Privacy Policy
Last updated: January 8, 2025
As digital architects, we believe that a foundation of trust is built through transparency. PT Grandboard Strategi Multi Cipta ("Grandboard", "we") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website.
This Privacy Policy is prepared in accordance with Law Number 27 of 2022 concerning Personal Data Protection (PDP Law) and its implementing regulations.
1. Information We Collect
We collect information that you provide directly to us, including:
- Full name
- Email address
- Company/organization name
- Phone number
- Your message or inquiry
2. Automatically Collected Information
When you visit our website, we automatically collect certain information through Cloudflare Analytics, including:
- IP address (anonymized)
- Browser and device type
- Pages visited
- Time and duration of visit
- Geographic location (country level)
3. Purpose of Data Use
We use the collected information to:
- Respond to your inquiries and requests
- Provide the services you request
- Improve our website and services
- Analyze website usage
- Comply with legal obligations
4. Legal Basis for Processing
In accordance with the PDP Law, we process your personal data based on the following legal bases:
- Consent - You provide consent through the contact form or cookie consent
- Contract performance - Required to provide services you request
- Legitimate interest - For analytics and website security
- Legal obligation - To comply with applicable regulations
5. Cross-Border Data Transfer
Your personal data may be transferred to and stored on servers located outside Indonesia. We use the following third-party services that may process data outside Indonesia:
- Cloudflare - Global servers for security and analytics
- Resend - Email delivery service with servers outside Indonesia
We ensure that these service providers maintain adequate data protection standards in accordance with the PDP Law.
6. Data Retention
We retain your personal information with the following retention periods:
- Contact form data: maximum 2 years from submission
- Analytics data (Cloudflare): 30 days
- Cookie consent preferences: until you delete them from your browser
7. Your Rights
In accordance with the PDP Law, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw your consent
- Lodge a complaint with data protection authorities
8. Data Security
We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.
9. Data Breach Procedures
In the event of a personal data breach that may harm you, we will:
- Notify you within 72 hours of becoming aware of the breach
- Report to relevant authorities if required by law
- Take mitigation steps to minimize the impact
10. Policy Changes
We may update this Privacy Policy from time to time. Changes will be posted on this page with the latest update date.
11. Company Information
The data controller for this website is:
12. Contact Us
For questions about this Privacy Policy or to exercise your personal data rights, please contact us at: