Transparent about data.
Serious about security.

Scope

This policy applies to the retech.id website, contact form, RETECH Assistant form, and initial communications arising from those channels.

Data processed while delivering a customer project may be governed further by the applicable proposal, contract, non-disclosure agreement, or data processing agreement.

Data we process

Data you provide

• Your name and telephone or WhatsApp number.
• The service you are interested in and a description of your business or technical requirements.
• The content of follow-up correspondence you send by email or another communication channel.

Technical and usage data

• Pages viewed, visit time, referrer, device type, browser, general location, and interactions such as clicks or scrolling.
• IP address and user-agent used on a limited basis for security, server logs, abuse detection, and rate limiting. For form limits, the technical identity is converted into an HMAC fingerprint.
• A Cloudflare Turnstile verification token to confirm that a form submission comes from a legitimate user.

Do not include passwords, private keys, payment-card data, health data, or other sensitive information in the requirements field.

Purpose and legal basis

We process data proportionately to:

• Respond to questions and prepare estimates, proposals, or pre-contract steps you request.
• Contact you about the selected service and manage the business relationship.
• Maintain security, prevent spam and abuse, and resolve technical disruptions.
• Measure website performance and improve the user experience using aggregated or limited data.
• Meet legal, accounting, dispute-resolution, or rights-protection obligations for RETECH and others.

The legal basis depends on context and may include consent, a request to take pre-contract steps, performance of an agreement, a legal obligation, or another legitimate interest that respects data-subject rights.

Service providers and data transfers

To operate the website, RETECH uses service providers that process data for their respective functions:

Some providers may process data on infrastructure outside Indonesia. We limit transferred data to what the service needs and apply available contractual or technical safeguards.

We may disclose data when required by law, ordered by a lawful authority, or necessary to protect security and legal rights. We do not sell personal data for third-party purposes.

Data security

We use technical and organizational measures proportionate to risk, including:

• HTTPS/TLS connection encryption and server-side secret management.
• Browser- and server-side input validation, honeypots, Turnstile, and rate limiting.
• Need-based access controls, restricted database privileges, logging, and monitoring.
• Browser security headers, content-source restrictions, maintenance, and system updates.
• Masking of sensitive information in case studies and form elements in session analytics.

No system can guarantee absolute security. If an incident occurs, we will assess its impact, contain it, and provide notifications as required by applicable obligations.

Data retention

Data is retained as needed to follow up inquiries, keep business-relationship records, meet legal obligations, and address disputes or security matters. Retention periods vary by data type, communication status, contractual obligations, and operational needs.

When no longer needed, data will be deleted, anonymized, or access will be reasonably restricted. Security logs and analytics data may have different retention periods based on provider configuration.

Your rights

Subject to applicable law, you may request:

• Information about, access to, and a copy of personal data we manage.
• Correction or updating of inaccurate data.
• Cessation, restriction, deletion, or destruction of data processing.
• Withdrawal of consent or objection to certain processing.
• Data portability in a commonly used format where applicable.

We may request reasonable information to verify identity before fulfilling a request. Certain rights may be limited where retention or processing remains legally required or is necessary to defend legal rights.

Contact and policy changes

Send data-related questions, complaints, or requests to admin@retech.id. Include enough information for us to identify the request without sending unnecessary sensitive data.

This policy may be updated to reflect changes in services, technology, providers, or legal requirements. The latest revision date will appear at the top of the page.