Privacy Policy - Semangatkayu

1. Introduction

Semangat Kayu (“we”, “our”, “us”) is committed to safeguarding the privacy and personal data of all visitors and users of our website, semangatkayu.com. We hold the protection of your data as a core value and strive to ensure full transparency in how your information is collected, used, and protected in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Scope of This Policy and Data Controller Responsibility

This Privacy Policy applies to all individuals who access or use semangatkayu.com. As the Data Controller, Semangat Kayu determines the purposes and means of processing your personal data. Our responsibility encompasses compliance with privacy regulations and safeguarding individual rights regarding personal information submitted to or collected through our services.

3. Categories of Personal Data We Process

We may collect and process the following categories of personal data:

– Usage Data: Includes information such as IP address, browser type, operating system, referral sources, duration of visit, pages viewed, and clickstream data, which are automatically collected through your interactions with semangatkayu.com.

– Account Data: Information provided during the registration or account creation process, such as full name, postal and billing addresses, email address, and telephone number.

– Profile Data: Information related to user behavior and preferences including purchase history, interests in products or services, and saved preferences.

– Communication Data: Includes inquiries submitted through forms, support requests, live chat messages, and related contact history when communicating with us via semangatkayu.com or email.

– Technical Data: Information from your device, including hardware model, operating system version, unique identifiers, screen resolution, and system configurations.

– Transaction Data: Includes records of products purchased, payment method (partial anonymized details), delivery requirements, and billing information.

– Preference Data: Information about your choices regarding promotional materials, email newsletter subscriptions, and interest in specific products or services.

4. Legal Bases for Processing Personal Data

We process your data only where we have a lawful basis to do so under GDPR and CCPA. These include:

– Consent: Where you have explicitly given consent for specific processing purposes.
– Contractual Necessity: To fulfill the terms of any contract entered into with you, such as providing a purchased product or service.
– Legitimate Interests: For purposes such as improving our website, protecting against fraud, or communicating with you, provided such interests do not override your fundamental rights and freedoms.
– Legal Obligation: To comply with applicable laws or enforceable governmental requests.

5. Your Rights

In accordance with GDPR and CCPA, you have the following rights with respect to your personal data:

– Right of Access: Obtain confirmation on whether we hold your personal data and receive a copy of it.
– Right to Rectification: Request that inaccurate or incomplete personal data be corrected.
– Right to Erasure: Request deletion of your personal data in certain circumstances.
– Right to Restriction of Processing: Ask us to restrict certain types of data processing.
– Right to Data Portability: Receive your data in a structured, commonly-used, machine-readable format and transmit it to another controller.
– Right to Object: Object to processing based on legitimate interests or direct marketing at any time.

To exercise any of these rights, you may contact us at [email protected].

6. Security Measures

We employ current technical and organizational safeguards to ensure the confidentiality, integrity, and availability of your personal data. Measures include data encryption, secure socket layer (SSL) technologies, role-based access control, employee training on data privacy, regular security audits, and maintained business continuity and backup systems.

7. International Transfers

If data is transferred outside of your jurisdiction, such transfers are made in compliance with applicable laws using appropriate safeguards. These include standard contractual clauses approved under GDPR and data protection addenda aligned with regional privacy laws to ensure your information remains protected regardless of the destination country.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

– Usage Data: Retained for up to 24 months, unless aggregated and anonymized.
– Account, Profile, and Communication Data: Retained for the life of your account and up to 5 years after closure, in line with legal obligations.
– Transaction Data: Retained for 7 years for tax and compliance purposes.
– Technical Data: Retained for up to 18 months.
– Preference Data: Retained for 2 years following the last recorded activity or until you withdraw consent.

9. Cookie Policy

Semangatkayu.com uses cookies and similar tracking technologies to deliver a tailored user experience. Categories of cookies we use include:

– Essential Cookies: Necessary for core functionality such as authentication and navigation.
– Functional Cookies: Support features like remembering user preferences and settings.
– Analytics Cookies: Monitor user activity and performance of the site, aiding optimization.
– Performance Cookies: Assess the effectiveness of site elements and diagnose technical issues.

All cookies placed comply with privacy regulations, and we do not use cookies to serve third-party advertising inconsistent with your stated preferences.

10. Cookie Management and Compliance

Upon visiting semangatkayu.com, users are provided with a cookie consent mechanism enabling them to accept or decline non-essential cookies. You may revisit and modify your cookie settings at any time through the browser settings or site footer options. Our cookie practices comply fully with the EU ePrivacy Directive, GDPR, and the CCPA.

11. Children’s Privacy

We do not knowingly collect personal data from children under 13 years of age. If we discover that we have unintentionally gathered such information, we will take prompt steps to delete it. Parents or legal guardians may contact us at [email protected] to request the removal of personal data relating to a child.

12. Policy Updates

We may revise this Privacy Policy from time to time as needed to reflect changes in our privacy practices, legal requirements, or website functionality. While updates to this Policy will be posted on semangatkayu.com, we will notify users via direct communication where significant changes affect your rights or the nature of our data processing.

13. Contact

If you have questions or concerns regarding this Privacy Policy or any aspect of our privacy practices, you are encouraged to contact us:

Email: [email protected]
Website: https://semangatkayu.com

We are committed to maintaining compliance with relevant data protection laws and are here to assist with any privacy-related inquiries promptly and transparently.