Introduction
This Privacy Policy explains how PT Api Teknologi Indonesia (“Apitech”, “we”, “us”) collects, uses, shares, and protects personal data processed through the apitech.co.id website and in the course of our software development and consulting services (together, the “Service”). This policy is written with reference to Indonesia’s Law No. 27 of 2022 on Personal Data Protection (“PDP Law”). It doesn’t apply to third-party websites or services, even if they’re linked from the Service.
Data We Collect
- Data you provide directly: your name, email address, company name (optional), and message content when you fill out our contact form.
- Client & project data: when you engage us for a project, we collect the business and contact information needed to deliver the engagement, such as names, roles, and correspondence related to the project.
- Technical data: such as IP address, browser type, and website request logs, to the extent needed for the Service’s security and operation.
How We Use Your Data
We use personal data to:
- respond to contact-form inquiries
- scope, deliver, and support the software development or consulting engagements you request
- detect, investigate, and prevent fraud and other harmful activity
- keep the Service secure
- comply with legal obligations and requests from competent authorities
Legal Basis for Processing
We process personal data where you’ve given consent, where processing is necessary to provide the Service you’ve requested, where we have a legal obligation to do so, or where we have a legitimate interest in keeping the Service secure and preventing fraud, balanced against your rights under the PDP Law.
Sharing Your Data
We may share personal data with:
- service providers that help us operate, such as hosting and email providers
- government authorities and law enforcement, where required by law
- a successor entity, in the event of a merger, acquisition, or sale of assets
We do not sell your personal data to third parties for marketing purposes.
Data Security
We apply reasonable technical and organizational measures, including TLS encryption for traffic to the Service, to protect data processed through the Service. Access to personal data is limited to personnel who need it for their role. That said, no method of data transmission or storage can be guaranteed 100% secure.
Cross-Border Data Transfer
Where we or a service provider we use, such as cloud infrastructure, process or store data outside Indonesia, we take steps consistent with the PDP Law to keep that data protected to a standard equivalent to what’s described in this policy, including relying on your consent, a legal obligation, or another lawful basis recognized under the PDP Law.
Data Retention
We retain personal data for as long as necessary for the purposes it was collected, including to meet legal, accounting, or reporting obligations. Once no longer needed, data is deleted or anonymized according to our internal procedures.
Your Rights
Under Indonesia’s PDP Law, you have the right to:
- obtain information about the purpose of collecting and processing your personal data
- complete or update inaccurate personal data
- access the personal data we hold about you
- stop the processing, erase, and/or destroy your personal data as permitted by applicable regulation
- withdraw consent you’ve previously given
- object to a decision based solely on automated processing
- object to and claim compensation for a violation in the processing of your personal data, and lodge a complaint with the Ministry of Communication and Digital Affairs (Komdigi) as the PDP Law’s supervisory authority, as permitted by applicable regulation
To exercise these rights, contact us at contact@apitech.co.id.
Security Incident Notification
If we become aware of a personal data breach affecting you, we’ll notify you and, where required under the PDP Law, the relevant supervisory authority, within the timeframe the law requires.
Cookies
The Service uses only essential cookies needed for the website to function. We do not use advertising or tracking cookies.
Children
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced through the Service before they take effect.
Contact
Questions or requests about your personal data can be sent to contact@apitech.co.id or to PT Api Teknologi Indonesia, Jl. Bintaro Raya Selatan No.8, RT.2/RW.10, Kebayoran Lama Utara, Kec. Kebayoran Lama, Kota Jakarta Selatan, Daerah Khusus Ibukota Jakarta 12240, Indonesia.