Privacy Policy

About This Policy

This Privacy Policy explains how PT Araki Solusi Indonesia ("Araki" or "we") collects, uses, stores and protects your personal data when you visit araki.co.id and send a quote request through this site. For this processing, Araki acts as the Personal Data Controller.

We process personal data in line with Indonesian Law Number 27 of 2022 on Personal Data Protection (the PDP Law) and its implementing regulations, the Electronic Information and Transactions Law as amended, and Government Regulation Number 71 of 2019 on Electronic Systems and Transactions.

Other Araki sites or services, such as an online shop, may have their own privacy policy for that service.

Data We Collect

When you send the quote request form, we receive what you enter: your name, phone or WhatsApp number, email address and the product or service you are interested in (required), plus your company name, city and message (if you fill them in).

With the request we record when it was sent, the page it was sent from and the language you used. We do not store your IP address with the request.

To prevent spam, the site keeps a scrambled code derived from your IP address (not the address itself) and the number of requests sent. This code is deleted automatically after about two hours.

Like most websites, our hosting provider's server records technical visit data, such as IP address, browser type, pages opened and the time, for security and maintenance. These records are kept by the hosting provider for a limited period under its service settings.

This site uses no cookies, analytics tools, advertising pixels or third-party scripts. Fonts and icons load from our own server.

We do not ask for specific (sensitive) personal data, such as health, biometric or personal financial data. Please do not include it in your message.

Purposes And Legal Basis

We use the form data to respond to your request: to contact you, prepare and send a quotation, answer questions and follow up on the request, including when it leads to an order or a contract.

The legal basis, as set out in Article 20 of the PDP Law, is fulfilling your request before a contract is made, together with the consent you give when you send the form to be contacted by the Araki team. Processing for site security and spam prevention relies on our legitimate interest in protecting the site and its visitors.

We do not use your data for marketing, such as newsletters or promotions, without your separate consent, and we never sell or rent your personal data to anyone.

We do not make decisions based solely on automated processing, including profiling, that have legal effects on you or significantly affect you.

Who Receives Your Data

Your data is opened only by the Araki team members who need to handle it, such as sales, customer service and service teams.

We use a hosting provider and an email provider that process data on our behalf and on our instructions as Personal Data Processors. They may not use your data for their own purposes.

We do not share your data with brand principals, other distributors or any other third party for their own purposes without your consent. We may disclose data when the law requires it or when an authorized agency requests it.

Storage And Security

Quote requests are stored on this site's server for 12 months from the date they are sent and then deleted automatically. Email copies of requests in our team's inbox, and any quotation, order or contract that follows, are kept as long as needed for the business relationship and as long as the law requires, for example under tax and company record keeping rules.

We protect data with reasonable technical and organizational measures, including encrypted connections (HTTPS), storing requests outside the site's public folder with restricted access, protecting the form against spam and misuse, and limiting access to authorized team members.

No system is completely free of risk. If a personal data protection failure affects your data, we will notify you and the competent authority in writing within 3 x 24 hours, as the PDP Law requires.

Transfers Outside Indonesia

If your data is processed outside Indonesia, for example because a service provider's servers are in another country, we make sure the transfer meets the PDP Law and its implementing regulations: the destination country has an equal or higher level of protection, or adequate and binding safeguards are in place, or you have given your consent.

Your Rights

Under the PDP Law you have the right to: be informed about how your data is processed; access your data and get a copy; correct or update inaccurate data; request deletion or destruction of your data, or end its processing; withdraw consent you have given; object to decisions based solely on automated processing; delay or restrict processing; obtain or transfer your data in a commonly used format; and claim compensation for a violation in the processing of your data.

To use these rights, email cs@araki.co.id with the subject "Personal Data Request". We may ask for additional information to confirm your identity, and we will act on your request within the time limits set by law. If we cannot fulfil a request, for example because the law requires us to keep the data, we will explain why.

Withdrawing consent does not affect processing carried out before the withdrawal. You may also file a complaint with the Indonesian government authority responsible for personal data protection.

Third-Party Links And Services

This site links to third-party services such as WhatsApp, Google Maps and Instagram, and to phone and email. When you use them, your data is processed by those providers under their own privacy policies, outside Araki's control.

Children's Data

This site is meant for business customers and is not directed at children under 18. We do not knowingly collect children's personal data. If we learn that a child's data was sent without a parent's or guardian's consent, we will delete it.

Visitors From Outside Indonesia

Araki is an Indonesian company and processes data under Indonesian law. We also apply internationally recognized data protection principles, such as those in the European Union's General Data Protection Regulation (GDPR): lawful and transparent processing, clear purposes, minimal data, accuracy, limited storage time and security. The rights in this policy apply to every visitor, wherever you are.

Changes To This Policy

We may update this policy when the way we process data or the applicable rules change. The latest version is always on this page with its effective date, and we will point out important changes clearly on this site.

This policy is available in Indonesian and English. If the two differ, the Indonesian version prevails.

Contact

Questions and requests about personal data can be sent to PT Araki Solusi Indonesia, Gridvill Space Lt. 2, Jl. Pondok Jagung Timur No. 78, Tangerang, Banten 15326, Indonesia. Email cs@araki.co.id, phone +62 21 2188 5282, 24/7 call center and WhatsApp +62 812 8859 2462.