This policy explains how PT Rekacipta Elemen Gemirang ("Regma", "we", "us") handles personal data collected through regma.id and through messages you send us. We follow Indonesia's Personal Data Protection Law (Law No. 27 of 2022, "PDP Law") and collect only what we need to reply to you.
1. Who we are
PT Rekacipta Elemen Gemirang is a limited liability company established in the Republic of Indonesia. We are the data controller for personal data collected through this website. Regma is the trading name we use.
2. Data we collect
Data you give us
When you use the contact form or email us, we receive:
- your name, work email address and company name;
- your phone or WhatsApp number, if you choose to share it;
- the topic you select and the message you write;
- anything else you include in later correspondence with us.
Please do not send confidential business details or sensitive personal data in your first message. If your inquiry needs them, tell us and we will put a non-disclosure agreement in place first.
Data collected automatically
- Website analytics: aggregated information such as pages viewed, referring site, browser type and country. See Cookies and analytics.
- Server and security logs: our hosting provider records technical data such as IP address, request time and browser type to deliver the site and protect it from abuse.
3. How we use it
- to reply to your inquiry and continue the conversation you started;
- to prepare a proposal or agreement when you ask for one;
- to understand, in aggregate, how the website is used and improve it;
- to keep the website secure and prevent spam and misuse;
- to meet our legal obligations.
We do not sell personal data, use it for advertising, or add you to a mailing list without asking. We do not make decisions about you based solely on automated processing.
4. Legal basis
Under the PDP Law, we process personal data on these grounds:
- Consent, which you give when you submit the contact form;
- Steps toward a contract, when you ask us to prepare a proposal or agreement;
- Legal obligation, where a law requires us to keep or disclose data;
- Legitimate interest, to keep the website secure and understand its use in aggregate.
5. Cookies and analytics
This website does not set cookies. We use Cloudflare Web Analytics, which does not use cookies or local storage and does not identify or follow individual visitors across sites. It gives us aggregated counts only, so no cookie consent banner is needed.
If we ever add a feature that needs non-essential cookies, we will ask for your consent first and update this policy.
6. Who we share it with
We share personal data only with service providers that help us run the website and our communications, and only as far as they need it to provide their service:
- website hosting and content delivery;
- website analytics (Cloudflare);
- email and form delivery;
- professional advisers, such as lawyers and accountants, under a duty of confidentiality.
We may also disclose personal data when required by law, a court order or a competent authority in Indonesia.
7. Transfers outside Indonesia
Some of our service providers operate servers outside Indonesia, so your data may be processed abroad. When that happens, we use providers that offer a level of protection equal to or higher than the PDP Law, or other safeguards the law allows.
8. How long we keep it
We keep inquiry data for up to one year after our last contact with you, unless the inquiry leads to an engagement, in which case the engagement agreement and applicable law decide how long records are kept. Analytics data is kept in aggregate only. When data is no longer needed, we delete or anonymize it.
9. How we protect it
We protect personal data with measures suited to the risk, including encrypted connections (HTTPS), access limited to people who need it, and providers with recognized security practices. No system is perfectly secure. If a breach affects your personal data, we will notify you and the authorities as the PDP Law requires.
10. Your rights
Under the PDP Law, you have the right to:
- be informed about how and why your data is processed;
- access your data and get a copy of it;
- correct or update data that is inaccurate or incomplete;
- ask us to stop processing, delete or destroy your data;
- withdraw your consent at any time, without affecting processing done before;
- object to decisions based solely on automated processing;
- receive your data in a commonly used format, or have it sent to another controller;
- file a complaint with the competent authority.
To use any of these rights, email info@regma.co.id. We may ask you to confirm your identity before acting on a request, and we will respond within the time the PDP Law requires.
11. Children
This website is meant for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy when our practices or the law change. The date at the top shows the latest version. Significant changes will be highlighted on this page.
13. Contact us
For questions or requests about your personal data, contact:
PT Rekacipta Elemen Gemirang
Tangerang Selatan, Banten, Indonesia
info@regma.co.id