Last updated: March 1, 2026
1. Introduction
Dewata Tech ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website dewatatech.com (the "Website") or engage our services.
This policy is governed by Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP) and, where applicable to our international clients, the European Union's General Data Protection Regulation (GDPR). By using our Website or services, you consent to the practices described herein.
2. Information We Collect
We may collect the following types of information:
- Personal Data: Name, email address, phone number, and company name provided through our contact form or WhatsApp inquiries.
- Usage Data: Pages visited, time spent on pages, referring URLs, browser type, and device information collected automatically when you browse our Website.
- Device Information: IP address, operating system, browser type and version, and screen resolution.
- Communication Data: Messages, feedback, and correspondence you send us via contact forms, email, or WhatsApp.
3. How We Collect Information
We collect information through the following methods:
- Contact Forms: When you submit an inquiry through our Website's contact form.
- WhatsApp Communication: When you initiate contact via our WhatsApp button or direct messaging.
- Cookies and Similar Technologies: Small data files placed on your device to enhance your browsing experience.
- Google Analytics 4: We use Google Analytics 4 to collect anonymized usage data to improve our Website and services.
4. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your inquiries and provide customer support.
- To deliver, maintain, and improve our services as agreed upon in project engagements.
- To analyze Website usage patterns and improve user experience.
- To send marketing communications, newsletters, or updates, only with your explicit consent.
- To comply with legal obligations under Indonesian law.
5. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: When you voluntarily provide your data through our contact forms or opt in to marketing communications.
- Contractual Necessity: When processing is necessary to perform a contract or project engagement with you.
- Legitimate Interest: For Website analytics, security, and service improvement, where such interests are not overridden by your rights.
- Legal Obligation: When processing is required to comply with applicable Indonesian or international laws.
6. Data Sharing and Third Parties
We do not sell, trade, or rent your personal data to third parties. We may share your information with the following categories of service providers:
- Google Analytics (Google LLC): For website analytics and usage data. Google's privacy policy applies to data processed by their services.
- WhatsApp / Meta Platforms: When you contact us via WhatsApp, Meta's privacy policy governs the messaging platform.
- Hosting Provider (Vercel / Hostinger): Our Website is hosted on infrastructure that processes data in accordance with their respective privacy policies.
- Payment Processors: If applicable, for processing project payments securely.
All third-party providers are required to protect your data in accordance with applicable laws and are prohibited from using your data for their own purposes beyond providing services to us.
7. International Data Transfers
As a company based in Indonesia serving international clients, your data may be transferred to and processed in countries outside of Indonesia. When such transfers occur, we implement appropriate safeguards including contractual clauses and security measures to ensure your data remains protected in accordance with UU PDP and, where applicable, GDPR standards.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Contact inquiry data: Retained for up to 2 years after the last communication.
- Project-related data: Retained for the duration of the project plus 5 years for legal and accounting purposes.
- Analytics data: Retained in anonymized form for up to 26 months (Google Analytics default).
- Marketing consent data: Retained until you withdraw your consent.
After the retention period, your data will be securely deleted or anonymized.
9. Your Rights
Under UU PDP (Articles 5–12) and, where applicable, GDPR (Articles 15–22), you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Deletion: Request the deletion of your personal data, subject to legal retention requirements.
- Right to Restrict Processing: Request that we limit how we process your data.
- Right to Data Portability: Request your data in a structured, commonly used format.
- Right to Withdraw Consent: Withdraw your consent at any time without affecting the lawfulness of prior processing.
- Right to Object: Object to the processing of your data for direct marketing purposes.
To exercise any of these rights, please contact us at contact@dewatatech.com. We will respond to your request within 30 days.
10. Cookies and Tracking Technologies
Our Website uses cookies and similar technologies to enhance your experience:
- Essential Cookies: Required for the Website to function properly (e.g., theme preference, language selection).
- Analytics Cookies: Used by Google Analytics 4 to collect anonymized usage statistics.
- No Advertising Cookies: We do not use third-party advertising cookies on our Website.
You can manage your cookie preferences through your browser settings. You may also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. Please note that disabling cookies may affect some Website functionality.
11. Data Security
We implement appropriate technical and organizational security measures to protect your personal data, including encrypted communications (HTTPS/TLS), secure hosting infrastructure, access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
12. Children's Privacy
Our Website and services are not directed at individuals under the age of 17. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete such information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
- Company: Dewata Tech
- Email: contact@dewatatech.com
- Phone: +62 851-7975-5016
- Location: Bali, Indonesia