Privacy Policy for PT Kokatto Teknologi Global

At Kokatto, accessible from https://kokatto.com, https://portal.kokatto.com, https://iportal.kokatto.com, and https://neo.kokatto.com, the privacy of our visitors and customers is of utmost importance. This Privacy Policy document outlines the types of personal data we collect, how we use it, and your rights as a data subject under applicable laws, including Indonesia's Personal Data Protection (PDP) law.

Consent

By using our website or services, you consent to the terms outlined in this Privacy Policy. You also confirm that you are providing your personal data voluntarily and that Kokatto may process your personal data in accordance with this policy and relevant laws.

Information We Collect

• Full name, email address, phone number, company name, and other contact information.
• Data related to your interactions with our website and services, such as IP address, browser type, usage patterns, and preferences.
• Any additional information provided voluntarily when contacting us directly, such as attachments or support requests.

Purpose of Data Collection

We collect and process personal data for the following purposes:

• To provide, operate, and maintain our website and services.
• To improve, personalize, and enhance our services based on user interactions.
• To comply with legal obligations, including those stipulated by Indonesia's PDP law.
• To communicate with you regarding customer support, promotional offers, or service updates.
• To analyze usage and trends to improve the functionality of our services.
• To prevent fraud and ensure the security of our platform.

Legal Basis for Processing Personal Data

In accordance with Indonesia's PDP law, Kokatto may process personal data on the following legal grounds:

• Consent: Where we have obtained explicit consent from you for a specific purpose (e.g., marketing).
• Contractual Obligations: Where processing is necessary to fulfill a contract (e.g., account registration).
• Legal Obligations: Where processing is required to comply with a legal obligation.
• Legitimate Interests: Where processing is necessary for the legitimate interests of Kokatto, except where such interests are overridden by your fundamental rights and freedoms.

Data Retention

We will retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Afterward, data will be securely deleted or anonymized in accordance with best practices and legal obligations, including those under the PDP law.

Your Rights Under Indonesia's PDP Law

• Right to Access: You may request access to the personal data we hold about you.
• Right to Rectification: You may request corrections to inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data under certain conditions. This request can be made via email to support@kokatto.com, and we will process it in accordance with PDP law requirements, ensuring proper identity validation.
• Right to Restriction of Processing: You may request restrictions on the processing of your data under certain conditions.
• Right to Object: You may object to the processing of your personal data for certain purposes, such as direct marketing.
• Right to Data Portability: You have the right to request a copy of your data in a commonly used and machine-readable format for transfer to another organization.

Data Transfers

Any transfer of personal data outside Indonesia will be carried out in compliance with the PDP law, ensuring appropriate safeguards such as contractual clauses or binding corporate rules are in place.

Data Security

Kokatto takes appropriate security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. This includes technical, physical, and organizational measures in line with industry best practices and the PDP law.

Cookies and Web Beacons

Kokatto uses cookies to improve user experience and analyze website traffic. By using our website, you agree to the use of cookies in accordance with our Cookie Policy. You may control your cookie preferences by adjusting your browser settings.

Third-Party Data Processing

Where third parties process your personal data on behalf of Kokatto (e.g., for hosting services or advertising), we ensure that they comply with PDP law requirements and maintain the confidentiality and security of your data.

Data Breach Notification

In the event of a data breach involving your personal data, Kokatto will notify the relevant regulatory authorities and affected individuals within the timeframe stipulated by the PDP law, providing details of the breach and the measures taken to mitigate its impact.

Changes to this Privacy Policy

Kokatto reserves the right to update this Privacy Policy in response to changes in legislation or our data processing activities. Any changes will be posted on this page, and if significant changes are made, we will notify you via email or a notice on our website.