Triple-E Privacy Statement

1. Information We Collect

Personal data processed may include general personal data and, where applicable, specific/sensitive personal data as defined under Indonesian law. We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, postal address.
• Usage Data: Information about how you use our website, including pages visited, links clicked, and browsing behavior.
• Technical Data: IP address, browser type, operating system, device information.
• Information Provided in Inquiries: Details you provide when contacting us through forms, email, or phone.
• Other Information: Any other personal information you voluntarily provide to us.

2. How We Use Your Information

We may use your personal information for the following purposes:

• To respond to your inquiries and provide you with information or services you request.
• To personalize your experience on our website.
• To improve our website and services.
• To send you relevant updates, newsletters, and marketing communications (where you have provided consent or as permitted by law).
• To analyze website usage and trends.
• For internal administrative purposes.
• To comply with legal obligations.

3. Legal Basis

We process personal data based on one or more lawful grounds, including consent, contractual necessity, legal obligations, and legitimate interests in accordance with applicable laws including Indonesian Personal Data Protection Law.

4. How We Share Your Information

We may share your personal information with:

• Trusted Third-Party Service Providers: Companies that provide services to us, such as website hosting, data analysis, email marketing, and customer support. These providers are contractually obligated to protect your information.
• Legal Authorities: When required by law or legal process.
• In Connection with Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets.
• We do not sell your personal information to third parties.

5. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal data:

• Right to Access: You may request access to the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal information.
• Right to Restriction of Processing: Request limitation on processing your data.
• Right to Data Portability: Receive your data in machine-readable format.
• Right to Object: Object to processing in certain circumstances.
• Right to Withdraw Consent: Revoke consent at any time.
• Right to Lodge a Complaint: File a complaint with data protection authorities.

To exercise these rights, contact us using the information below. Identity verification may be required.

6. Data Security

We implement technical and organizational measures to protect your information. However, no internet transmission or electronic storage is completely secure.

7. Data Retention and Erasure

We retain personal information as needed for stated purposes or as required by law. Customer data (name, email, phone, company) is deleted after 3 years from last engagement.

Anonymized/aggregated data may be retained longer for analytics.

8. Breach Response

In the event of a personal data breach, TRIPLE-E will take immediate steps to identify, contain, and mitigate the impact of the breach. A personal data breach refers to any unauthorized access, disclosure, alteration, loss, or destruction of personal data.

• Incident Identification & Response: We will promptly investigate any suspected or confirmed data breach and take necessary corrective actions to prevent further impact.
• Notification to Data Subjects: If the breach has the potential to result in harm to individuals, we will notify affected data subjects no later than 3 x 24 hours (72 hours) after becoming aware of the breach.
• Mitigation Measures: We will take appropriate technical and organizational measures to minimize risks, including system isolation, access restriction, and recovery procedures.

9. Links to Other Websites

Our website may contain third-party links. We are not responsible for their privacy practices. Review privacy statements of any sites you visit.

10. Changes to this Privacy Statement

We may update this statement periodically. Changes will be posted here with an updated “Last Updated” date. Review this statement regularly.