Privacy Policy
We use your data to answer you.
This policy explains the data we receive through the contact form and job applications on this site, what it is used for, how long it is kept, and how you can ask us to change or delete it.
In line with Indonesian Law No. 27 of 2022 on Personal Data Protection
Contents
In short
- We only keep the data you send through the contact form and the job application form.
- Your data is not sold, not shared for anyone else's marketing, and not used for advertising.
- You can ask for a copy, a correction or deletion of your data at any time at sagitamp07@gmail.com.
01Who we are
PT Sagita Maha Prabhu (“we”) is the controller of the personal data you send through this site, as defined in Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP).
This policy covers the public pages of this site. The internal staff portal is governed by the company's employment terms.
02Data we collect
We only receive the data you enter yourself, plus a small amount of technical data recorded automatically when a form is sent.
Contact form
- Full name and email address
- Phone number and company name, if you provide them
- Subject, service of interest and your message
Job applications
- Full name, email address and phone number
- The position you apply for
- Cover letter, if you provide one
- CV in PDF format
Technical data
- IP address when the contact form or an application is sent
- Browser type (user agent) when the contact form is sent
- Date and time of sending
We do not ask for sensitive data such as ID card numbers, health data or financial data. Please do not include it in your message or CV.
03What the data is used for
- Answering your questions and preparing a consultation, site survey or quotation
- Assessing applications and contacting candidates during selection
- Preventing spam and misuse of the forms, including limiting how often one IP address can send them
- Meeting legal obligations when required by a competent authority
We do not sell your data, share it for anyone else's marketing, or use it for advertising.
04Legal basis
We process data on the basis of the consent you give when sending a form, and to take steps you request before any agreement, such as a quotation or a recruitment process.
You can withdraw your consent at any time. Withdrawal does not affect processing carried out before it.
05How long data is kept
- Contact form messages: at most 24 months after the last exchange. If the conversation leads to a contract, the data follows the retention period of contract documents.
- Applications and CVs: at most 12 months after the application is received, so we can contact you about other suitable positions.
- After that period, the data is deleted or anonymised.
06Who can access the data
Only authorised internal staff can open the data, through our password-protected portal. Notifications of new messages and applications are emailed to internal company addresses.
- Hosting and email providers that store data on our behalf under confidentiality obligations
- Government authorities, only where the law requires it
07Security
This site uses an encrypted connection (HTTPS). Access to the internal portal requires a personal account, is limited by role, and every change to the data is logged.
CVs are stored separately from the public pages and can only be downloaded by authorised staff.
09Your rights
- Request a copy of the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data or withdraw your consent
- Object to specific processing
We respond to requests within 3 × 24 hours of receiving the request and confirming your identity.
10Contact
For questions about this policy or requests about your data, contact us:
- sagitamp07@gmail.com
- Phone and WhatsApp
- +62 896-7766-5448
- Address
- PT Sagita Maha Prabhu
Jl. Tukad Pancoran, Gg. Residen 20 No. 20 CE, Panjer, Kec. Denpasar Barat
Denpasar, Bali 80225
11Changes to this policy
When this policy changes, the date at the top of the page is updated. Changes that reduce your rights do not apply retroactively to data you have already sent.