Privacy Policy

Effective Date: 01.01.2026
Last Updated: 18.08.2026

1. Introduction

PT Mind Venture Solutions ("we", "us", "our", or the "Company"), Company Registration Number 1806250081811, with its registered address at:

DISTRICT 8, TREASURY TOWER LANTAI 6 UNIT F, JALAN JENDERAL SUDIRMAN KAVLING 52-53, SCBD LOT 28, SOUTH JAKARTA, Indonesia

is committed to protecting the privacy and security of personal data entrusted to us.

This Privacy Policy explains how we collect, obtain, use, process, store, disclose, transfer, and protect Personal Data when you visit our website, communicate with us, submit an enquiry, use our services, enter into an agreement with us, or otherwise interact with us.

This Privacy Policy is intended to comply with applicable Indonesian laws and regulations concerning personal data protection, including Law of the Republic of Indonesia No. 27 of 2022 concerning Personal Data Protection, together with other applicable laws and regulations concerning electronic systems and personal data protection.

For the purposes of this Privacy Policy, "Personal Data" means data about an individual who is identified or can be identified, either separately or in combination with other information, directly or indirectly, through electronic or non-electronic systems.

Where applicable, PT Mind Venture Solutions acts as the Personal Data Controller in respect of Personal Data processed by us.

2. Personal Data We Collect

2.1 Personal Data You Provide to Us

We may collect Personal Data that you voluntarily provide to us through:

• Contact forms and enquiry forms on our website
• Email correspondence and other communications with us
• Business and commercial discussions
• Client onboarding and verification processes
• Applications, registrations, or other forms submitted to us
• Information provided during the course of our business relationship

Depending on the nature of your interaction with us, this information may include:

• Full name
• Email address
• Telephone or mobile number
• Company or organisation name
• Job title or position
• Business address
• Information contained in correspondence with us
• Information necessary to provide our services
• Contractual and commercial information
• Other information that you voluntarily provide to us

We will only request and process Personal Data that is relevant and reasonably necessary for the purposes for which it is collected.

2.2 Personal Data Collected Automatically

When you visit or interact with our website, certain technical information may be collected automatically, including:

• IP address
• Browser type and version
• Device type
• Operating system
• Language preferences
• Pages visited
• Date and time of visits
• Time spent on pages
• Navigation and interaction information
• Referring website or source
• General website usage information

Where technically possible and appropriate, we may anonymise, aggregate, or otherwise minimise technical information so that it cannot reasonably be used to identify an individual.

2.3 Information from Other Sources

Where permitted by applicable law, we may receive Personal Data from third parties, business partners, service providers, publicly available sources, or other lawful sources.

Where Personal Data is obtained indirectly, we will take reasonable steps to ensure that the collection and processing have an appropriate legal basis and are consistent with applicable Indonesian data protection requirements.

3. How We Use Personal Data

We may process Personal Data for the following purposes:

• To respond to enquiries and requests
• To provide information about our products and services
• To negotiate, enter into, and perform contracts
• To provide and manage our services
• To communicate with clients, prospective clients, suppliers, and business partners
• To manage business relationships
• To administer accounts, agreements, invoices, and payments where applicable
• To provide project updates, reports, and other service-related communications
• To maintain and improve our website
• To monitor and analyse website usage
• To maintain the security and integrity of our systems
• To prevent fraud, misuse, unauthorised access, and other unlawful activity
• To comply with applicable legal and regulatory obligations
• To establish, exercise, or defend legal claims and rights
• To protect our legitimate business interests, where permitted by applicable law
• To perform other purposes that have been disclosed to you and are permitted under applicable Indonesian law

We will not process Personal Data for purposes that are incompatible with the purposes communicated to you, unless such processing is permitted or required by applicable law.

4. Legal Basis for Processing

Under the Indonesian PDP Law, Personal Data may be processed where there is an appropriate legal basis.

Depending on the circumstances, PT Mind Venture Solutions may rely on one or more of the following legal bases:

4.1 Consent

We may process Personal Data based on your valid consent where consent is required or appropriate.

Where processing is based on consent, consent will be requested in a clear and understandable manner and, where applicable, recorded in written or electronic form.

You may withdraw consent at any time where processing is based on consent. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

4.2 Contractual Necessity

We may process Personal Data where processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.

4.3 Legal Obligations

We may process Personal Data where necessary to comply with obligations imposed on us by Indonesian law, regulations, court orders, government authorities, tax authorities, regulators, or other competent authorities.

4.4 Legitimate Interests

Where permitted under Indonesian law, we may process Personal Data where necessary for legitimate interests pursued by us or another party, provided that such processing is proportionate and does not unlawfully override the rights and interests of the Personal Data Subject.

Examples may include:

• Maintaining information security
• Protecting our systems and business
• Preventing fraud and misuse
• Improving our services
• Managing business relationships
• Analysing and improving website performance
• Establishing or defending legal claims

4.5 Other Lawful Grounds

We may process Personal Data where another lawful basis under the PDP Law or other applicable Indonesian legislation applies, including circumstances involving the performance of legal obligations, public interest, or other legally recognised grounds.

5. Personal Data Principles

We aim to process Personal Data in accordance with the principles established by Indonesian data protection legislation.

In particular, we seek to ensure that Personal Data is:

• Collected in a limited, specific, lawful, and transparent manner
• Processed only for specified and legitimate purposes
• Relevant, accurate, complete, and up to date
• Protected against unauthorised access, disclosure, alteration, misuse, loss, destruction, or other unlawful processing
• Processed in a manner that respects the rights of Personal Data Subjects
• Retained only for as long as necessary or as required by applicable law
• Deleted or destroyed when the applicable retention period has expired, subject to legal requirements or legitimate reasons for continued retention

We also maintain records and appropriate internal procedures relating to Personal Data processing where required by applicable law.

6. Data Sharing and Disclosure

We do not sell, rent, or trade Personal Data for monetary consideration.

We may disclose or provide access to Personal Data to the following categories of recipients where necessary and lawful:

• Website and hosting providers – to operate, maintain, and secure our website and digital infrastructure
• Technology and IT service providers – to provide software, cloud infrastructure, cybersecurity, and technical support
• Analytics providers – to understand website usage and improve our services
• Email and communications providers – to facilitate business communications
• Professional advisors – including legal, accounting, tax, audit, and professional consultants
• Business partners and service providers – where necessary to provide contracted services
• Financial institutions and payment providers – where necessary to process payments
• Government authorities and regulators – where required or permitted by law
• Law enforcement authorities – where required by applicable law, court order, or lawful governmental request

Where we engage third-party Personal Data Processors (Prosesor Data Pribadi), we will take reasonable steps to ensure that they process Personal Data only for authorised purposes and maintain appropriate security and confidentiality measures.

7. Personal Data Processors

We may appoint third-party service providers to process Personal Data on our behalf.

Such providers may include cloud hosting companies, software providers, communications platforms, IT service providers, analytics providers, and other contractors.

We expect our Personal Data Processors to:

• Process Personal Data only for authorised purposes
• Maintain confidentiality
• Implement appropriate technical and organisational security measures
• Prevent unauthorised access or disclosure
• Assist us, where appropriate, in fulfilling applicable data protection obligations
• Return, delete, or otherwise handle Personal Data in accordance with applicable requirements when the relevant processing relationship ends

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies to support website functionality, security, performance, and analytics.

8.1 Essential Cookies

Essential cookies may be used where necessary for the operation, security, and functionality of the website.

These cookies may be necessary for features such as:

• Session management
• Security
• Website functionality
• User preferences
• Technical operation of the website

8.2 Analytics Cookies

We may use analytics technologies, such as Google Analytics or similar services, to understand how visitors use our website.

Analytics information may include:

• Pages viewed
• Approximate session duration
• Traffic sources
• Device and browser information
• General interaction with the website

Where possible, we use appropriate settings and measures to minimise the identification of individual visitors.

8.3 Marketing and Advertising Cookies

Unless expressly stated otherwise through our cookie notice or consent mechanism, we do not intend to use advertising or retargeting cookies for behavioural advertising.

If this changes, we will update our cookie information and, where required, obtain the appropriate consent before using non-essential tracking technologies.

8.4 Managing Cookies

You may manage or disable cookies through your browser settings.

Please note that disabling certain essential cookies may affect the functionality, security, or performance of our website.

Where required, we may provide additional cookie controls through a cookie consent mechanism.

9. Data Retention

We retain Personal Data only for as long as reasonably necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, to establish or defend legal claims, or for other legitimate purposes permitted by law.

Retention periods may vary depending on the type and purpose of the Personal Data.

As a general guideline:

• Contact and enquiry information: retained for as long as reasonably necessary to respond to the enquiry and manage the relevant business relationship, plus any additional period reasonably required for legal or business purposes.
• Client and contractual information: retained for the duration of the business relationship and for an appropriate period thereafter to satisfy legal, accounting, tax, contractual, dispute-resolution, and regulatory requirements.
• Email and business correspondence: retained for as long as reasonably necessary for business administration, contractual, legal, security, and record-keeping purposes.
• Financial and accounting information: retained for the period required by applicable Indonesian tax, accounting, corporate, and other laws.
• Website analytics information: retained in accordance with the applicable settings and retention periods of the relevant analytics service.
• Security and technical logs: retained for an appropriate period based on security, operational, and legal requirements.

When Personal Data is no longer required, we will take reasonable steps to delete, destroy, or anonymise it, subject to applicable legal requirements and legitimate grounds for continued retention.

10. Your Rights as a Personal Data Subject

Subject to the conditions and limitations established by Indonesian law, Personal Data Subjects may have the following rights:

• The right to obtain information about the processing of their Personal Data
• The right to access their Personal Data and information regarding its processing
• The right to request correction or completion of inaccurate or incomplete Personal Data
• The right to request deletion or destruction of Personal Data in circumstances permitted by law
• The right to withdraw consent where processing is based on consent
• The right to request restriction or suspension of Personal Data processing where permitted by law
• The right to object to certain processing activities where provided by applicable law
• The right to obtain and/or use their Personal Data in a commonly used and system-readable format, where applicable
• The right to transfer their Personal Data to another Personal Data Controller where permitted by applicable law and where the relevant systems can securely communicate
• The right to obtain compensation for violations of applicable Personal Data protection requirements, where provided by law
• The right to lodge a complaint or pursue other remedies available under Indonesian law

Certain rights may be subject to legal limitations or exceptions, including where exercising a right could affect the rights of another person, conflict with legal obligations, interfere with legal proceedings, or otherwise fall within an exception recognised by applicable law.

11. How to Exercise Your Rights

To exercise your rights or make a Personal Data protection request, please contact us using the details provided in Section 16 of this Privacy Policy.

When submitting a request, we may need to verify your identity and the authenticity of the request before taking action.

This is intended to protect Personal Data against unauthorised disclosure or access.

We will handle valid requests in accordance with applicable Indonesian laws and within the time periods prescribed by applicable legislation.

For certain requests, the PDP Law establishes specific timelines. For example, certain requests concerning access, correction, withdrawal of consent, or restriction of processing may be subject to a 3 × 24-hour statutory period, subject to the applicable legal conditions and exceptions.

12. International Transfers of Personal Data

PT Mind Venture Solutions may use service providers, technology platforms, cloud infrastructure, or other business partners located outside Indonesia.

Where Personal Data is transferred outside the territory of Indonesia, we will take reasonable steps to ensure that the transfer complies with applicable Indonesian data protection requirements.

In particular, where required under the PDP Law, we will assess whether the destination country provides a level of Personal Data protection that is equal to or higher than that required under Indonesian law.

Where the required level of protection is not available, we will rely on another lawful mechanism permitted under Indonesian law, including appropriate contractual, organisational, or other safeguards where applicable.

We will also ensure that international transfers are limited to what is necessary for the relevant purpose and that appropriate security and confidentiality measures are maintained.

13. Data Security

We take reasonable and appropriate technical and organisational measures to protect Personal Data against:

• Unauthorised access
• Unauthorised disclosure
• Unauthorised alteration
• Loss
• Destruction
• Misuse
• Unlawful processing
• Other security incidents

Depending on the nature and risks of the processing, our security measures may include:

• Encryption and secure communications
• Access controls
• Role-based permissions
• Multi-factor authentication where appropriate
• Secure hosting and storage
• System monitoring
• Security assessments
• Vulnerability management
• Backup and recovery procedures
• Employee and contractor confidentiality obligations
• Data protection and security awareness training
• Procedures for responding to security incidents

Although we take reasonable measures to protect Personal Data, no electronic system, network, transmission, or storage method can be guaranteed to be completely secure.

14. Personal Data Breaches

If a failure in Personal Data protection occurs, PT Mind Venture Solutions will take appropriate measures to investigate, contain, mitigate, and remedy the incident.

Where required under the PDP Law, we will provide written notification of the Personal Data protection failure to the relevant Personal Data Subjects and the competent authority no later than 3 × 24 hours (72 hours) after the occurrence or discovery of the failure, as applicable.

The notification will include the information required by applicable law, which may include:

• The Personal Data affected or disclosed
• The time and manner in which the Personal Data was exposed
• The circumstances or nature of the incident
• Measures taken to address the incident
• Measures taken to recover and mitigate the consequences of the incident

Where required by applicable law, we may also notify the public of a Personal Data protection failure.

15. Children

Our services and website are primarily intended for businesses and business users.

We do not knowingly collect Personal Data from children except where permitted by applicable law and where the required consent or other lawful basis has been obtained from a parent, guardian, or other authorised person.

If we become aware that Personal Data relating to a child has been collected or processed unlawfully, we will take reasonable steps to address the situation, including deletion or destruction where required.

16. Contact Us

If you have any questions about this Privacy Policy, our Personal Data processing activities, or wish to exercise your rights as a Personal Data Subject, please contact us:

PT Mind Venture Solutions
Company No.: 1806250081811
Address: DISTRICT 8, TREASURY TOWER LANTAI 6 UNIT F, JALAN JENDERAL SUDIRMAN KAVLING 52-53, SCBD LOT 28, SOUTH JAKARTA, Indonesia

Email: [Insert Privacy Contact Email]

Please include sufficient information in your request to enable us to identify you, understand your request, and respond appropriately.

17. Complaints and Regulatory Rights

If you believe that your Personal Data has been processed in violation of applicable Indonesian data protection laws, you may contact us first so that we can investigate and attempt to resolve your concern.

You may also exercise any complaint, dispute-resolution, or other legal remedies available to you under applicable Indonesian law and regulations.

18. Third-Party Websites and Services

Our website may contain links to websites, applications, platforms, or services operated by third parties.

This Privacy Policy does not apply to the privacy practices of those third parties.

We are not responsible for the content, security, or privacy practices of third-party websites or services. We encourage you to review the applicable privacy policies and terms of use before providing Personal Data to third parties.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our business activities
• Changes in our Personal Data processing practices
• Changes in technology
• Changes in applicable laws or regulations
• Changes in regulatory guidance or requirements

Where appropriate, we will notify users of material changes through our website, by email, or through another appropriate communication method.

The Effective Date and Last Updated date at the beginning of this Privacy Policy indicate when this Privacy Policy was most recently updated.

20. Governing Law

This Privacy Policy and the processing of Personal Data by PT Mind Venture Solutions are governed by the laws and regulations applicable in the Republic of Indonesia.

Any matter concerning the interpretation, implementation, or enforcement of this Privacy Policy shall be subject to the applicable laws and legal procedures of Indonesia.

21. Contact Information

Data Controller:
PT Mind Venture Solutions

Company No.: 1806250081811

Registered Address:
DISTRICT 8, TREASURY TOWER LANTAI 6 UNIT F,
JALAN JENDERAL SUDIRMAN KAVLING 52-53,
SCBD LOT 28, SOUTH JAKARTA, Indonesia

Contact Email: info@mindventure.id