Privacy Policy

Effective as of November 01, 2025

1.Applicable Legal Basis and Regulations

Laws and regulations/policy regulations applicable in the territory of the Republic of Indonesia governing Personal Data Protection, as stated in the PDP Law and its implementing regulations. We are subject to all laws and regulations and government policies of the Republic of Indonesia applicable to Personal Data Protection.

2.Legality of Personal Data Processing

Your Personal Data that We process will only be Personal Data that has met the following terms and conditions:

1. We have obtained explicit and valid consent from you to use your Personal Data in accordance with Our processing purposes through customer consent;
2. We fulfill and carry out Our rights and obligations in conducting Personal Data processing activities in accordance with applicable laws and regulations; and/or
3. We perform processing while still respecting your rights as the Data Owner as written in the customer consent.

3.Purposes of Personal Data Processing

In general, We store and use the Personal Data you provide for the purpose of providing products and improving Our services to you, which includes but is not limited to:

1. Processing transactions/orders: Sending products, providing shipping info, customer assistance, and transaction verification. We use account data for transaction processes, your email address for notification and communication, and registered addresses for Our product delivery;
2. Providing services: Identifying you as a user, understanding your experience, conducting surveys, providing relevant info, activity trends, understanding you to make recommendations and personalization. We collect identity data, search data, cookies, real location data, and your history data for this activity;
3. Marketing and analysis in research: Providing information on offers and advertisements relevant to you. We collect search data, cookies, IP addresses, and your history data for this activity;
4. Communicating with you through different channels regarding Kalbe Group organizational services and to respond to your requests. We process email addresses, account IDs, names, and registered addresses for this purpose;
5. Complying with obligations: Legal compliance and fraud prevention. For this purpose, We use identity, contact, transaction, and account profile data; and
6. Disclosing and sharing your information under certain conditions permitted by applicable regulations and/or with your consent.

4.Types of Personal Data Collected

Information regarding your Personal Data collected by Us includes Curriculum Vitae documents, but is not limited to:

1. Identity data: Name, gender, date of birth, and nationality.
2. Contact data: Address, e-mail, telephone number, and LinkedIn account name.
3. Additional data but not limited to photos or other uploaded media.

5.Processing Period

1. We will continue processing as long as you are still Our customer and still using Our products, services, and/or facilities in accordance with applicable laws and regulations;
2. We may store your Personal Data for as long as necessary to achieve the purposes described in this Privacy Policy; and
3. We may store your Personal Data outside the territory of Indonesia, while still observing the laws and regulations applicable in Indonesia.

6.Personal Data Retention Period

We will delete your data if it is no longer needed to fulfill the processing purposes. Note the following:

1. We will store your Personal Data for a period of 5 (five) years.
2. After 5 (five) years, the Personal Data will enter a retention period and will be immediately deleted if no longer needed to fulfill the stated processing purposes;
3. If Personal Data that has entered the retention period is found to still be needed to fulfill processing purposes, your Personal Data storage period will be extended for the next 5 (five) years; and
4. If you close or ask us to close your account, We will immediately delete your Personal Data, unless otherwise regulated by law.

7.Details of Information Collected

Personal Data collection is obtained from, but not limited to:

1. Data submitted by you directly or indirectly;
2. Data obtained when you register an account on the website, application, or platform owned and/or operated by Us;
3. Data recorded automatically when you use the website, application, or platform owned and/or operated by Us;
4. Data recorded when you are contacted by Us through other communication media, based on your consent; and
5. Data collected by Third Parties by observing applicable laws and regulations.

8.Rights of Personal Data Subject

1. Right to Data Information: You have the right to obtain information regarding your Personal Data that We process, the basis of legal interest, and the purpose of requesting and using your Personal Data.
2. Right to Data Correction: You have the right to complete, update, and/or correct errors and/or inaccuracies about yourself.
3. Right to Access and/or Copies: You have the right to obtain access and obtain copies of Personal Data about you in accordance with applicable laws and regulations. We will provide such access through the official media We have provided. Any costs required to process copies of your data will be charged to you.
4. Right to Data Deletion: You have the right to request to end processing, delete, and/or destroy Personal Data about yourself in accordance with applicable laws and regulations, with specific exceptions (defense, law enforcement, public interest, financial supervision).
5. Right to Withdrawal of Consent: You have the right to withdraw the consent for processing your Personal Data that has been given to Us. Note that this may affect service availability.
6. Right to Object to Processing: You have the right to object to decision-making actions based solely on automated processing, including profiling, which produces legal effects or significantly affects you.
7. Right to Restriction: You have the right to delay or restrict the processing of Personal Data proportionally in accordance with the purposes of your Personal Data processing.
8. Other Rights: You have the right to propose other rights as regulated in the laws and regulations of Indonesia.

9.Sharing and Disclosure of Personal Data

We will only share and disclose your Personal Data if necessary for service features, court orders, or with your permission. Categories include but are not limited to:

1. PT Medika Komunika Teknologi group of companies for daily operations;
2. Service providers for infrastructure, security, and marketing;
3. Payment processors to ensure legal and fraud-free transactions;
4. Advertising and marketing partners for relevant promotions;
5. Academic researchers for pseudonymized analysis;
6. Law enforcement for legal obligations or vital interests; and
7. Business buyers in case of sale or negotiation, with prior notification.

10.Security of Personal Data

1. We strive for the best security but cannot guarantee total prevention of unauthorized access due to risks beyond Our control;
2. You are encouraged to protect passwords, OTPs, and PINs, and maintain device security;
3. Third-party use of data is based on agreements, though we cannot fully guarantee their compliance with Our policies. We will take legal action if Third Parties violate agreements;
4. Third-party platforms linked via Our site have their own independent privacy policies; and
5. We are not responsible for force majeure events but will inform you via designated media.

11.Updates to the Privacy Policy

We may change or update this Privacy Policy at any time. We will notify you of changes, but you are advised to check the page regularly. By continuing to use Our services, you are deemed to have agreed to these changes.

12.Contact Us

If you have further questions, please contact Our customer service at: crm.connect@cakraradhamustika.com

Thank you for your trust in PT Cakra Radha Mustika.