Effective Date: November 11, 2025
Last Updated: November 11, 2025
1. Introduction
ERP Indonesia ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website erpindonesia.com or engage our ERP consulting and implementation services.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy.
2. Scope and Applicability
This Privacy Policy applies to:
- Personal data collected through our website
- Information provided during service inquiries and consultations
- Data collected during ERP implementation projects
This Privacy Policy does NOT cover:
- Data stored within client ERP systems (governed by separate Service Agreements)
- Third-party websites linked from our site
- Client's own privacy obligations to their end-users
3. Information We Collect
3.1 Information You Provide Directly
- Contact Information: Name, email address, phone number, company name
- Inquiry Details: Service requirements, project scope, business needs
- Communication Records: Correspondence via email, phone, or contact forms
3.2 Automatically Collected Information
- Technical Data: IP address, browser type, device information, operating system
- Usage Data: Pages visited, time spent on site, referral sources, click patterns
- Cookies: See Section 6 for detailed cookie information
3.3 Analytics & Advertising Data
- Google Analytics for website performance analysis
- Google Ads for marketing campaign optimization
- Conversion tracking pixels and remarketing tags
4. How We Use Your Information
We use collected information for the following legitimate business purposes:
4.1 Service Delivery
- Responding to inquiries and service requests
- Providing ERP consulting and implementation services
- Project management and client communication
- Technical support and troubleshooting
4.2 Business Operations
- Website functionality and security maintenance
- Service improvement and quality assurance
- Internal analytics and business intelligence
- Legal compliance and record-keeping
4.3 Marketing & Communications
- Sending relevant service updates and offerings
- Marketing campaigns via Google Ads
- Industry insights and educational content
- Event invitations and partnership opportunities
You may opt-out of marketing communications at any time by contacting us or using unsubscribe links.
5. Legal Basis for Processing (Indonesian Law)
Under Indonesian Personal Data Protection Law (UU PDP), we process your data based on:
- Consent: You provide explicit consent when submitting forms or using our services
- Contractual Necessity: Processing required to deliver services you've requested
- Legitimate Interests: Business operations, security, and service improvement
- Legal Obligations: Compliance with Indonesian tax, business, and regulatory requirements
6. Cookies and Tracking Technologies
6.1 Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Website functionality, session management | Session/Persistent |
| Analytics Cookies | Google Analytics, user behavior analysis | Up to 2 years |
| Marketing Cookies | Google Ads, conversion tracking, remarketing | Up to 2 years |
6.2 Managing Cookies
You can control cookies through your browser settings. Note that disabling cookies may limit website functionality.
Cookie Management: Most browsers allow you to:
- View and delete cookies
- Block third-party cookies
- Block all cookies (may affect functionality)
7. Data Sharing and Disclosure
7.1 Service Providers
We may share data with trusted third-party service providers:
- Google LLC: Analytics and advertising services
- Cloud Hosting Providers: Website and data hosting
- Communication Tools: Email and messaging platforms
All service providers are contractually obligated to protect your data.
7.2 Business Transfers
In the event of merger, acquisition, or asset sale, your data may be transferred to the acquiring entity.
7.3 Legal Requirements
We may disclose information when required by:
- Indonesian law or legal process
- Court orders or government requests
- Protection of our rights, property, or safety
- Prevention of fraud or security threats
7.4 We Do NOT Sell Your Data
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
8. Client Data as Data Processor
8.1 Distinction of Roles
When providing ERP implementation services, we may act as a Data Processor on behalf of our clients (Data Controllers).
Important Clarifications:
- Client ERP Data: Data within client ERP systems is controlled by the client
- Our Role: We process data strictly under client instructions per Service Agreements
- Client Responsibility: Clients remain responsible for their own data protection compliance
- Separate Agreements: Data processing terms are governed by Service Agreements, not this Privacy Policy
8.2 Limited Access and Security
- Access to client ERP systems is restricted to authorized personnel
- Data is processed only for service delivery purposes
- Security measures are outlined in Service Agreements
- No data mining or secondary use of client business data
9. Data Security
We implement industry-standard security measures:
- Technical Safeguards: Encryption, secure servers, access controls
- Organizational Measures: Staff training, confidentiality agreements, access restrictions
- Regular Monitoring: Security audits, vulnerability assessments, incident response protocols
Limitation: While we strive to protect your data, no internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.
10. Data Retention
10.1 Retention Periods
- Contact Inquiries: 3 years from last contact
- Client Project Data: Duration of engagement + 7 years (for legal/tax compliance)
- Marketing Data: Until opt-out or 5 years of inactivity
- Website Analytics: 26 months (Google Analytics default)
10.2 Deletion Procedures
Data is securely deleted or anonymized after retention periods, unless legally required to retain longer.
11. Your Rights Under Indonesian Law
Under UU PDP (Indonesian Personal Data Protection Law), you have the right to:
- Access: Request copies of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal obligations)
- Objection: Object to certain types of processing
- Data Portability: Receive your data in a structured format
- Withdraw Consent: Withdraw consent for marketing communications
To exercise your rights, contact us at: [Insert Contact Email]
Response Time: We will respond to requests within 14 business days.
12. Children's Privacy
Our services are intended for businesses and professionals. We do not knowingly collect data from individuals under 18 years of age.
13. International Data Transfers
Primary Jurisdiction: Our services primarily target Indonesian businesses, and data is processed within Indonesia or with Indonesian-based providers.
Third-Party Services: Some service providers (e.g., Google) may transfer data internationally. These providers maintain appropriate safeguards under their own privacy policies.
14. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. Changes will be effective immediately upon posting to our website.
Material Changes: We will notify clients of significant changes via email or website notice.
Your Continued Use: Continued use of our services after changes constitutes acceptance of the updated Privacy Policy.
15. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY INDONESIAN LAW:
- This Privacy Policy governs only our own data practices, not those of our clients or third parties
- We are not liable for client's use of data within their ERP systems
- We are not responsible for third-party privacy practices (linked websites, service providers' own operations)
- Our liability for data breaches is limited to direct damages and excludes consequential, indirect, or punitive damages
- Claims must be brought within 1 year of the incident
Indemnification: Clients agree to indemnify us against claims arising from their own data protection violations or misuse of our services.
16. Governing Law and Jurisdiction
This Privacy Policy is governed by the laws of the Republic of Indonesia.
Dispute Resolution:
- Good Faith Negotiation: Parties will attempt to resolve disputes amicably
- Jurisdiction: Exclusive jurisdiction of Indonesian courts
- Venue: South Jakarta District Court or as agreed by parties
Language: The Indonesian version of this Privacy Policy shall prevail in case of conflicts with translations.
17. Contact Information
For privacy inquiries, data requests, or complaints:
ERP Indonesia
Email: legal@erpindonesia.com
Phone: +62-24-7640-4074
Address: Jl. B. Wisnu No.7, Ngesrep, Kec. Banyumanik, Kota Semarang, Jawa Tengah 50261 Indonesia
Response Time: We aim to respond to all inquiries within 5-10 business days.
Acknowledgment: By using our website or services, you confirm that you have read, understood, and agree to be bound by this Privacy Policy.