PRIVACY STATEMENT – Richs Indonesia

Rich Products Indonesia and their affiliates and subsidiaries (hereinafter collectively referred to as “Rich’s,” “us,” “we,” “our,” or “Company”) have created this Privacy Policy to apply to all users of this website, https://richs.co.id/, and all digital assets contained or offered therein (collectively, our “Services”). This Privacy Policy describes, among other things, the types of information we collect from users when you use our Services, how we use it, and your rights with respect to your information. Rich Products is committed to the handling of your information responsibly and in accordance with the provisions of Law No. 27 of 2022 concerning Personal Data Protection, including any other related applicable laws and regulations (the “Law”).

This Privacy Policy is integrated into our Terms & Conditions of Use (“Terms & Conditions”). This Privacy Policy is provided with the goal that you have full control and understanding over the information that you provide to Rich’s. Therefore, we recommend that you read the information contained in this Privacy Policy carefully.

By utilizing the Services, you acknowledge that:

You accept and agree to all terms set forth in this Privacy Policy, along with any future amendments. Rich’s will notify you of any changes to the Privacy Policy before posting the updated version on the website and reserves the right to modify this Privacy Policy at any time.
You grant Rich’s permission to collect, use, disclose, and/or process your Information in accordance with this Privacy Policy.

If you have any privacy or data use concerns, please contact us as set out below under the heading “How to Contact Us.” To make sure you stay informed of all changes, you should check these policies periodically. Updates will be referenced by the “Last Updated” date shown below.

If you do not agree to this Privacy Policy and our Terms & Conditions, please refrain from using our Services.

I. DATA CONTROLLER

For purposes of this Privacy Policy, Rich’s is the data controller, with an address at Mahaka Square, Jl. Raya Kelapa Nias HF-3, Kelapa Gading 14240 North Jakarta.

II. INFORMATION WE COLLECT ABOUT YOU

We may collect the following categories of personal data about you, which are described in more detail below: (A) information you provide to us, (B) information we may automatically collect, and (C) information we may receive from third parties. The information listed in (A)-(C) above, are detailed below, and hereinafter referred to as “Information.”

A. Information You Provide to Us

In using our Services, you may provide us with Information, including, without limitation:

Individual identifiers such as name, username, birth date, and contact information including email address, mailing address, proof of mailing address, fax number, and telephone number(s);
Company identifiers and formation information including articles of incorporation and powers of attorney, official identification of the legal representative, employees, directors, or owners of the data;
Date of birth, age or age range, and gender;
Favorite products, hobbies and interests, and household or lifestyle information;
Account information and log in credentials, including unique identifiers such as username and password;
Communications with us, preferences, and other Information you provide to us such as any messages (including via online chat feature and WhatsApp), opinions and feedback that you provide to us, your user preferences (such as in receiving updates or marketing information), and other Information that you share with us when you contact us directly (such as for customer support services); and
Additional Information as otherwise described to you at the point of collection or pursuant to your consent.
If you provide us with Information related to other individuals (such as Information about your spouse, family members, friends, or other parties), you represent and warrant that you have obtained their consent and, on their behalf, consent to the processing of their Information by us. We may request proof of such consent from you at any time.

You may also provide us with Specific Personal Data, as defined by the Law, such as the following:

Financial data including bank account number, checking account number and password.
Children’s data. We are committed to protecting the privacy of children who use our Services. Our Services are not directed at children under the age of 18, and we do not intentionally collect personal information from children under this age. If we learn that we have collected personal data from a child under the applicable threshold age, we will take steps to delete that information as soon as possible.

If you are a parent or guardian and believe that we may have collected personal data from a child, please contact us at privacy@rich.com, and we will work with you to ensure that the information is removed from our systems.

You are under no obligation to provide your Information, including Specific Personal Data to Rich’s, or otherwise may request processing termination or withdraw your consent for Information processing by Rich’s. However, if you decide not to provide your Information or to request the termination or withdrawal, we may be unable to offer our products or services to you, maintain a high quality of service, or address any inquiries you may have.

B. Information We May Automatically Collect About You

Our Services may automatically collect the following categories of usage and technical Information about you. This Information is used by Rich’s for the operation of the Services, to maintain quality of the Services, and to provide general statistics regarding use of the Services. This Information may include:

IP address, which is the number associated with the service through which you access the Internet, like your ISP (Internet service provider);
Date and time of your visit or use of our Services;
Domain server from which you are using our Services;
Type of computer, web browsers, search engine used, operating system, or platform you use;
Data identifying the web pages you visited prior to and after visiting our website or use of our Services;
Your movement and activity within the website, which is aggregated with other information;
Geographic data such as country or region;
Mobile device information, including the type of device you use, operating system version, and the device identifier (or “UDID”); and
Mobile application identification and behavior, use, and aggregated usage, performance data, and where the application was downloaded from.

C. Information We May Receive from Third Parties

We may collect additional Information about you from third-party websites, social media platforms, such as but not limited to, Facebook, LinkedIn, TikTok, YouTube, or Instagram (“Social Media Platforms”), and/or sources providing publicly available information (e.g., from the Indonesia postal service) to help us provide services to you, help prevent fraud, and for marketing and advertising purposes.

This Privacy Policy only applies to Information collected by our Services. We are not responsible for the privacy and security practices of those other websites or Social Media Platforms or the Information they may collect (which may include IP address). You should contact such third parties directly to determine their respective privacy policies. Links to any other websites or content do not constitute or imply an endorsement or recommendation by us of the linked website, Social Media Platform, and/or content.

III. Cookies & Technologies Used to Collect Information About You

We and/or certain service providers operating on our behalf may collect Information about your activity, or activity on devices associated with you over time, on our sites and applications, and across non-affiliated websites or online applications. We may collect this Information by using certain technologies, such as cookies, web beacons, pixels, tags, software developer kits, third-party libraries, and other similar technologies. Third-party service providers, advertisers, and/or partners may also view, edit, or set their own cookies or place web beacons.

Cookies (or browser cookies). Cookies are small digital files that are transferred to your computer or smartphone’s hard drive when you visit a website or click on a URL. Most web browsers automatically accept cookies. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of our Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Services.

Web Beacons. Website pages may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages and for other related statistics (for example, recording the popularity of certain content and verifying system and server integrity). We also use these technical methods to analyze the traffic patterns, such as the frequency with which our users visit various parts of the Services. These technical methods may involve the transmission of Information either directly to us or to a third party authorized by us to collect Information on our behalf. Our Services may use retargeting pixels from Google, Facebook, and other ad networks. We may also use web beacons in HTML emails that we send to determine whether the recipients have opened those emails and/or clicked on links in those emails.
Analytics. Analytics are tools we use, such as Google Analytics, to help provide us with information about traffic to our website and use of our Services, which Google may share with other services and websites who use the collected data to contextualize and personalize the ads of its own advertising network. Learn more about Google’s Privacy Policy here: https://policies.google.com/privacy?hl=en-US. You can opt out of having your activity on our Services made available to Google Analytics by installing the Google Analytics opt-out add-on for your web browser by visiting: https://tools.google.com/dlpage/gaoptout for your web browser.
Mobile Application Technologies. If you access our website and Services through a mobile device, we may automatically collect Information about your device, your phone number, and your physical location.

IV. HOW WE USE YOUR INFORMATION

A. Use and Purpose of Processing Your Information

We use and process your Information for things that may include, but are not limited to, the following:

To register you as a customer or supplier in our system;
To confirm and validate corporate tax information;
To respond to your inquiries and provide you with requested information and other communications, including by email and through WhatsApp;
To track sales on products that may be of interest to you;
To process your product registration request;
To provide you with an invoice and to process payment;
To send you our newsletter and other correspondence you request;
To communicate with you when you use our Services including our website and WhatsApp;
To provide customer service;
For general or targeted marketing and advertising purposes, including sending you promotional material or special offers on our behalf or on behalf of our marketing partners and/or their respective affiliates and subsidiaries and other third parties, provided that you have not already opted out of receiving such communications;
To fulfill contracts we have with you;
To manage, improve, and foster relationships with third-party service providers, including vendors, suppliers, and parents, affiliates, subsidiaries, and business partners;
To maintain, improve, customize, or administer the Services, perform business analyses, or other internal purposes to improve the quality of our business, the Services, resolve technical problems, or improve security or develop other products and services;
To comply with our Terms & Conditions;
For analytics for business purposes and business intelligence;
To comply with any applicable laws and regulations and respond to lawful requests; and/or
For any other purposes disclosed to you at the time we collect your Information and/or pursuant to your consent.

We may also use Information that has been de-identified, aggregated and statistical data for purposes not otherwise listed above. This may include combining information collected about your use of a product or service with other information we have about you, in accordance with the Law. We ensure that all identifiers are removed, so the data cannot be linked to any individual, either on its own or in combination with other available data.

B. Sharing or Disclosing Your Information

We may share and/or disclosure your Information as set forth in the Privacy Policy and in the following circumstances:

Third-Party Service Providers. We may share your Information with third-party service providers or data processors that perform certain functions or services on our behalf (such as to host the Services, to facilitate or establish a business relationship with us; store or manage the data, perform analyses, provide customer service, or send communications for us). These third-party service providers will process this data only for purposes specified by us. In some instances, we may aggregate Information we collect so third parties do not have access to your identifiable Information to identify you individually. Rich’s will not share or transfer your Information to third-party service providers except as permitted by applicable Law.
Disclosure of Information for Legal and Administrative Reasons. We may disclose your Information without notice: (i) when required to by law or to comply with a court order, subpoena, search warrant, or other legal process; (ii) to cooperate with or undertake an internal or external investigation or audit as required by the Law; (iii) to comply with legal, regulatory, or administrative requirements of governmental authorities (including, without limitation, requests from the governmental agency authorities to view your Information); (iv) (as long as permitted by the Law) to protect and defend the rights, property, or safety of us, our subsidiaries and affiliates and any of their officers, directors, employees, attorneys, agents, contractors and partners, and the website Service users; (v) to enforce or apply our Terms & Conditions; and (vi) to verify the identity of the user of our Services.
Business Transfers. Your Information may be transferred, sold, or otherwise conveyed to a third party (“Conveyances”) where we: (i) merge with or are acquired by another business entity; (ii) sell all or substantially all of our assets; (iii) are adjudicated bankrupt; or (iv) are liquidated or otherwise reorganize (“Corporate Actions”). We may also share Information with prospective purchasers to evaluate the proposed transaction. For those Corporate Actions, we will notify you of such Conveyances of your Information including our action plans, and you are allowed to exercise your right over your Information under the Law.
Information Shared with our Subsidiaries, Parents, and Affiliates. We may share your Information with our subsidiaries and affiliates. If you do not want us to share your Information with our subsidiaries and affiliates, please contact privacy@rich.com.
Aggregate and Deidentified Data. We may share general Information, aggregated data or publish information based on aggregated data. However, we will only do so in a way that your personal identity is protected.
Online Communications. Any Information you submit in a public forum (e.g., a blog or social network) may be read, collected, or used by us and other participants, and could be used to personalize your experience. You are responsible for the Information you choose to submit in these instances.
With Your Consent. We may share Information consistent with this Privacy Policy with your consent.

V. LINKS TO OTHER WEBSITES

Our Services may contain links to other websites or services that are not owned or controlled by us, including links to Social Media Platforms such as Facebook, Instagram, LinkedIn, or YouTube, or may redirect you off our website away from our Services.

VI. INFORMATION SECURITY

We use commercially reasonable measures to provide our Services. However, you should assume that no data transmitted over the Internet or stored or maintained by us or our third-party service providers can be 100% secure. Therefore, although we believe the measures implemented by us reduce the likelihood of security problems to a level appropriate to the type of data involved, we do not promise or guarantee, and you should not expect, that your Information or private communications will always remain private or secure. We do not guarantee that your Information will not be misused by third parties. We are not responsible for the circumvention of any privacy settings or security features. You agree that we will not have any liability for misuse, access, acquisition, deletion, or disclosure of your Information.

If you believe that your Information has been accessed or acquired by an unauthorized person, you shall promptly contact us via the How to Contact Us section so that we can quickly take necessary measures.

VII. DATA RETENTION

We will retain your Information for as long as needed to provide you Services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. We will retain and use your Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. In accordance with our routine record keeping, we may delete certain records that contain Information you have submitted to us. We are under no obligation to store such Information indefinitely and disclaim any liability arising out of, or related to, the destruction of such Information.

VIII. YOUR CHOICES

A. Marketing Communications. If you do not want to receive marketing and promotional emails from us, you may click on the “unsubscribe” link in the email to unsubscribe and opt out of marketing email communications to privacy@rich.com or see How to Contact Us below for more information.

B. WhatsApp Communications. If you choose to communicate with us through WhatsApp, such communications are facilitated through our WhatsApp Business feature. In using this feature, WhatsApp may access certain user Information, such as phone numbers, metadata (e.g., timestamps and interaction records), and other information necessary to facilitate communications. Rich’s has taken measures to ensure that data shared via WhatsApp is handled securely, including compliance with data protection standards and implementing safeguards to protect your Information. As a user, you are subject to WhatsApp’s Terms and Conditions. However, you have the right to request an opt-out from data processing or receiving communications via WhatsApp by contacting us via [*]. We will promptly process your request in accordance with the Law.

C. Opting Out of Direct Marketing by Third Parties. To exercise choices regarding the marketing information you receive, you may also review the following links:

You may opt out of tracking and receiving tailored advertisements on your mobile device by some mobile advertising companies and other similar entities by downloading the App Choices app at www.aboutads.info/appchoices.
You may opt out of receiving permissible targeted advertisements by using the NAI Opt-out tool available at http://optout.networkadvertising.org/?c=1 or visiting About Ads at http://optout.aboutads.info.
You can opt out of having your activity on our Services made available to Google Analytics by installing the Google Analytics opt-out add-on for your web browser by visiting: https://tools.google.com/dlpage/gaoptout for your web browser.

IX. EXERCISING YOUR RIGHTS

In accordance with the Law, you, or your legal representative if applicable, may exercise certain rights with respect to your Information through the corresponding request, which must be sent to the email address privacy@rich.com or directly at the physical address listed below.

Please note that we may request further information from you to ascertain your identity and nature of your request, as well as to process your request. Unless otherwise required or permitted by law, we will process your request within the period set forth in applicable law. Where permitted by applicable law and if we are unable to process your request within that timeframe, we will promptly notify you of the period within which we may be able to process your request.

A. Your Rights under the Law

Right to Access
1. You have the right to request access to the Information held by us.
2. To the extent permitted by law, we may also charge you a reasonable fee for the handling and processing of your request and, in such cases, we will provide you with an estimate of the cost in writing. To the extent permitted by law, we may not process your request unless you have agreed to pay such reasonable fees.
Right to Correct
1. You have the right to correct the Information we hold about you if it is inaccurate or incomplete. We will respond to your request within 3×24 hours, in accordance with the Law.
Right to Deletion
1. You have the right to request we delete Information held about you. We will respond to your request within 3×24 hours, in accordance with the Law.
Right to Withdraw Consent
1. You have the right to withdraw your consent to the collection, use and/or disclosure of your Information or withdraw your consent for us to process your Information. We will respond to your request within 3×24 hours, in accordance with the Law. In case the processing is based on consent and you withdraw your consent, we may promptly delete or anonymize your personal data without undue delay after the withdrawal unless there is a legal basis to retain the data.
2. The withdrawal of your consent may result in certain legal consequences arising from such withdrawal. In this context, depending on the extent to which the withdrawal of your consent affects us in processing Information, this may mean, without limitation, that we may not be able to fulfil a transaction in which you have entered into us or continued your relationship with us, or to transmit the information you have requested.
Removal of Content
1. You have the right to request we remove content or information that you have uploaded on public pages on some of our Services. We will respond to your request within 3×24 hours, in accordance with the Law.
2. Please note that although we will make every effort to comply with your request, the removal by us of your content or information does not guarantee a complete or comprehensive removal of such information from our Services. For example, a historical copy, or “cache” may still exist.
Right to Object to Certain Processing

You have the right to object to the processing of your Information if it is based on our legitimate interests, used for direct marketing purposes, or involves automated decision-making that significantly affects you. Upon receiving your objection, we will immediately cease processing your Information for the specified purposes in accordance with the Law.

B. How to Exercise Your Rights

To exercise any of the rights described above, please submit your request to us via the methods described below:

Email us: privacy@rich.com

Write us: Mahaka Square, Jl. Raya Kelapa Nias HF-3, Kelapa Gading 14240 North Jakarta

X. GEOGRAPHIC LOCATION OF DATA STORAGE AND PROCESSING

Rich’s may make international transfers of your Information to provide our products and Services using resources and servers located in various countries around the world. As a result, your Information may be transferred abroad where you use our Services, including to countries that do not have laws that provide specific protection for Information or that have different legal regulations on data protection, such as the United States. In such cases, Rich’s will work to confirm, as required by applicable law, that the recipient of the Information assumes the same obligations as those of Rich’s, either through contractual clauses or other legal instruments that provide for at least the same obligations to which Rich’s is subject transferring the Information, as well as the conditions under which the owner consented to the processing of their Information. By visiting our Services and submitting Information, you consent to this transfer of your Information.

XI. DIFFICULTY ACCESSING OUR PRIVACY POLICY

Individuals with disabilities who are unable to usefully access our Privacy Policy online may contact us to inquire how they can obtain a copy of our policy in another, more easily readable format.

XII. APPLICABLE LAW AND JURISDICTION

This Privacy Policy and the processing of your Information is governed by the Law and the other regulations of Indonesia. The Privacy Policy, which has been made available, implies an express acceptance, in writing, of the terms of the same and its express submission to the District Court of North Jakarta for any controversy or claim derived from it by which it is understood that it waives any other jurisdiction that by reason of domicile, present or future, may correspond to it.

XIII. CHANGES TO THIS PRIVACY POLICY

We reserve the right to change, modify, or amend this Privacy Policy at any time to reflect changes in our products and service offerings, accommodate new technologies, regulatory requirements, or other purposes. We will take steps to inform you before the update enters into force by appropriate means. If we modify our Privacy Policy, we will update the “Last Updated” date below and such changes will be effective upon posting.

Your continued use of our Services constitutes your acknowledgement and acceptance of such changes.

XIV. HOW TO CONTACT US

If you have any questions about this Privacy Policy or the Information, we have collected about you or would like to contact us, please contact us at the following:

Email: privacy@rich.com