Privacy Policy

1. Data We Collect

We collect the following data as needed for transactions:

• Account data: full name, email address, and WhatsApp number when you register.
• Google login data: name, email, and profile photo, if you choose to sign up/log in with Google.
• Shipping data: full address, city, district, postal code, and company name (optional) at checkout.
• Transaction data: order history, the chosen payment method, and payment status from the payment gateway.
• Verification code (OTP): sent to your email during manual registration, stored temporarily in encrypted form and automatically expires within 10 minutes.

2. Use of Data

Your data is used to: process and ship orders, verify identity & account security, communicate about order status (including automatic email notifications when status changes), respond to questions/complaints, and improve the quality of our products and services.

3. Data Security

We implement reasonable technical security measures to protect your data, including: passwords stored in hashed form (unreadable by anyone, including us), login sessions protected by secure (httpOnly) cookies, and new account registration requiring OTP email verification to ensure the registered email address is genuinely valid and belongs to the user in question.

4. Sharing Data with Third Parties

We do not sell or rent your personal data to anyone. Data is only shared with third parties to the extent necessary to run our services, namely:

• Payment gateway (Xendit) — to process your payment.
• Email service provider (SMTP) — to send OTP codes and order status notifications.
• Courier companies — limited to name, address, and contact number, if your order is shipped using a third-party courier.

5. Your Rights Over Your Personal Data

You have the right to request access to, correction of, or deletion of your personal data by contacting us via WhatsApp or email. We will process such requests in accordance with applicable Indonesian personal data protection regulations, while taking into account our obligation to retain transaction data for bookkeeping/tax purposes.