Privacy Policy

1. Data controller

PT Socta Creatives Indonesia, Kelapa Dua, Tangerang Regency, Banten. Contact: halo@socta.id, soctacreatives@gmail.com, or WhatsApp +62 813-6052-9116.

2. Legal basis

• Law No. 27 of 2022 on Personal Data Protection (PDP Law).
• Law No. 11 of 2008 on Electronic Information and Transactions and its amendments, in particular Article 26 on the use of personal data through electronic media.
• Government Regulation No. 71 of 2019 on Electronic Systems and Transactions.

3. What we collect

• Details you share when contacting us: name, company, the service you need, and your message. The contact form does not send data to our servers. It prepares a WhatsApp message that you review and send yourself.
• Data needed to deliver services: contact person details, billing data, tax ID for tax purposes, and publication materials.
• Usage data from Google Analytics 4: pages visited, device and browser type, approximate location, and clicks on WhatsApp, email, or phone links.
• We do not knowingly collect specific personal data (Article 4(2) of the PDP Law), such as health, biometric, or criminal record data, and do not knowingly collect children’s data.

4. Basis & purpose

Under Article 20(2) of the PDP Law, we process data on the basis of:

• Performance of an agreement: replying to inquiries, preparing proposals, and delivering services.
• Legal obligations: transaction records and taxation.
• Legitimate interest: understanding site usage to improve its content and performance.
• Consent: for any other purpose, which we will request separately.

5. Cookies & analytics

Google Analytics sets cookies to distinguish visitors and sessions. You can block or delete cookies in your browser settings, or install Google’s opt-out browser add-on.

6. Third parties & cross-border transfer

We do not sell personal data. Data is processed by the services that run our site and services, namely WhatsApp (Meta), email providers, Google Analytics, and Cloudflare hosting, which may store data outside Indonesia. Such transfers are made with regard to Article 56 of the PDP Law. Publication materials you approve are sent to media outlets for publication.

7. Retention & security

• Inquiry data is kept as long as needed to serve you, then deleted or anonymized.
• Transaction documents and books are kept for 10 years under Article 28(11) of the General Tax Provisions Law.
• Access is limited to team members who need it.
• If a personal data protection failure occurs, we notify you and the competent authority within 3 × 24 hours (Article 46 of the PDP Law).

8. Your rights

Under Articles 5 to 13 of the PDP Law, you have the right to:

• Obtain information about our identity and the basis and purpose of processing.
• Complete, update, and correct your data.
• Access and obtain a copy of your data.
• End processing and delete or destroy your data.
• Withdraw consent.
• Delay or restrict processing.
• Object to decisions based solely on automated processing.
• Sue and receive compensation for unlawful processing.
• Obtain or use your data in a commonly used format.
• Submit requests using the details in section 1. We respond within the periods set by the PDP Law, no later than 3 × 24 hours for requests that must be answered within that time.

9. Changes

This policy may be updated. The date of the latest update is shown on this page.