Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, including:

• Identity Data: Full name, email address, phone number
• Business Data: Company name, business type, website (if any)
• Project Data: Technical requirements, timeline, budget range
• Communication Data: Message content via contact form, email, or WhatsApp

2. How We Use Your Information

We use the collected data to:

• Provide website development and digital solution services
• Communicate about projects, estimates, and proposals
• Send project updates and invoices
• Improve our service quality
• Comply with legal obligations (tax, audit)

We will NOT: Sell, rent, or share your data with third parties for marketing purposes without your explicit consent.

3. Data Storage and Security

Your data is stored on:

• Encrypted hosting servers (SSL/TLS)
• Password-protected databases
• Cloud storage with two-factor authentication

We implement industry-standard security measures, but no system is 100% secure. You are responsible for keeping your access credentials confidential (if any).

4. Third-Party Data Sharing

We only share your data with third parties necessary for operations:

• Payment Gateways: For payment processing (e.g., Xendit, Midtrans)
• Hosting Providers: To store your website (e.g., Vercel, Cloudflare)
• Email Services: For project communication (e.g., Gmail, SendGrid)

These third parties are bound by confidentiality agreements and can only access data as needed for services.

5. Your Rights Over Personal Data

In accordance with UU ITE and related regulations, you have the right to:

• Access: Request a copy of personal data we hold
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of data after project completion (with exceptions for tax/audit obligations)
• Portability: Receive your data in a transferable format

To exercise these rights, contact us via email or WhatsApp.

6. Cookies and Tracking

This website uses cookies for:

• Analytics (Google Analytics) - to understand website traffic
• User preferences (dark mode, language)

You can disable cookies through your browser settings. However, some website features may not function optimally.

7. Data Retention

We retain your data:

• During active project: Until project completion and handover
• After project completion: Maximum 5 years for tax and audit purposes
• Marketing database: Until you request deletion (unsubscribe)

8. Data Breach Notification

In accordance with UU PDP No. 27/2022, if a personal data breach occurs that may harm your rights and freedoms, we will:

• Notify you within a maximum of 3x24 hours after we become aware of the breach
• Explain the type of data affected and the actions we are taking
• Provide recommendations for steps you can take to protect yourself

We will also report the breach to relevant authorities if required.

9. Changes to Privacy Policy

We may update this policy at any time. Significant changes will be communicated via email or website notification.

10. Contact

If you have questions about this privacy policy, contact us:

• Email: privacy@eranya.digital
• WhatsApp: +62 XXX-XXXX-XXXX
• Address: [Your office/operational address]