Privacy policy

This website is operated by PT. SUM Digital Konsultan, Jl. Taman Sari No.108, Kerobokan Kelod, Kec. Kuta Utara, Kabupaten Badung, Bali 80117, Indonesia. We act as the data controller for personal data described in this policy.

Contact form. When you send an inquiry we collect the fields you fill in: topic, name, company, email address, phone number (optional), country (optional), preferred language (optional), your message, and any attachment you upload (PDF, Word or Excel, up to 10 MB).

Technical data. When you visit the site, our server records standard request information such as IP address, browser type, and the pages requested. We set one session cookie that is needed for the site to work, including the form's security token. We do not use analytics, advertising, or marketing cookies.

Third-party services. Pages load fonts from Google Fonts. The contact page embeds a Google Maps map. Your browser connects to these services directly, so Google may receive your IP address and technical data when those pages load.

We use contact form data to reply to your inquiry, prepare a proposal or quote, arrange an NDA where you ask for one, and keep a record of the conversation. We rely on your explicit consent, which you give by ticking the privacy checkbox before sending, and on steps you ask us to take before entering a contract.

We use technical data to keep the website secure and running, and to diagnose errors. This is based on our legitimate interest in operating a secure service.

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022, "UU PDP"), you may withdraw your consent at any time. Withdrawing consent does not affect processing carried out before the withdrawal.

Contact form inquiries and their attachments are kept for [retention period to confirm] after the last contact, and then deleted. Server logs are kept for [retention period to confirm]. Inquiries that turn into a contract are kept for as long as the contract and any legal retention duty require.

Inquiries are delivered by email to our team. We use the following service providers to run the site: [email delivery provider to confirm] and [hosting provider to confirm]. We share personal data only with these providers and only as needed for the service they perform.

Some of these providers may process data outside Indonesia. Where they do, we require them to protect the data in line with this policy. [Transfer locations to confirm.]

Our information security management is certified to ISO/IEC 27001:2022. Access to inquiries is limited to the people who need them to respond to you.

Under the UU PDP you may ask us to:

• confirm whether we hold your personal data and get a copy of it;
• correct data that is inaccurate or incomplete;
• delete your data or end its processing;
• withdraw your consent at any time;
• object to certain processing, or ask us to restrict it;
• receive a complaint about how we handle your data, and escalate it to the authority if you are not satisfied with our response.

To exercise any of these rights, email us at info@sum-ind.com. We will respond within [response period to confirm].

We may update this policy. The date at the top shows when it last changed. Material changes will be shown on this page before they take effect.