Privacy Policy

1. Who we are

PT Handeliv Cipta Niaga (“Handeliv”, “we”, “us”) is a limited liability company (Perseroan Terbatas) established in the Republic of Indonesia, with Nomor Induk Berusaha 2504260084155, registered at Pakuwon Tower (Tunjungan Plaza 6), Lt. 22 OT 18, Jl. Embong Malang No.21-31, Desa/Kelurahan Kedungdoro, Kec. Tegalsari, Kota Surabaya, Provinsi Jawa Timur, Kode Pos: 60261.

We act as the data controller (pengendali data pribadi) for personal data collected through handeliv.io. For questions about this policy, contact hello@handeliv.io.

2. Scope

This policy covers personal data we collect through this website and through direct business correspondence. Personal data we process on behalf of a client under a services agreement is governed by that agreement, where we generally act as a data processor (prosesor data pribadi) rather than a controller.

3. Legal basis

We process personal data in accordance with Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi, the “PDP Law”) and its implementing regulations. Depending on the situation, our legal basis is your consent, the performance of a contract or pre-contractual steps at your request, compliance with a legal obligation, or our legitimate interests in operating and securing this website.

4. What we collect

• Information you give us. When you submit the contact form we collect your name, company or institution, email address, the content of your message, and the fact that you agreed to this policy.
• Correspondence. Emails and meeting notes arising from your enquiry.
• Technical and usage data. If privacy-friendly analytics are enabled, we collect aggregate, non-identifying usage data such as page views and referrers. We do not use advertising cookies or cross-site tracking.

We do not knowingly collect specific personal data as defined in Article 4 of the PDP Law (such as health, biometric, genetic, criminal record, or financial data) through this website. Please do not include such data in the contact form.

5. How we use personal data

• To respond to your enquiry and correspond with you about it.
• To prepare proposals, scopes of work and contracts you have asked for.
• To operate, secure and improve this website.
• To meet legal, tax and accounting obligations in Indonesia.

We do not sell personal data, and we do not use contact-form submissions for unsolicited marketing.

6. Sharing and processors

We share personal data only with service providers who help us operate the business — for example website hosting, email delivery and productivity tools — and only to the extent needed for those services. These providers are bound by contract to protect the data. We may also disclose data where required by Indonesian law or a lawful order of a competent authority.

7. Storage, transfer and residency

Some of our service providers operate infrastructure outside Indonesia. Where personal data is transferred outside the territory of the Republic of Indonesia, we do so in accordance with Articles 56 of the PDP Law, including verifying that the receiving country or organization provides an adequate level of protection or that appropriate safeguards or your consent are in place.

Where a client engagement requires Indonesian data residency, we agree the storage location, retention period and deletion procedure in writing before the engagement begins.

8. Retention

We keep enquiry data for as long as needed to respond and to maintain a record of the business relationship, and thereafter only as long as required by applicable Indonesian law. When data is no longer needed we delete or anonymise it.

9. Your rights

Subject to the PDP Law, you have the right to:

• obtain information about the personal data we hold about you and how we use it;
• correct or update inaccurate or incomplete personal data;
• request deletion or destruction of your personal data;
• withdraw consent you previously gave;
• object to or request restriction of certain processing;
• request that your data be provided in an interoperable format; and
• lodge a complaint with the competent Indonesian authority.

To exercise any of these rights, email hello@handeliv.io. We will respond within the period required by applicable law.

10. Security

We apply technical and organizational measures appropriate to the risk, including access control, encryption in transit, and limiting personal data to the minimum needed. No system is completely secure; if a personal data breach occurs we will notify affected data subjects and the relevant authority as required by the PDP Law.

11. Cookies and analytics

This website does not set advertising or cross-site tracking cookies. If analytics are enabled, we use a privacy-friendly, cookieless provider that reports aggregate usage only. Strictly necessary cookies may be used to operate the site.

12. Children

This website is intended for business users. We do not knowingly collect personal data from children. Where a data subject is a child, processing requires the consent of a parent or guardian in accordance with the PDP Law.

13. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top reflects the most recent version. Material changes will be communicated where appropriate.

14. Contact

PT Handeliv Cipta Niaga
Pakuwon Tower (Tunjungan Plaza 6), Lt. 22 OT 18, Jl. Embong Malang No.21-31, Desa/Kelurahan Kedungdoro, Kec. Tegalsari, Kota Surabaya, Provinsi Jawa Timur, Kode Pos: 60261
hello@handeliv.io