Privacy Policy

1. PT. Satu Pintu Digital's role

PT. Satu Pintu Digital acts as a Data Controller for data we collect directly: website visitors, prospective clients, platform tenant and store owner data, and managed IT service clients. For customer data processed through NalaNiaga stores, each store acts as the Data Controller and we act as a Data Processor.

2. Information we handle

We may receive and manage: (a) contact information — name, business name, email address, phone number when you contact us via email, WhatsApp, or forms; (b) account data — registration and account management information on our products; (c) technical data — cookies, analytics, and access logs for operating and improving the website and services.

3. Legal basis for processing

Processing is based on: Contract — for service delivery and account management; Legitimate interest — for security, fraud prevention, and service improvement; and Legal obligation — for tax and bookkeeping compliance.

4. Sharing with third parties

Data may be shared with operational support providers such as notification services, couriers, accounting services, and technical infrastructure providers. All third parties are bound by data processing agreements. We do not sell personal data.

5. Cross-border transfers

Data is processed and stored within Indonesia. Some supporting services may transit global networks without permanently storing personal data abroad.

6. Data security

We implement role-based access controls, password hashing, input validation, TLS in transit, and regular backups. Security SOPs and incident response procedures are in place.

7. Data retention

Data is retained as long as necessary for communication and service purposes, and to comply with applicable legal and tax obligations. Inactive account data is deleted or anonymized after an offboarding transition period.

8. Breach notification

In the event of a personal data protection failure, we notify data subjects and authorities within 3×24 hours of discovery.

9. Data subject rights

You have the right to information, correction, access to data copies, deletion, withdrawal of consent, objection, and data portability. Requests are acknowledged within ≤3 working days and resolved within ≤30 days.

10. Complaints channel and DPO contact

For questions or requests related to personal data, please contact us:

Email: privacy@satupintudigital.co.id
Address: Komplek Green View Sunggal Blok D No. 38, Deli Serdang, Sumatera Utara.

11. Policy changes

This policy may be updated from time to time. Material changes will be notified. This policy is governed by the laws of the Republic of Indonesia (Law No. 27/2022 on PDP, Government Regulation No. 71/2019 on Electronic Systems).