Privacy Policy.
How we collect, use, and protect your personal data
PT Widigital Tri Buana ("we") is committed to protecting the privacy of visitors to our website widigitaltribuana.com and users of our products and services. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the Personal Data Protection Law (UU PDP No. 27 of 2022).
Legal basis: Law No. 27 of 2022, Article 16 paragraph (2), on the principles of personal data processing.
Information We Collect
We collect information you voluntarily provide through our contact forms, including your name, email address, phone number, and message content. This data is used solely to respond to your inquiries and provide the services you request. If you use the chat assistant widget on this website, we also process the message content you write and any contact details you choose to share in it: messages are processed by an artificial intelligence model on our provider's infrastructure to compose replies, stored for conversation continuity and follow-up of your request, and an internal notification containing your contact details and the last message excerpt is forwarded to our team channel.
We also automatically collect certain technical data through analytics services, such as IP address, browser type, device type, pages visited, and time spent on each page. This information helps us improve website performance and user experience.
Through this website we do not collect specific (sensitive) personal data such as religious beliefs, health information, biometric data, or financial details. Our products carry their own privacy notices; for products that process health or payment data, the product's privacy notice applies.
Cookie Usage
Our website uses cookies and similar technologies to enhance your browsing experience. Cookies are small data files stored on your device that help us understand how you interact with our website.
We use essential cookies required for website functionality and analytics cookies to understand visitor behavior. You can manage your cookie preferences through your browser settings. Disabling cookies may affect certain features of our website.
Third-Party Services
Our website is hosted on an internationally certified managed cloud infrastructure provider, which may process certain technical data (such as IP addresses and access logs) as part of the hosting service. The privacy practices of that provider are governed by their own privacy policy and are available upon written request from data subjects.
WhatsApp communication with us runs on the WhatsApp Business Platform (Cloud API) from Meta. When you contact us via WhatsApp, your phone number and message content are processed and stored by Meta as a service provider, including at data centers outside Indonesia, and then stored in our database for conversation continuity. Meta's privacy practices are governed by the WhatsApp Business privacy policy.
We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is only shared with service providers necessary to operate our website and deliver our services.
Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, modification, disclosure, or destruction. Our website uses HTTPS encryption for all data transmissions.
While we take all reasonable precautions, no method of data transmission or storage is entirely secure. We continuously review and update our security practices to maintain the highest level of protection for your data.
Your Rights
Under Law No. 27 of 2022 on Personal Data Protection (UU PDP), Article 5 to Article 13 (official text: https://peraturan.go.id/id/uu-no-27-tahun-2022), you have the right to: access and obtain a copy of your personal data we hold; correct inaccurate or incomplete data; request deletion of your personal data; withdraw your consent at any time; and lodge a complaint if you believe your data has been misused.
To exercise these rights, submit a written request to info@widigitaltribuana.com. We will confirm receipt within 3×24 hours. In accordance with Law No. 27 of 2022 (UU PDP), we provide access to your data within 3×24 hours of receiving the request (Article 32 paragraph (2)); update and correct data within 3×24 hours (Article 30 paragraph (1)); cease processing after consent withdrawal within 3×24 hours (Article 40 paragraph (2)); and suspend or restrict processing within 3×24 hours (Article 41 paragraph (1)). Other requests without a statutory deadline are completed within 14 business days of receiving a complete submission; that period never reduces the statutory deadlines above.
For data deletion requests (Right to Erasure), use the following template — Email subject: "Personal Data Deletion Request — [Your Name]". Body: (1) full name, (2) email address used when contacting us, (3) description of the data to be deleted, (4) reason for the request (optional). Complete requests will be processed within 14 business days; where deletion follows a withdrawal of consent, processing is ceased within 3×24 hours in accordance with Article 40 paragraph (2) of Law No. 27 of 2022. If we are unable to fulfill the request due to a legal obligation (e.g., payment records required for 5 years), we will explain the reason in writing.
Product and Service Access
Our products and services are accessed through widigitaltribuana.com and its related subdomains. Data collection on those products and services follows the same principles and provisions described in this Privacy Policy.
For our professional service engagements (including the Diagnostic Workshop, Pilot Build, and Managed Retainer), the processing of client personal data is governed separately through a Data Processing Agreement accompanying the master contract, aligned with the scope requirements of each engagement.
Data Breach Notification
In the event of a personal data breach that is likely to pose a high risk to your rights and freedoms, PT Widigital Tri Buana will notify affected users within 3×24 hours as required by Article 46(1) of Law No. 27 of 2022 on Personal Data Protection (UU PDP) (official text: https://peraturan.go.id/id/uu-no-27-tahun-2022). We will also report the breach to the relevant regulatory authority (Komdigi / the personal data protection authority).
Our breach response procedure follows four stages: (1) Investigation — we immediately investigate the scope and cause of the breach; (2) Containment — we take immediate steps to control and mitigate the impact; (3) Notification — we notify affected data subjects and regulators within the legally required timeframe; (4) Recovery — we implement measures to prevent recurrence.
Data Retention Period
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law. Our retention periods are as follows: search queries — 1 year; chat messages — chat assistant conversation logs for up to 180 days, and lead summaries (contact details and the last message excerpt) until follow-up is complete or you request deletion; payment records — 5 years (tax and regulatory obligations); contact form submissions — 2 years; analytics data — 26 months.
When data is no longer required, we will securely delete or anonymize it. You may request earlier deletion by exercising your rights under this policy.
Cross-Border Data Transfers
Our website and services are hosted on a managed global cloud infrastructure network, which may process your data at data centers located outside Indonesia. Our infrastructure provider operates a globally distributed network with servers in multiple countries. Recipients of such cross-border transfers include Meta, which processes our WhatsApp communications.
We ensure that all cross-border data transfers comply with Article 56 (Chapter VII, cross-border transfer of personal data) of Law No. 27 of 2022 on Personal Data Protection (UU PDP), official text: https://peraturan.go.id/id/uu-no-27-tahun-2022,. We rely on adequate data protection safeguards, including standard contractual clauses and internationally certified compliance frameworks from our infrastructure provider, to ensure your data receives a level of protection equivalent to Indonesian standards.
Data Protection Officer
PT Widigital Tri Buana has appointed a Data Protection Officer (DPO) responsible for overseeing our compliance with personal data protection regulations. If you have concerns about how we process your personal data, you may contact our DPO directly at: Email: info@widigitaltribuana.com.
Children's Data
Our website and services are not directed at individuals under the age of 18. We do not knowingly collect, use, or retain personal data from children. If we become aware that we have inadvertently collected personal data from an individual under 18, we will take steps to delete that information as soon as possible.
If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately. We will investigate and delete the data upon your request.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us at: PT Widigital Tri Buana, Satrio Tower, 6th Floor Unit 1, Jl. Prof. Dr. Satrio Kav. C4, Kuningan Timur, Setiabudi, South Jakarta, DKI Jakarta 12950. Email: info@widigitaltribuana.com. WhatsApp: +6285117315884.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable regulations. Any updates will be published on this page with a revised effective date. We encourage you to review this page periodically to stay informed about how we protect your data.