Privacy Policy

Layanika (“Layanika,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal data processed through our website and platform. This Privacy Policy explains how personal data is collected, used, disclosed, stored, and protected in accordance with the applicable data protection laws in Indonesia.

This document may be updated from time to time to reflect changes in technology, business operations, or applicable regulations. Any updates will be communicated through appropriate channels.

A. Definition

• Personal data

Means any information relating to an identified or identifiable person ("data subject"). A person is considered identifiable if he or she can be identified directly or indirectly, in particular through identifiers such as name, identification number, location data, online identifiers, or one or more factors relating to the physical, physiological, genetic, mental, economic, cultural, or social identity of the person. Possible identification can also occur through the incorporation of additional information or knowledge. The form or form of information has no effect (e.g. photos, videos, or audio recordings may contain personal data).

• Processing

Means any operation or series of operations carried out against personal data, whether automatically or not. This includes the collection (e.g. acquisition), recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure through transmission, dissemination or other forms of provision, alignment, merger, restriction, deletion, or destruction of personal data, as well as changes in the purpose or objectives on which the previous data processing was based.

• Usage Data

Information collected automatically through Layanika (or third-party services used on Layanika), which may include: the IP address or domain name of the computer used by the User using Layanika, the URI (Uniform Resource Identifier) address, the time of the request, the method used to make a request to the server, the size of the file received in response, a numerical code indicating the status of the server's response (successful result, errors, etc.), the country of origin, browser and operating system features used by the user, various details of the time per visit (e.g., time spent on each page within the Application) and details about the path followed within the application with particular reference to the order of pages visited, and other parameters about the operating system of the device and/or the user's IT environment.

User
The data subject who uses Layanika.

Data Subject
A physical person who refers to such personal data.

Data Controller ( Pengontrol Data)
A natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller, as described in this privacy policy.

Service
The Services provided by Layanika as described in the relative terms (if available) and on this site/application.

Indonesia (ID)
Unless otherwise specified, all references made in this document are to the current Economic Area of Indonesia.

B. General information about data processing

1. Data Controller

The controller under data protection legislation is the entity that decides on the purposes and means of processing personal data. We are responsible for the technical arrangement, administration and distribution of the website.
Please feel free to contact us if you have any questions about our privacy policy, the information we hold about you, or if you would like to exercise your privacy rights.

You can contact us at:

PT Mitra Aplikasi Digital

Jl. Pos Pengumben Raya No. 1,
Permata Boulevard Ruko Block BE,
Jakarta Special Capital Region 11630

Email: admin@layanika.com

2. Data Processing

Legal Basis for the Processing of Personal Data

We process your personal data when you are a user of our website or our services. We only process data where we have a lawful basis to do so. We specify the legal basis in the relevant data processing sections; however, in general, we may process your personal data if one of the following conditions applies:

The data subject has given consent for one or more specific purposes. Note: Under certain regulations, we may be permitted to process personal data until the data subject objects to such processing (“opt-out”), without relying on consent or any other legal basis.
The provision of data is necessary for the performance of a contract with the data subject and/or for any pre-contractual obligations thereof;
Processing is necessary for compliance with a legal obligation to which Layanika is subject;
Processing is related to a task carried out in the public interest or in the exercise of official authority vested in us;
Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party;

3.Recipient, transfer to third country, third-party site links

Some data may be accessible to certain internal staff (such as administration, sales, marketing, legal, and IT) as well as external parties. We generally share data with hosting and cloud services, security tools, billing and payment providers, telecommunications providers, public authorities (upon legitimate request), financial institutions, accountants, auditors, and legal advisors.

We use third-party services to ensure that our website is functional, secure, visually appealing, and constantly optimized. Links to third-party websites may be provided; Please review their privacy policy before sharing personal data, as we are not responsible for the processing of their data.

Data may be processed outside of Indonesia only if legally permitted, such as with your consent, contractual needs, or in a country with an adequate level of data protection.

Please review each privacy policy before disclosing personal information to such data controller.

4.Data security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, or alteration.

5. Children

To use our website, users must be at least 17 years old. We do not knowingly collect personal information from individuals under the age of 17, and we do not permit anyone under 17 to use the Site.

6.Automated decision-making

We do not use automated decision-making that has similar legal implications or significant impacts on you. However, we use profiling techniques to analyze user behavior to predict and improve the reach of content distributed through our services.

7.Storage period

In accordance with the reference to the ITE Law and its amendments, in Article 26 paragraph (1) of Law 19/2016 regulates the use of any information through electronic media concerning a person's personal data must be carried out with the consent of the person concerned unless otherwise specified by laws and regulations, we delete or limit the processing of data when the data is no longer needed for its original purpose. The server log file is deleted after 30 days. Data may be retained for longer than that period only if required for legal reasons or legal retention obligations, such as tax documentation and corporate law.

C. Collection and Processing of User Data When Using Our Website

The data collected by Layanika is provided directly or indirectly by you. Such information may be collected automatically as long as users view our website.

Please feel free to contact us if you have any questions about our privacy policy, the information we hold about you, or if you would like to exercise your privacy rights.

We collect and process the following User data: This includes

The date and time when you accessed any of our Internet pages;
Your browser type;
Your browser settings;
The operating system used;
The last page you visited;
Data transfer volume and access status (e.g., file transferred, file not found); and
Your IP address.

Additional information you provide via the contact form:

Full name;
Business name;
Email address;
Phone number.

Additional information provided during account registration:

First and last name;
Nama perusahaan
Email address;
Workspace name;
Time zone;
Country;
Currency;
Company Address;
Including the Tax number

The data will be stored on our servers. However, we do not store this data together with any other personal data other than those mentioned above. The temporary storage of IP addresses by the system is necessary for the website to be delivered to your computer. We do not evaluate data personally, especially for marketing purposes.

Further information regarding each type of personal data collected is available in the relevant section of this privacy policy or through the special explanatory text displayed prior to data collection.

1. Social Media Login

You can use Google sign-in as an alternative to creating an account directly on our platform. This login method creates an account that is functionally identical to one created through manual registration. You will have the same access, permissions, and user experience.

You'll find the Google login option on the platform's sign-up or login page. When you select it, you will be redirected to the Google website where you can enter your login credentials.

Google will then share certain profile information with us. We only accept your name and email address. This allows us to identify you and create your account in our system. We never accept your Google password. If you choose to provide additional information, it will be linked to your account.

We use this service based on our legitimate interests in accordance with Law Number 1 of 2024 concerning Information and Electronic Transactions

You can learn how to manage data access rights through your google account and review the full privacy policy on the google partner page.

2. Security and Performance

Hosting

Our website utilizes hosting and cloud services provided by IDCloudHost (PT Cloud Hosting Indonesia, Sentral Senayan II, Jl. Asia Afrika No. 8, 16th Floor, RT.1/RW.3, Gelora, Tanah Abang, Central Jakarta City, Jakarta 10270, Indonesia).

Your data is processed and stored on IDCloudHost servers when you visit our website. Consequently, IDCloudHost receives your IP address as well as your browser and system information. In accordance with our legitimate interests, when you use Layanikaservices, you entrust your data to us. This Privacy Policy explains the nature, scope, and purpose of the processing of personal data (hereinafter referred to as ‘data’) within our online offerings and the associated websites, features, and content, as well as our external online presence, such as our social media profiles (collectively referred to as the ‘online offerings’). With regard to the terms used, such as ‘personal data’ or ‘processing’, we refer to and comply with applicable Indonesian laws regarding personal data protection,data subjects, namely individuals whose data is collected and processed, are granted various rights to protect their personal information.

3.Contact, CRM

Depending on the content and purpose of the request, the processing of your personal data in the context of communication via telephone or email is carried out based on the data subject’s consent for informational requests, or based on the necessity to fulfill pre-contractual or contractual obligations. The processing of personal data protection and matters relating to electronic information and transactions is conducted in accordance with the applicable laws and regulations in the Republic of Indonesia. In all cases, you are deemed to have granted us consent to contact you in order to respond to such requests, provided that such consent has not been withdrawn by you in accordance with applicable laws and regulations.”

When you contact us via a form, we need the following data to respond to your request and so that we can personally address you and establish your request:

Company name and related information
First and last name
Work email address
Phone number

Once processing has been completed, we will delete your contact request from our active systems immediately, unless legal permission (in particular your consent, which can be revoked at any time) or retention obligations require further storage.

We may store your contact data in a customer relationship management system ("CRM system") if there is a business relationship or if a business relationship can be estimated based on previous communications. Our legal basis is a legitimate interest, which is based on our economic interests to be able to systematically manage the contact data of customers and potential customers. If personal data is stored in a CRM system, it will be reviewed after two years at the end of each calendar year to determine if further storage is required. If it is not required, or if there are no other legal retention obligations, the data will be deleted.

4. Social Media

Unless an explicit objection is stated, we process your data based on our legitimate interests in personal data Protection, for the purpose of improving content and making it more accessible for your convenience. Where cookies are used in the integration of social media content, such processing is carried out based on your consent, and you may withdraw such consent at any time, with effect for the future.

We also provide links to our presence on various social networks on our website. Integration is done through graphs linked on the respective network. This means that connections to such network servers do not automatically occur when our site is accessed; Users will only be redirected to that social networking service when clicking on the related graphic. If you click on a graph while you're logged into your social media account, the network operator may associate the information collected from that visit to your personal account. If you interact through the "Share" or "Like" button of that network, that information may be stored in your account and may be published. If you want to prevent the information from being directly associated with your user account, you must log out of your account before clicking on the associated graph or button.

We would like to emphasize that as a site provider, we have no knowledge of the content of the transmitted data or how it is used by the social media platform.
The data initially collected includes IP address, date, time, and pages visited.

a) Meta (before Facebook)

Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Privacy Policy: https://www.facebook.com/about/privacy/

b) Instagram

Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Privacy Policy: https://www.facebook.com/about/privacy/

c) Telegram

Telegram Messenger Inc. (or Telegram Messenger LLP) 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Privacy Policy: https://telegram.org/privacy/id

Data Cookie

Our website utilizes cookie technology. Cookies are small text files sent to your browser by our web server when you visit our site. These files are stored on your computer and can be retrieved at a later time. You can manage how cookies are set and retrieved through your browser settings. For instance, you may choose to disable cookie storage entirely, restrict them to specific sites, or configure your browser to notify you automatically when a cookie is being set and request your consent. You can delete cookies at any time via your browser’s security settings; however, please note that doing so may affect the appearance and functionality of our website.
Unless otherwise stated, the processing described in this section is based on your consent, and you may withdraw this consent at any time with future effect.

Further information on how to withdraw your consent can be found in our cookie policy. The cookie policy can be found in the footer section of our website.

Cookie Settings

Our website uses CookieAdmin consent technology to obtain your consent in the storage of certain cookies on your device or the use of certain technologies as well as to document them in accordance with data protection rules.

5.Statistics, Web-Analytics, Advertising based on Tracking and Retargeting – Use of Cookies

Sometimes, we or our partners use cookies or process your information in ways that require your consent. Cookies are small text files that may be stored on your device when you visit our website. Various technologies can be used for tracking, such as pixel technology or file log analysis. You give your consent via a cookie banner, which you must actively click. Unless otherwise stated, the processing described in this section is based on your consent. You may revoke your consent at any time with effect for the future. You can find out how to withdraw consent in our cookie settings.

Web-Analytics, Statistics

To identify which content on our website is most engaging to you, we continuously measure visitor traffic and our most-viewed content. Consequently, we process your personal data to:

Record the number of visitors to our website;
Track the duration and timing of visitor sessions; and
Monitor the sequence of visits across various web pages and product sites to optimize our website experience.

We also record the order of visits to various websites and product pages to optimize our website.

6. Chat Widget

We provide a chat widget on our website to give you the opportunity to communicate with us quickly and easily and receive information about our products and services.
When you interact with the chat widget, we process the personal data you provide, such as:

Name
Email
Other contact details
Order
Chat history

In addition, chat widgets can collect your IP address, log files, location information, and other metadata. We may also store information about who uses the chat widget and when, including the content of the conversation as well as records of registration and consent processes for legal compliance purposes.

The data collected through the chatbot will only be used to process your request and will not be shared with third parties without your explicit consent. Data will only be stored for as long as necessary to process your request or for as long as there is a legal retention obligation.

7. Payment Services

We use payment service providers to process your transactions when purchasing services from us. This is done on the basis of our contractual obligations relating to the processing of data for the performance of the contract. If a credit check is performed, this is carried out on the basis of our legitimate interests, which relate to the processing of data for the legitimate interests of the data controller. We prioritize the protection of your personal data and ensure that all processing activities comply with relevant legal requirements. We use Xendit Tech Company Limited (Victoria Building, Jl. Sultan Hasanudin No.47-51, Melawai, Kec. Baru, South Jakarta City, Jakarta Special Capital Region 12160) to process payments. If you use Xendit to make purchases or payments on our site, you will provide them with your personal data.

When you make payments using Xendit, the following personal data may be collected and processed: your name, email address, billing and shipping address, payment information (e.g. credit card number, expiration date, CVV), and transaction details. Data is used to process your payments, verify identity, prevent fraud, and meet legal obligations. We do not share your payment information with third parties, except to process payments through your chosen Payment Provider.

Xendit may share your data with their affiliated companies and service providers as described in Xendit's privacy policy. Xendit uses industry security standards to protect your personal data during the transaction process. We also take appropriate steps to ensure the security of your data in our systems. You have the right to access, correct and delete your personal data stored by Xendit. To exercise this right, you must contact Xendit directly.

More information can be found at https://www.xendit.co/en/privacy-policy/

8.Partner Referral Links

We also use partner referral links. If you click on one of these links and purchase a product, our partners will receive a commission from us. This means we need to be able to identify you, verify that you accessed the product through our partner’s referral link, and confirm that you completed the subsequent transaction. For these purposes, we and our partners use cookies or similar tracking technologies on our website.

Categories of Personal Information Processed

To find out what categories of personal information are processed, you can read the section entitled "Detailed information about the processing of Personal Data" in this document.

Why We Process Your Personal Information

To find out why we process your personal information, you can read the sections entitled "Detailed information about the processing of Personal Data" and "Purposes of processing" in this document.

How to Submit Your Request

You may make an explicit request to exercise your rights at no cost, at any time, by using the contact details provided in this document, or through your legal representative.

How and when we will respond to your Request

We will endeavour to respond promptly to your request.

If in certain circumstances we are unable to do so, we will make sure to communicate to you the factual or legal reasons that prevent us from immediately, or even forever, complying with your request. If we do not process your personal information, we will notify you of the physical or legal party to whom you should make the request, if we are in a position to do so.

If you are submitting a request for confirmation of the processing of personal information or an access request, please make sure you mention whether you want your personal information provided in electronic or printed form.

You will also need to let us know if you would like us to respond to your request directly, which we will answer simply, or if you require full disclosure.

In the case of a request for full disclosure, we will respond within 15 days of your request, providing all information regarding the origin of your personal information, confirmation of whether or not records exist, any criteria used for processing as well as the purposes of the processing, while maintaining our trade and industry secrets.

If you make a request for correction, deletion, anonymization, or blocking of your personal informationwe will promptly forward your request to another party who has received your personal information, so that the third party can also fulfill your request unless the communication proves to be impossible or requires an imreasonable effort on our part.

Last updated: 31 March 2026