Privacy Policy

PT Cipta Tekhnologi Adikara acts as the data controller for personal data collected through this website and through direct business inquiries.

We believe in data minimization: we collect only information that is strictly necessary to evaluate business needs, answer technical questions, supply requested proposals or quotations, and fulfill contractual commitments.

We collect personal information that you voluntarily provide to us when completing our online contact and inquiry form, requesting training information, or reaching out directly by email or phone. The data categories collected through the contact form include:

Technical Connection Data: When you browse our website, web server infrastructure automatically logs standard technical request information, including your IP address, browser type and user-agent string, operating system, referring URL, and the date and time of your request. This technical data is collected automatically to maintain network integrity, prevent denial-of-service (DDoS) attacks, and ensure server uptime.

Under Indonesian Law No. 27 of 2022 (UU PDP), we process personal data under clear and lawful legal grounds:

We do not use your contact information for automated profiling, unsolicited behavioral advertising, or purposes incompatible with your initial inquiry without your explicit consent.

We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered, including responding to inquiries, executing commercial contracts, and resolving ongoing business dialogues.

General inquiry submissions that do not culminate in a commercial contract or active relationship are periodically reviewed and safely purged or anonymized within twenty-four (24) months.

Where commercial contracts, purchases, or invoices are generated, associated transaction and correspondence records are maintained for the statutory duration required by Indonesian tax, accounting, and corporate governance laws (typically five to ten years).

We treat your information with high confidentiality. We do not sell, rent, trade, or distribute your personal data to external parties for commercial or marketing gain.

To operate our business infrastructure reliably, we share data solely with trusted third-party service providers bound by strict confidentiality and data protection obligations, including:

We may also disclose personal data if required to do so by competent law enforcement agencies, regulatory bodies, or valid judicial court orders under the applicable laws of the Republic of Indonesia.

PT Cipta Tekhnologi Adikara does not sell, rent, lease, monetize, or trade personal data to third-party data brokers, advertising networks, or lead aggregators.

Any information provided to us remains strictly used for evaluating and fulfilling technology engagements and direct business communications between you and our team.

Our website is built with a privacy-first approach:

We do not track you across third-party websites, nor do we build behavioral profiles based on your web activity. If essential session cookies are used by our infrastructure, they serve purely technical functions (such as routing requests and securing form submissions) and do not harvest personal identifiers.

Pursuant to Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP), you hold the following rights regarding your personal data:

To exercise any of these statutory rights, please submit a written request to ciptatekhnologiadikara@gmail.com. We will verify your identity and respond to your request within the statutory timeframe mandated by Indonesian law (typically within 72 hours to 30 calendar days depending on request complexity).

We implement proportional administrative, technical, and organizational security measures to protect personal data against accidental loss, unauthorized access, destruction, misuse, alteration, or disclosure.

These measures include Transport Layer Security (TLS/HTTPS) encryption for all web transmissions, firewalled hosting environments, strict internal access controls based on principle of least privilege, and sanitized input validation on form endpoints to prevent injection attacks.

While we apply rigorous safeguards, no method of transmission over the internet or electronic storage is completely invulnerable. In the event of a confirmed security incident affecting personal data, we will take prompt remedial action and notify affected individuals and competent authorities in accordance with Indonesian law.

We may update this Privacy Policy from time to time to maintain alignment with legal requirements, regulatory directives, or operational enhancements. When changes occur, the updated policy will be published on this page with a revised "Last updated" date.

If you have questions, feedback, or concerns regarding this Privacy Policy or wish to exercise your data protection rights, please contact our privacy and administrative team at: