Privacy Policy

1. Introduction & Data Controller

This Privacy Policy explains how Caventra ("we", "us") collects, uses, and protects personal data when you visit this website or use our services. Caventra acts as the data controller for the purposes of Indonesia's Law No. 27 of 2022 on Personal Data Protection ("PDP Law"). You can reach us at [email protected] or Jl. Iskandar Muda No. 96, Medan 20154.

2. What Data We Collect

We collect data you provide directly through our contact form (name, email, phone, message) and data collected through cookies, as described in our Cookie Policy. We do not collect sensitive personal data unless you choose to share it in a message.

3. Purposes and Legal Basis

4. Data Sharing & Third Parties

We do not sell personal data. Data may be shared with service providers strictly necessary to operate this site, subject to appropriate safeguards. We do not knowingly transfer data outside Indonesia except where a third-party tool used for site functionality requires it, and only with adequate protection in place.

5. Retention

We retain contact form submissions only as long as needed to respond to your enquiry and maintain a reasonable record of our engagement, after which the data is deleted or anonymised.

6. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, consistent with the requirements of the PDP Law.

7. Your Rights Under the PDP Law

Under Indonesia's PDP Law, you have the right to access, correct, and request deletion of your personal data, to withdraw consent, and to object to certain processing. To exercise these rights, contact us via the contact page or by email.

8. Opt-Out & Data Deletion

Providing your data through our contact form is always optional. You can disable non-essential cookies at any time through the cookie preferences panel. To request deletion of any data we hold about you, please contact us via the contact page.