Privacy Policy

Effective 10 September 2026.

1. Data controller

The controller of personal data in this service is PT Indo Smart Media, Pesona Prima Pataruman 2 Blok A1 No. 6, Pataruman, Cihampelas, West Bandung Regency, West Java, Indonesia. Contact: info@indohalal.id.

2. Legal basis

Processing is carried out under Indonesian Law No. 27 of 2022 on Personal Data Protection.

3. Data we collect

Identity: name, email address, phone/WhatsApp number, profile photo.
Business: business name, licence numbers, address, coordinates, product type, business scale.
Consultation: question content, attachments, conversation history.
Transactions: orders, payment method, payment status. We never store card numbers.
Technical: IP address, browser, operating system, pages visited.
Location: only where you grant permission in the app, for field assignment purposes.

4. Purposes

Delivering consultation, guidance, and training services.
Processing orders and payments.
Sending service-related notifications.
Improving service quality and system security.
Meeting legal obligations.

5. Confidentiality of business data

Product formulations, ingredient registers, and supplier data you hand us are treated as confidential information. They are not shared with any third party without your written consent, unless the law requires it.

6. Data sharing

We may share limited data with the payment gateway (to process transactions), server infrastructure providers, and competent authorities where the law requires. Every processor is bound by a data processing agreement.

7. Storage and retention

Data is stored on servers located in Indonesia. Account data is kept while the account is active and for up to five years after closure for evidentiary and tax compliance purposes, then deleted or anonymised.

8. Security

We apply encryption in transit and at rest, role-based access control, multi-factor authentication for internal accounts, audit logging, and regular backups.

9. Your rights

You may access, correct, erase, restrict processing of, withdraw consent for, and port your data. Write to info@indohalal.id; we respond within three working days.

10. Data incidents

Should a personal data protection failure occur, we notify you and the competent authority within 3×24 hours of becoming aware.

11. Cookies

We use cookies for login sessions, language preference, and traffic measurement. You can disable them in your browser, at the cost of some features not working.

12. Children

This service is not directed at children under 17. We do not knowingly collect children's data.

13. Changes

Any change to this policy is published on this page with its effective date.