Privacy Policy

We collect the following categories of personal data:

• Identity Data: Full name as provided during checkout.
• Contact Data: Email address, phone number (including WhatsApp number).
• Delivery Data: Shipping address, postal code, city, and province.
• Transaction Data: Order details, payment method selection, order status, and shipping tracking numbers.
• Technical Data: Browser type, device type, and anonymized analytics data collected through standard web analytics.

We do NOT collect sensitive personal data such as government ID numbers, biometric data, religious beliefs, or health information.

Your personal data is used strictly for the following purposes:

• Order Fulfillment: Processing, confirming, and delivering your purchases.
• Payment Processing: Verifying transactions through our payment gateway partner (Midtrans).
• Shipping & Logistics: Generating shipping labels, calculating courier rates, and tracking deliveries through our logistics partner (Biteship).
• Transactional Notifications: Sending order confirmations, payment receipts, shipping updates, delivery confirmations, and return/refund status updates via WhatsApp (through Meta's WhatsApp Business Cloud API) and email.
• Promotional Communications: Sending marketing messages and promotions only to customers who have explicitly opted in to receive such communications via WhatsApp.
• Customer Support: Responding to inquiries, complaints, and return/refund requests.

We do NOT use your data for profiling, automated decision-making, or any purpose beyond those listed above.

We share your data only with essential service partners required to fulfill your orders. We NEVER sell, rent, or monetize customer data.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce agreements.

• Order Data: Retained for 3 years after the transaction date for warranty and legal compliance purposes.
• WhatsApp Message Logs: Message delivery status is retained for operational monitoring. Message content is not stored on our servers beyond delivery confirmation.
• Marketing Consent: Retained until the customer opts out or requests deletion.

• All web traffic is encrypted via HTTPS/TLS.
• Payment transactions are processed through PCI-DSS certified infrastructure (Midtrans).
• Database access is protected by Row Level Security (RLS) policies and service-role authentication.
• API keys and secrets are stored as encrypted environment variables, never in client-side code.
• WhatsApp messages are sent through Meta's official Cloud API with token-based authentication.

Under applicable data protection laws (including UU PDP), you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate personal data.
• Erasure: Request permanent deletion of your personal data from our systems.
• Opt-Out: Withdraw consent for promotional communications at any time by replying "STOP" to any WhatsApp message or contacting us directly.
• Portability: Request your data in a machine-readable format.

To exercise any of these rights, contact us using the information provided below. We will respond to your request within 14 business days.

Our website uses essential cookies for shopping cart functionality and session management. We may use anonymized analytics to understand general usage patterns. We do not use third-party advertising trackers or sell cookie data.

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: