Cookie Policy (EU)

PRIVACY NOTICE Effective Date: 29 September 2025 1. Introduction PT PEDEPEH is committed to protecting your privacy and your personal data. This Privacy Notice explains how we collect, use, disclose, and safeguard your information when you use our website, our mobile application, or our services (collectively, the "Services"). Please read this Privacy Notice carefully. By using our Services, you consent to the data practices described in this notice. We will process your personal data based on the provisions of Law No. 27 of 2022 concerning Personal Data Protection (the "PDP Law") and other applicable regulations. 2. Data Controller The Data Controller for your personal data is: PT PEDEPEH Menara Danantara Email: info@pedepehindo.com Phone: 62-25025089 3. Information We Collect We may collect the following categories of personal data: · Personal Identifiers: Name, email address, phone number, date of birth, national identification number (NIK), passport number. · Account Information: Username, password, profile picture. · Financial Information: Bank account details, payment card information (which we transmit directly to our payment processors and do not store on our servers). · Technical Data: IP address, browser type, device information, operating system, browsing behavior on our Services, and cookies (please see our separate Cookie Policy for more details). · Sensitive Personal Data: In limited circumstances and only with your explicit consent, we may collect certain sensitive data, such as health information, religious beliefs, or biometric data, when it is necessary for specific services (e.g., health app functionality). We will always ask for your separate, explicit consent for this. 4. How We Use Your Information (Purposes of Processing) We use your personal data for the following purposes, based on the legal bases outlined in Article 20 of the PDP Law: · To Perform a Contract: To create and manage your account, process your transactions, deliver the products or services you request. · With Your Consent: To send you marketing and promotional communications (you can opt-out at any time). For processing sensitive personal data. · To Fulfill a Legal Obligation: To comply with tax reporting requirements, regulatory requests, or other legal obligations. · For Our Legitimate Interests: To operate, maintain, and improve our Services, protect the security of our systems and users, and prevent fraud. Purpose of Processing Legal Basis (PDP Law) Creating your account and providing services Performance of a Contract Sending marketing emails Consent Complying with financial regulations Legal Obligation Analyzing website traffic to improve user experience Legitimate Interest 5. How We Share Your Information We may share your personal data with the following categories of third parties, only for the purposes described above: · Service Providers: We engage trusted third parties to perform functions on our behalf, such as cloud storage, payment processing, data analysis, and customer support. These parties are contractually bound to protect your data and only process it according to our instructions. · Legal and Regulatory Authorities: When required by law, or to protect our rights, your safety, or the safety of others. · Business Transfers: In connection with a merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company. 6. International Data Transfers Your personal data may be transferred to, and processed in, countries other than Indonesia. We will only transfer your data to a country that has been deemed by the Indonesian authorities to provide an adequate level of data protection, or under a valid transfer mechanism that ensures such protection (e.g., standard contractual clauses). 7. Data Retention We will retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. We will then securely delete or anonymize your data. Our specific retention periods are based on the nature of the data and the purpose for its processing. 8. Your Rights Under the PDP Law As a data subject, you have the following rights regarding your personal data: · Right of Access: You have the right to request access to and obtain a copy of your personal data that we hold. · Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data. · Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data under certain conditions. · Right to Withdraw Consent: If processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. · Right to Object: You have the right to object to the processing of your personal data based on our legitimate interests. · Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller. To exercise any of these rights, please contact us using the details provided in Section 2 (Data Controller). 9. Data Security We implement appropriate technical and organizational security measures designed to protect the security of your personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee its absolute security. 10. Changes to This Privacy Notice We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Effective Date" at the top of this page. We encourage you to review this Privacy Notice periodically to stay informed about how we are protecting your information.