become applicable to our stack. Because providers change regions and product terms, ask us if you need specifics for a particular processing activity.

7. Retention

We keep data only as long as needed for the purposes above, including statutory bookkeeping or tax retention where applicable. Chat history in WhatsApp is primarily controlled by Meta's settings and your device; we delete or archive business correspondence according to internal policy once legal minimums are satisfied unless a dispute requires longer storage.

8. Your rights under UU PDP

Depending on circumstances, data subjects may have rights such as access, correction, deletion, withdrawal of consent, processing restriction, portability, and objection in line with the UU PDP and its implementing regulations. To exercise rights with us, use the contact details above. We may need to verify your identity before acting.

Institutional arrangements for complaints and supervision under UU PDP are still evolving in practice — Indonesia has been establishing a dedicated personal-data authority while the Ministry of Communications & Digital Affairs (Kemenkomdigi) and related agencies continue to publish supervisory guidance. Confirm the current complaint channel with qualified counsel or official government notices.

9. Security

We apply reasonable organisational and technical measures appropriate to the low complexity of this site. No online transmission is fully risk-free; help protect yourself by using current devices, avoiding untrusted networks, and limiting sensitive documents you send via chat.

10. Personal data breach notifications

Where UU PDP and follow-on rules require us to notify authorities or affected individuals about a breach, we will follow those timelines and formats. If you suspect an issue involving data you shared with us, please alert us promptly using the contact details listed above.

11. Minors

Our services are not directed at children. If you believe we inadvertently collected data from a child without proper authority, contact us and we will take appropriate steps.

12. Changes

We may update this Policy to reflect legal, technical, or service changes. Material changes will be reflected here with a new "last updated" date.

Last updated: 2026-05-14 (UTC).