Privacy Policy
Layanika ("We", "Us", or "Our") respects your privacy and is committed to protecting it through compliance with this policy. Below you will find details regarding the information that will be collected during your use of our website (Layanika).
Users may be subject to different protection standards, and therefore broader standards may apply to certain users. To learn more about these protection criteria, users may refer to the section on the application of this policy.
This document can be printed as a reference by using the print command in the settings in any browser.
We may update this privacy policy from time to time to reflect technological changes and/or changes in legal regulations. We will communicate any such changes to you in an appropriate manner.
A. Definition
• Personal data
Means any information relating to an identified or identifiable person ("data subject"). A person is considered identifiable if he or she can be identified directly or indirectly, in particular through identifiers such as name, identification number, location data, online identifiers, or one or more factors relating to the physical, physiological, genetic, mental, economic, cultural, or social identity of the person. Possible identification can also occur through the incorporation of additional information or knowledge. The form or form of information has no effect (e.g. photos, videos, or audio recordings may contain personal data).
• Processing
Means any operation or series of operations carried out against personal data, whether automatically or not. This includes the collection (e.g. acquisition), recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure through transmission, dissemination or other forms of provision, alignment, merger, restriction, deletion, or destruction of personal data, as well as changes in the purpose or objectives on which the previous data processing was based.
• Usage Data
Information collected automatically through Layanika (or third-party services used on Layanika), which may include: the IP address or domain name of the computer used by the User using Layanika, the URI (Uniform Resource Identifier) address, the time of the request, the method used to make a request to the server, the size of the file received in response, a numerical code indicating the status of the server's response (successful result, errors, etc.), the country of origin, browser and operating system features used by the user, various details of the time per visit (e.g., time spent on each page within the Application) and details about the path followed within the application with particular reference to the order of pages visited, and other parameters about the operating system of the device and/or the user's IT environment.
- Users
The data subject who uses Layanika.
- Data Subject
A physical person who refers to such personal data.
- Data Controller ( Pengontrol Data)
A natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller, as described in this privacy policy.
- Services
The Services provided by Layanika as described in the relative terms (if available) and on this site/application.
- Indonesia (ID)
Unless otherwise specified, all references made in this document are to the current Economic Area of Indonesia.
B. General information about data processing
1. Data Controller
The controller under data protection legislation is the entity that decides on the purposes and means of processing personal data. We are responsible for the technical arrangement, administration and distribution of the website.
Please feel free to contact us if you have any questions about our privacy policy, the information we hold about you, or if you would like to exercise your privacy rights.
You can contact us at:
PT Mitra Aplikasi Digital
Ruko Permata Boulevard Blok BE
Jl Pos Pengumben Raya, Srengseng, Kembangan Jakarta Barat
Email: (email dev mad)
2. Data Processing
Legal Basis for the Processing of Personal Data
We process your personal data when you are a user of our website or our services. We only process data where we have a lawful basis to do so. We specify the legal basis in the relevant data processing sections; however, in general, we may process your personal data if one of the following conditions applies:
- The data subject has given his/her consent for one or more specific purposes. Note: Under some regulations, we may be permitted to process personal data until the data subject objected to such processing ("opt-out"), without having to rely on consent or other legal basis. However, this does not apply, whenever the processing of personal data is subject to European data protection law (please see the relevant section below);
- the provision of data is necessary for the performance of the agreement with the data subject and/or for any pre-contractual obligations there of;
- processing is necessary to comply with the legal obligations applicable to Layanika;
- processing in connection with tasks performed in the public interest or in the exercise of official authority granted to us;
- The processing is necessary for the purposes of legitimate interests pursued by us or by third parties.
3.Recipient, transfer to third country, third-party site links
Some data may be accessible to certain internal staff (such as administration, sales, marketing, legal, and IT) as well as external parties. We generally share data with hosting and cloud services, security tools, billing and payment providers, telecommunications providers, public authorities (upon legitimate request), financial institutions, accountants, auditors, and legal advisors.
We use third-party services to ensure that our website is functional, secure, visually appealing, and constantly optimized. Links to third-party websites may be provided; Please review their privacy policy before sharing personal data, as we are not responsible for the processing of their data.
Data may be processed outside of Indonesia only if legally permitted, such as with your consent, contractual needs, or in a country with an adequate level of data protection.
Please review each privacy policy before disclosing personal information to such data controller.
4.Data security
We use technical and organisational measures to protect personal data from accidental or unauthorised access, loss or manipulation. Our security is constantly updated, and we use TLS encryption to secure data transfers on our website.
5. Children
To use our website, users must be at least 16 years old. We do not knowingly collect personal information from children under the age of 16 and we do not allow anyone under the age of 16 to use the Site.
6.Automated decision-making
We do not use automated decision-making that has similar legal implications or significant impacts on you. However, we use profiling techniques to analyze user behavior to predict and improve the reach of content distributed through our services.
7.Storage period
In accordance with the reference to the ITE Law and its amendments, in Article 26 paragraph (1) of Law 19/2016 regulates the use of any information through electronic media concerning a person's personal data must be carried out with the consent of the person concerned unless otherwise specified by laws and regulations, we delete or limit the processing of data when the data is no longer needed for its original purpose. The server log file is deleted after 30 days. Data may be retained for longer than that period only if required for legal reasons or legal retention obligations, such as tax documentation and corporate law.
C. Collection and processing of User data when using our website
The data collected by Layanika is provided directly or indirectly by you. Such information may be collected automatically as long as users view our website.
Please feel free to contact us if you have any questions about our privacy policy, the information we hold about you, or if you would like to exercise your privacy rights.
We collect and process the following User data: This includes
- the date and time when you accessed any of our internet pages;
- your browser type;
- your browser settings;
- the operating system used;
- the last page you visited;
- the amount of data transferred and the access status (files transferred, files not found, etc.); and
- your IP address.
Additional information you provide via the contact form:
- first name and last name;
- company/website name;
- work email address;
phone number.
Informasi tambahan yang anda berikan selama pendaftaran akun:
- first name and last name;
- email;
- password;
- data communicated during the use of the service.
The data will be stored on our servers. However, we do not store this data together with any other personal data other than those mentioned above. The temporary storage of IP addresses by the system is necessary for the website to be delivered to your computer. We do not evaluate data personally, especially for marketing purposes.
Further information regarding each type of personal data collected is available in the relevant section of this privacy policy or through the special explanatory text displayed prior to data collection.
1. Social Login
You can use the Google Social Login service to log in to our platform as an alternative to creating an account in person. This login method results in an account that is functionally identical to the account created through manual registration. You'll have the same access, permissions, and user experience
You'll find the Google login option on the platform's sign-up or login page. When you select it, you will be redirected to the Google website where you can enter your login credentials.
Google will then share certain profile information with us. We only accept your name and email address. This allows us to identify you and create your account in our system. We never accept your Google password. If you choose to provide additional information, it will be linked to your account.
We use this service based on our legitimate interests in accordance with Law Number 1 of 2024 concerning Information and Electronic Transactions
You can also find out how to exercise your rights with Google here:
And information about the privacy policy here:
2. Security and performance
Hosting
Our website uses hosting and cloud services provided by ______________
Your data is processed and stored on ______ servers when you visit our website. This allows ______ to receive your IP address as well as information about your browser and system. In accordance with our legitimate interests, when you use Layanika'sservices, you entrust your data to us. This Privacy Policy explains the nature, scope, and purpose of the processing of personal data (hereinafter referred to as ‘data’) within our online offerings and the associated websites, features, and content, as well as our external online presence, such as our social media profiles (collectively referred to as the ‘online offerings’). With regard to the terms used, such as ‘personal data’ or ‘processing’, we refer to and comply with applicable Indonesian laws regarding personal data protection,data subjects, namely individuals whose data is collected and processed, are granted various rights to protect their personal information.
3.Contact, CRM
Depending on the content and purpose of the request, the processing of your personal data in the context of communication via telephone or email is carried out based on the data subject’s consent for informational requests, or based on the necessity to fulfill pre-contractual or contractual obligations. The processing of personal data protection and matters relating to electronic information and transactions is conducted in accordance with the applicable laws and regulations in the Republic of Indonesia. In all cases, you are deemed to have granted us consent to contact you in order to respond to such requests, provided that such consent has not been withdrawn by you in accordance with applicable laws and regulations.”
When you contact us via a form, we need the following data to respond to your request and so that we can personally address you and establish your request:
- Company name and related information
- First and last name
- Work email address
- Phone number.
Once processing has been completed, we will delete your contact request from our active systems immediately, unless legal permission (in particular your consent, which can be revoked at any time) or retention obligations require further storage.
We may store your contact data in a customer relationship management system ("CRM system") if there is a business relationship or if a business relationship can be estimated based on previous communications. Our legal basis is a legitimate interest, which is based on our economic interests to be able to systematically manage the contact data of customers and potential customers. If personal data is stored in a CRM system, it will be reviewed after two years at the end of each calendar year to determine if further storage is required. If it is not required, or if there are no other legal retention obligations, the data will be deleted.
4. Newsletter
Your personal data is used to send newsletters related to the services you have registered for by e-mail. We use third-party services to deliver such newsletters.
By signing up for a mailing list or newsletter, you must sign up using your e-mail address. To ensure that you explicitly agree to subscribe to our newsletter, we use a double opt-in process. After entering your e-mail address through our subscription form, you will receive an e-mail asking you to confirm your subscription. You must click on the confirmation link in the e-mail to complete the registration. If you do not confirm, you will not receive any newsletters from us.
Analysis of our newsletter campaigns is possible. Each time an email is opened, a file inside it (known as a web beacon) connects to our newsletter servers. This allows us to know if the newsletter has been opened and which links (if any) were clicked. Technical information is also recorded, such as retrieval time, IP address, browser type, and operating system. This information cannot be linked to a specific newsletter recipient. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of the analysis can be used to tailor future newsletters to be more relevant to the recipient's interests. If you do not want your data to be analyzed, you must unsubscribe from the newsletter. We provide a link to this in every newsletter message.
Your data will be stored and processed in the electronic system of the newsletter for the duration of your subscription. As our processing is based on your consent, this means that you have the right to withdraw consent at any time or object to the processing of data for newsletter delivery. If you do, we will immediately remove you from our newsletter distribution list. You can withdraw your consent by emailing us or following the instructions at the end of the promotional email/newsletter. If you send an email, please let us know what your revocation is about so we can process the request.
4. Media Sosial
Buttons for social media profile
Unless an explicit objection is stated, we process your data based on our legitimate interests in personal data Protection, for the purpose of improving content and making it more accessible for your convenience. Where cookies are used in the integration of social media content, such processing is carried out based on your consent, and you may withdraw such consent at any time, with effect for the future.
We also provide links to our presence on various social networks on our website. Integration is done through graphs linked on the respective network. This means that connections to such network servers do not automatically occur when our site is accessed; Users will only be redirected to that social networking service when clicking on the related graphic. If you click on a graph while you're logged into your social media account, the network operator may associate the information collected from that visit to your personal account. If you interact through the "Share" or "Like" button of that network, that information may be stored in your account and may be published. If you want to prevent the information from being directly associated with your user account, you must log out of your account before clicking on the associated graph or button.
We would like to emphasize that as a site provider, we have no knowledge of the content of the transmitted data or how it is used by the social media platform.
The data initially collected includes IP address, date, time, and pages visited.
a) Meta (before Facebook)
Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Kebijakan Privasi: https://www.facebook.com/about/privacy/
b) Instagram
Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Kebijakan Privasi: https://www.facebook.com/about/privacy/
c) Telegram
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Kebijakan Privasi: https://telegram.org/privacy/id
Cookies and integrated third-party offers
Our website uses cookie technology. Cookies are small text files that are sent to your browser by our web servers when you visit our site. These files are stored on your computer and can be retrieved at a later date. You can choose to allow cookies to be set and retrieved using your browser settings. For example, you can disable the storage of cookies completely, limit them to certain sites, or configure your browser to automatically notify you when cookies will be set and ask for your consent. You can delete cookies at any time through your browser's security settings. However, please note that this may affect the appearance of our website.
Unless otherwise stated, the processing described in this section is based on your consent, and you may withdraw this consent at any time with effect for the future.
Further information on how to withdraw your consent can be found in our cookie policy. The cookie policy can be found in the footer section of our website.
Cookie Consent Manager
Our website uses CookieYes consent technology to obtain your consent in the storage of certain cookies on your device or the use of certain technologies as well as to document them in accordance with data protection rules.
5.Statistics, Web-Analytics, Advertising based on Tracking and Retargeting – Use of Cookies
Sometimes, we or our partners use cookies or process your information in ways that require your consent. Cookies are small text files that may be stored on your device when you visit our website. Various technologies can be used for tracking, such as pixel technology or file log analysis. You give your consent via a cookie banner, which you must actively click. Unless otherwise stated, the processing described in this section is based on your consent. You may revoke your consent at any time with effect for the future. You can find out how to withdraw consent in our cookie settings.
Web-Analytics, Statistics
To find out which content of our website is most interesting to you, we conduct continuous measurement of the number of visitors and the most viewed content. Therefore, we process your personal data.
- to record the number of visitors to our website;
- to record the visit time of website visitors; and
- to record the order of visits to various websites and product pages, in order to optimize our website.
We also record the order of visits to various websites and product pages to optimize our website.
Web Analytics via Google Analytics 4
For the purposes of analysis and optimization of our website, we use the services of Google Analytics 4 (the service provider is Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA).
In Google Analytics 4, IP address anonymity is enabled by default. By anonymizing your IP on our site, your IP address will be shortened by Google within an EU member state or another signatory country to the Agreement in the European Economic Area. Only in exceptional cases will the full IP address be sent to Google's servers in the USA and shortened there. According to Google, the IP address sent by your browser as part of Google Analytics 4 will not be combined with other Google data.
The following data may be processed when you visit our website
- IP address (in abbreviated form, so it cannot be clearly identified);
- Approximate location (country and city);
- Technical information such as browser, internet provider, device, and screen resolution;
- Behavior on the page (page viewed, clicked, and scrolling behavior);
- The source of origin of the visit (through which the website or advertising medium the page was accessed);
- The duration of the session and whether the page is left without interaction;
- Add to favorites;
- Content sharing (social media);
- Clicked links to other websites;
- Achievement of a specific goal (conversion).
Google uses this information on our behalf to analyze your use of our websites, compile website activity reports for us, and provide other services related to website and internet usage. As part of the evaluation, Google Analytics 4 also uses artificial intelligence such as machine learning to automatically analyze and enrich data. More information can be found on the following website https://support.google.com/analytics/answer/10710245The analysis is carried out automatically with the help of artificial intelligence or based on certain criteria that are determined individually.
Google Analytics 4 stores cookies in your web browser for two years from your last visit. These cookies contain a randomly generated user ID that allows you to be recognized on your next visit to the website. The information collected by cookies about your use of our website (including your anonymized IP address) may be transferred to Google's servers in the USA and stored there under Google's responsibility. Only in exceptional cases will the full IP address be sent to Google's servers in the USA and shortened there.
The recorded data is stored by Google along with a randomly generated user ID, which is stored in a cookie on your device, thus enabling the evaluation of the pseudonymous user profile. This user-related data will be automatically deleted after 14 months.
We've implemented the following data protection settings for Google Analytics 4:
- Anonymization of IP addresses;
- Disable advertising functionality;
- Disable personalized advertising;
- Disable remarketing;
- Set a retention period of 2 months (without resetting the retention period when new activity occurs);
- Disable cross-device and cross-page tracking (Google Signals);
- Disable data sharing (specifically for Google products and services, benchmarking, technical support, and account specialists).
More information about Google Analytics 4 can be found on the following pages:
https://policies.google.com/privacy?hl=de,
terem of use in https://marketingplatform.google.com/about/analytics/terms/de/
and https://support.google.com/analytics/answer/6004245?hl=de.
Further information about the cookies used by Google Analytics 4 can also be found at:
https://support.google.com/analytics/answer/11397207?hl=de
Google Analytics 4 uses a special “demographic characteristics” feature to compile statistics related to the age, gender, and interests of site visitors. This is done by analyzing advertisements and information from third-party providers. The feature allows the identification of target groups for marketing activities. However, the data collected cannot be attributed to a specific individual and will be deleted after being stored for a period of two months.
6. Chat Widget
We provide a chat widget on our website to give you the opportunity to communicate with us quickly and easily and receive information about our products and services.
When you interact with the chat widget, we process the personal data you provide, such as:
- Name
- Other contact details
- Order
- Chat history
In addition, chat widgets can collect your IP address, log files, location information, and other metadata. We may also store information about who uses the chat widget and when, including the content of the conversation as well as records of registration and consent processes for legal compliance purposes.
The data collected through the chatbot will only be used to process your request and will not be shared with third parties without your explicit consent. Data will only be stored for as long as necessary to process your request or for as long as there is a legal retention obligation.
7. Payment Services
We use payment service providers to process your transactions when purchasing services from us. This is done on the basis of our contractual obligations relating to the processing of data for the performance of the contract. If a credit check is performed, this is carried out on the basis of our legitimate interests, which relate to the processing of data for the legitimate interests of the data controller. We prioritize the protection of your personal data and ensure that all processing activities comply with relevant legal requirements. We use Xendit Tech Company Limited (Victoria Building, Jl. Sultan Hasanudin No.47-51, Melawai, Kec. Baru, South Jakarta City, Jakarta Special Capital Region 12160) to process payments. If you use Xendit to make purchases or payments on our site, you will provide them with your personal data.
When you make payments using Stripe, the following personal data may be collected and processed: your name, email address, billing and shipping address, payment information (e.g. credit card number, expiration date, CVV), and transaction details. Data is used to process your payments, verify identity, prevent fraud, and meet legal obligations. We do not share your payment information with third parties, except to process payments through your chosen Payment Provider.
Xendit may share your data with their affiliated companies and service providers as described in Xendit's privacy policy. Xendit uses industry security standards to protect your personal data during the transaction process. We also take appropriate steps to ensure the security of your data in our systems. You have the right to access, correct and delete your personal data stored by Xendit. To exercise this right, you must contact Xendit directly.
More information can be found at https://www.xendit.co/en/privacy-policy/
8.Partner Referral Links
We also use partner referral links. If you click on one of these links and purchase a product, our partners will receive a commission from us. This means that we need to be able to identify you, verify that you access the product through our partner ad links, and ensure that you make your next transaction. For these purposes, we and our partners use cookies or similar recognition technologies (e.g., device fingerprinting) on our websites.
Categories of Personal Information Processed
To find out what categories of personal information are processed, you can read the section entitled "Detailed information about the processing of Personal Data" in this document.
Why We Process Your Personal Information
To find out why we process your personal information, you can read the sections entitled "Detailed information about the processing of Personal Data" and "Purposes of processing" in this document.
How to Submit Your Request
You may make an explicit request to exercise your rights at no cost, at any time, by using the contact details provided in this document, or through your legal representative.
How and when we will respond to your Request
We will endeavour to respond promptly to your request.
If in certain circumstances we are unable to do so, we will make sure to communicate to you the factual or legal reasons that prevent us from immediately, or even forever, complying with your request. If we do not process your personal information, we will notify you of the physical or legal party to whom you should make the request, if we are in a position to do so.
If you are submitting a request for confirmation of the processing of personal information or an access request, please make sure you mention whether you want your personal information provided in electronic or printed form.
You will also need to let us know if you would like us to respond to your request directly, which we will answer simply, or if you require full disclosure.
In the case of a request for full disclosure, we will respond within 15 days of your request, providing all information regarding the origin of your personal information, confirmation of whether or not records exist, any criteria used for processing as well as the purposes of the processing, while maintaining our trade and industry secrets.
If you make a request for correction, deletion, anonymization, or blocking of your personal informationwe will promptly forward your request to another party who has received your personal information, so that the third party can also fulfill your request — unless the communication proves to be impossible or requires an imreasonable effort on our part.
Last update: ___ ____ 2026
