Privacy Policy

Personal data controller and contact

Last updated: 12 October 2026.

The personal data controller for this site is PT Indo Krisna Teknologi, 28th Floor, Menara Karya, Jl. H.R. Rasuna Said, Kuningan, Jakarta 12950, Indonesia. For questions, requests or complaints about personal data, contact connect@indokrisna.com.

This policy is written with reference to Law No. 27 of 2022 on Personal Data Protection (UU PDP). A general explanation of the UU PDP and its relation to Zoho is in the article Zoho security and compliance under the UU PDP, which is in Indonesian.

Data we collect

Source	Data	Purpose
Contact form	Name, work email, phone number, company, product interest, message, page language, source page and UTM parameters	To respond to your message and prepare a conversation with a consultant
Fit guide	Guide answers, only if you choose “Talk to a consultant” and consent to sending	To help the consultant prepare the conversation
Newsletter sign-up	Email address, time of consent and confirmation status	To send the weekly newsletter and to prove your consent
Site visits	Page-visit statistics from Cloudflare Web Analytics (no cookies) and from measurement tools loaded through Google Tag Manager (may use cookies)	To understand which pages are read and to keep the site running

We do not ask for specific personal data, such as health or personal financial data, through this site. Please do not write it in the message field.

Basis for processing and consent

Article 20 of the UU PDP provides several bases for processing personal data, including valid explicit consent and other legitimate interests. The bases we use:

Processing	Basis
Newsletter	Your consent, through sign-up with two-step confirmation (Article 20 and Articles 21 to 24)
Sending fit guide answers	Your consent, given when you choose “Talk to a consultant”
Responding to a contact-form message	Processing needed to respond to a request you made yourself (Article 20)
Aggregate visit statistics	Legitimate interest in maintaining and understanding use of the site (Article 20)

Under Article 21, when we ask for consent we state the purpose, the type of data and your rights. Article 22 provides that consent may be written or recorded, and Article 24 requires the controller to be able to show proof of consent. That is why we record the time of your newsletter consent.

Service providers we use

Provider	Role	Data processed
Zoho CRM	Stores lead records and contact-form messages	Contact-form data, and fit guide answers if sent
Zoho Campaigns	Manages the newsletter list and sending	Email, time of consent and confirmation status
Cloudflare	Site hosting, security and cookieless visit analytics	Technical request data and aggregate statistics
Google (Google Tag Manager)	Loads visit-measurement tools, for example Google Analytics	Visit data such as pages viewed, device type and approximate location; may use cookies

Service providers process data on our behalf. We use the data only for the purposes described here, and we do not sell your personal data.

Cookies and analytics

This site loads Google Tag Manager (Google), only on the production address indokrisna.com. Tag Manager loads the visit-measurement tools we configure, for example Google Analytics. Those tools may set cookies and send visit data to their provider. We also use Cloudflare Web Analytics, a cookieless analytics service that Cloudflare describes as privacy-first. You can block or delete cookies in your browser settings without affecting the basic function of the site. Mechanisms that are strictly necessary for security and basic site function keep running.

Retention

We keep personal data for as long as needed for the purpose it was collected, then delete or anonymise it. Detailed periods are set in the retention policy of PT Indo Krisna Teknologi as data controller. For the newsletter, we keep your data while you are subscribed. After you unsubscribe, we keep the minimum record needed so that your unsubscribe request is honoured and your consent can be evidenced.

Your rights as a data subject

The UU PDP gives you the rights below. These rights may be limited for the purposes listed in Article 15.

Right	Reference
To be informed of the identity, legal basis, purpose and accountability of the party requesting data	Article 5
To complete, update or correct inaccurate data	Article 6
To access and obtain a copy of your data	Article 7
To end processing, delete or destroy your data	Article 8
To withdraw consent to processing	Article 9
To object to decisions based solely on automated processing that have legal or significant effects	Article 10
To delay or restrict processing in proportion	Article 11
To sue and receive compensation for violations in processing	Article 12
To receive data in a commonly used structured format and transmit it to another controller where systems allow	Article 13

We do not take decisions with legal or significant effects on you solely through automated processing. The fit guide only suggests apps.

How to make a request

Article 14 of the UU PDP provides that rights are exercised through a recorded request to the controller, electronic or non-electronic. To make one:

1. Email connect@indokrisna.com from the address you used when dealing with us.
2. State the right you want to exercise and the data concerned.
3. We may ask for additional information to confirm that you are the owner of the data.

We respond to requests as soon as we can and within the period set by applicable regulations. For the newsletter you can also click the unsubscribe link in any email.

Transfers outside Indonesia

Data processed by our service providers may be stored or processed outside Indonesia. Zoho states that an account’s data centre is determined by the country selected at sign-up and publishes a list of its data centre locations. As of 12 October 2026, that list does not include a data centre in Indonesia. Cloudflare processes site traffic through its server network in various regions.

For transfers outside Indonesia we have regard to Article 56 of the UU PDP, which among other things asks the controller to ensure that the recipient country has an equal or higher level of protection or, where that is not met, to ensure adequate and binding protection or obtain the data subject’s consent. A general overview of Zoho’s data centres and security is in the article Zoho security and compliance under the UU PDP.

Security

Articles 35 to 39 of the UU PDP require the controller to protect and secure personal data through technical and operational measures, maintain confidentiality, supervise the parties involved in processing and prevent unauthorised access. In general we apply:

• Access to data limited to team members who need it.
• Storage with service providers that apply security controls, and encrypted communication between the site and those providers.
• Review of the service providers we choose before using them.

If a personal data protection failure occurs, we will notify you and the competent authority in writing as required by Article 46 of the UU PDP.

Changes to this policy

We may update this policy when our practices or the applicable rules change. The date of the latest update appears at the top of the policy. For questions about this policy, contact connect@indokrisna.com or visit the contact page. For how we write and check content, read the editorial policy.