Privacy Policy

Privacy Policy of PT Surya Bumi Retailindo

This Privacy Policy (together with the applicable Terms and Conditions and other information listed on the sappun.co.id site) is the basis for processing data or information that can identify Users provided to PT Surya Bumi Retailindo (“SBR”) or collected from Users or third parties (hereinafter referred to as “Personal Data”). Processing means activities or series of activities carried out on Personal Data, whether automatically or not, such as collection, recording, arrangement, structuring, use, storage, processing, adaptation, change, retrieval, consultation, use, disclosure through transmission, dissemination, or other disclosure, alignment, combination, prohibition, deletion, or destruction.

This Privacy Policy is an inseparable part and is an integral part of the applicable Terms and Conditions.

By accessing or using the site sappun.co.id, the User acknowledges that he/she has been notified and understands the terms of this Privacy Policy.

All capitalized terms in this Privacy Policy, unless otherwise defined or the context requires otherwise, have the meanings set out in the applicable Terms and Conditions.

Acquisition and Protection of User Personal Data

  1. Personal Data Collection: SBR collects User Personal Data to process transactions, manage and facilitate the use of the sappun.co.id site, and other purposes described in this Privacy Policy as long as permitted by applicable laws and regulations. Personal Data collected includes:
    a. Account Information: Name, username, e-mail, telephone number, address, User profile (including date of birth, gender, KTP photo, and self-portrait), transaction, financial, and/or banking information (such as bank account data, credit cards, virtual accounts, instant payments, and internet banking).
    b. User Behavior: Information regarding preferences, interests, experiences, photos, media, real-time geo location, survey results, track records (logs), type of web browser, and third-party sites or services used before interacting with the sappun.co.id site.
    c. Third Party Information: Personal information obtained from third parties who work with SBR, such as vendors, agents, professional advisors, consultants, and other parties.
    d. Other Information: Personal data and information entered into the SBR system and/or the sappun.co.id website, including product photos, chats, and conversations.

By providing the above information, the User waives any rights to claims, losses, demands and lawsuits that may arise from the Processing of information, including Personal Data, in the SBR system and/or the sappun.co.id website.

  1. User Consent: The User hereby gives explicit consent to the Processing of Personal Data and declares that such consent is given without coercion, in a competent and conscious state.
  2. Ownership of Personal Data: The User declares that all Personal Data entered into the SBR system and/or the sappun.co.id site belongs to SBR. However, Personal Data remains the User’s personal right.
  3. Truth of Personal Data: The User declares that the Personal Data submitted is original, authentic, true, accurate, complete, not misleading, up to date, and is the User’s personal right.
  4. Update of Personal Data: Users have the right to submit a request for an update or correction of Personal Data. SBR has the right to reject a request for access or correction of Personal Data if permitted or required under applicable laws and regulations.
  5. Personal Data Security: SBR has the right to request authentication and updating of User Personal Data to ensure the accuracy, completeness, and currency of the data, including terminating User access to the sappun.co.id site if authentication and updating have not been carried out.
  6. Personal Data Protection: SBR protects all Personal Data provided by Users when accessing or using the sappun.co.id site, including maintaining the confidentiality, integrity, and availability of Personal Data.

Personal Data Processing

  1. Use of Personal Data: SBR has the right to process User Personal Data to improve quality and services in accordance with applicable laws and regulations and based on User Consent.
  2. Internal Requirements: SBR has the right to use User Personal Data for know-your-customer (KYC) purposes and to ensure the site  sappun.co.id  and its features function properly.
  3. Data Verification: SBR has the right to use general information and service usage by Users to verify Personal Data.
  4. Transaction Monitoring: SBR has the right to use transaction information for monitoring, administration, and investigation purposes in accordance with applicable laws and regulations.
  5. Use of Bank Name: SBR has the right to use and store bank name information, including account name and number, to ensure payment.
  6. Legal Compliance: Personal Data may be used for compliance with applicable laws and regulations, investigations, and dispute resolution.
  7. Disclosure of Personal Data: In addition to the purposes mentioned above, SBR has the right to disclose Personal Data under the following conditions:
    a. Legal Obligations: If required by law or an official order from a court or authorized agency.
    b. User Activity Process: To process activities such as purchases, payment verification, product delivery, etc.
    c. Cooperation with Third Parties: For the development of the sappun.co.id site and certain services on behalf of SBR.
    d. Aggregate Data: SBR may inform some of the Personal Data that has been anonymized for system development, database management, analysis, or service improvement.
    e. Combination of Personal Data: SBR may combine Personal Data with other information so that it is no longer associated with the User and disclose such data to third parties.
    f. Emergency: In an emergency that threatens the life, health, or safety of a person.
    g. User Interests: If necessary for the benefit of the User.
    h. Other Cooperation: SBR may disclose information to SBR subsidiaries, affiliates, partners, partners, and vendors to assist with services or data management.
    i. Third Party Offers: To provide third party services or offers, for example related to payment, billing, activation, provision, maintenance, etc.
    j. Business Development: For the benefit of SBR, affiliates, group companies, and subsidiaries in developing business, products, quality, and services.
    k. Promotion and Advertising: For promotional and advertising activities including advertising identifiers and promotional content analysis.
    l. Management and Development: To detect, monitor, investigate, reduce, or prevent fraud and technical or security issues.
    m. Corporate Transactions: To facilitate merger, asset sale, consolidation, or restructuring transactions involving SBR.
    n. Compliance with Law: For other purposes permitted by applicable laws or regulations.
  8. Data Processing Outside Indonesia: User Personal Data may be processed outside Indonesia by parties cooperating with SBR. SBR will ensure that such data remains protected in accordance with the commitments in this Privacy Policy.
  9. Data Security: SBR implements appropriate security measures to protect User Personal Data, including encryption. However, Users need to understand that data transmission over the internet is never completely secure, and Users are responsible for such risks.
  10. Confidentiality of Personal Data: SBR is committed to maintaining the confidentiality of Personal Data and will not disclose it to third parties without the User’s consent, except for matters described in this Privacy Policy.

Data Deletion

  1. Deletion of Personal Data: SBR will delete or anonymize User Personal Data if such data is no longer required for the purposes for which it was collected or storage is no longer necessary for compliance with laws and regulations.
  2. Unsubscribe: Users may unsubscribe from promotional information and exclusive offers by clicking the “unsubscribe” link in emails or marketing materials.
  3. Withdrawal of Consent: Users may withdraw consent for the use of Personal Data by ceasing to use the sappun.co.id site. Users need to understand that withdrawal of consent may affect SBR’s ability to carry out certain obligations.
  4. Submission of Data Deletion: Users may submit a request for deletion of Personal Data to SBR in accordance with applicable procedures.
  5. Data Retention by Other Parties: Some Personal Data may be retained by other parties, including government agencies. SBR is not responsible for the data retention policies of such agencies.

SBR Limitation of Liability

  1. User Account Security: Users are responsible for the security of their SBR accounts, such as creating a strong password and keeping it confidential.
  2. Data Exchange by Users: SBR is not responsible for the exchange of personal data carried out by Users themselves.
  3. Responsibility for the System: SBR is responsible for the protection and security of Personal Data in the SBR System and is obliged to notify Users in the event of a failure in data protection.
  4. Responsibility for the System: SBR is responsible for the protection and security of Personal Data in the SBR System and is obliged to notify Users in the event of a failure in data protection.
  5. Data Leaks due to Force Majeure: SBR is not responsible for any data leaks caused by Force Majeure. Users will be notified within 14 days after the occurrence of Force Majeure.

Cookies

  1. Use of Cookies: Cookies are small files that are automatically placed on a User’s device to store preferences when visiting a site.
  2. Cookies Settings Options: Users can choose to refuse the use of cookies through their web browser settings. However, this may affect the performance of the site.
  3. Use of Google Analytics: SBR uses Google Analytics to develop the site and content. Users can download the Google Analytics Opt-Out Add-on to opt out of access.
  4. Use of Data by Third Parties : SBR may provide data obtained from cookies to third parties for marketing and advertising purposes.
  5. Cookies Control: Users can control the use of cookies through their browser settings, but this may affect the functionality of the site.

Changes to the Privacy Policy

SBR may at any time change, revise, or update this Privacy Policy to remain relevant to technology, applicable laws, and user needs. Users are advised to check the Privacy Policy page periodically. By continuing to access and use the site www.sappun.co.id, Users are deemed to agree to the updated Privacy Policy.

SBR Contact

  1. Privacy Complaints: If a User has concerns about privacy, the User may contact SBR through the Resolution Center by explaining their identity and complaint.
  2. Response to Complaints: SBR will investigate and respond to complaints within a reasonable time.
  3. Questions or Data Corrections: If Users have questions, comments, or wish to correct Personal Data, please contact the Data Resolution Center.

CartCart0 WishlistWishlist ShopShop My OrderMy Order SupportSupport