Legal
Privacy & cookies
This page explains what personal data epindonesia.id collects, why, where it goes and how long we hold it. It is written to be read, not to be survived.
Who we are
This site is operated by PT. Elemen Prana Indonesia (“EP Indonesia”), a holding company based in Jakarta, Indonesia. We decide what data this site collects and how it is used.
What we collect
We collect two kinds of data: what you deliberately send us, and what any web server records automatically.
When you use the contact form
- Your name, email address and the message you write.
- Your IP address and browser user-agent, recorded with the submission. We use these to limit abuse of the form, not to profile you.
Everything in that form is optional. If you would rather not use it, email us instead — the address is at the end of this page.
Automatically, when you visit any page
- Standard web server logs: IP address, the page requested, the time, and your browser user-agent.
- Analytics data: which pages you view, roughly where in the world you are, what kind of device and browser you use, and how you found us. See Cookies and analytics below.
Cookies and analytics
We use Google Analytics 4 to see how many people visit the site and which pages they read. It sets two cookies — _ga and _ga_<property> — which let it recognise a returning browser. They expire after two years unless you clear them sooner.
What we look at is aggregate: how many visitors, which pages they read, roughly which country they arrive from, and whether they came from a search engine or a link. We do not use it to identify individual people, and we have not connected it to any Google advertising product.
Google Analytics uses your IP address to work out approximate location. In Analytics 4 that IP address is not stored.
If you would rather not be counted, you can install Google’s opt-out browser add-on, or block cookies for this site in your browser. The site works exactly the same either way — nothing here is gated behind accepting cookies.
The only other cookie we set is a session cookie in our internal admin area, which is behind a password and not reachable from this site.
Why we use it
- To answer you. A contact form message is read by a founder and replied to.
- To keep a record of enquiries so nothing is lost if an email fails to arrive.
- To keep the site working and to prevent abuse — rate limiting, spam filtering, and diagnosing faults.
- To understand what people actually read, in aggregate, so the site gets better rather than bigger.
We do not sell your data, we do not share it for advertising, and we do not use it to build a profile of you.
Who else can see it
We keep the number of third parties deliberately small. The ones that necessarily see data are:
- Hostinger — hosts this website and our email. Contact form messages pass through their mail servers, and the site runs on their infrastructure.
- Microsoft — one company mailbox that receives a copy of contact form enquiries is an Outlook address.
- Google — we use Google Analytics to measure how the site is used, and Google Fonts to serve the typeface. Both mean Google receives your IP address when a page loads. Google acts as our processor for analytics and may handle that data outside Indonesia, including in the United States.
We may also disclose data where we are legally required to.
Where it is stored
The website and its database run on a server located in Southeast Asia. Email is handled by Hostinger, and one recipient mailbox is with Microsoft, so a copy of a contact enquiry may be stored outside Indonesia. Analytics data is held by Google on their own infrastructure, which spans several countries.
How long we keep it
Contact form enquiries are kept for as long as they are useful as a business record — a conversation that leads nowhere is of no value to us either. Server logs are kept only as long as they are useful for diagnosing faults and abuse.
If you want your enquiry deleted, ask us and we will delete it.
Your rights
Under Indonesia’s Personal Data Protection Law (UU No. 27 of 2022) you can ask us to:
- tell you what data about you we hold;
- correct it if it is wrong;
- delete it;
- stop using it.
Ask, and we will do it. We will not make you justify the request.
Security
The site is served only over HTTPS. Contact form data is stored on a firewalled server, and the internal area used to read enquiries is password-protected and not linked from anywhere. No system is perfect, and we would rather say that than claim otherwise.
Changes to this page
If we change what we collect or who we share it with, we will update this page and change the date at the top.
Contact us
For anything on this page — including a request to see or delete your data — use the contact form. It reaches a founder directly.