Last Updated: 12 March 2025

GALERI PRIVACY POLICY

1. Introduction

   1. Welcome to Galeri. We respect your privacy and are committed to protecting your personal data in accordance with Indonesia’s Personal Data Protection Law (UU PDP 2022). This Privacy Policy outlines how we collect, use, and safeguard your information.

2. Data We Collect

   1. We may collect the following personal data:

      • Name and email address
      • Transaction history and payment details (excluding sensitive financial data)
      • Usage data, device information, and IP address
      • Other relevant information required for service delivery

3. How We Use Your Data

   1. We use your data for the following purposes:

      • Providing and improving our services
      • Processing transactions and payments via Xendit
      • Personalizing user experience
      • Complying with legal obligations under UU PDP 2022

4. Legal Basis for Processing Data

   1. In accordance with UU PDP 2022, we process personal data based on:

      • Your explicit consent
      • The necessity of data processing for contractual obligations
      • Compliance with legal and regulatory requirements

5. Data Retention

   1. We store your personal data only as long as necessary to fulfill the purposes outlined in this policy. Once no longer needed, data will be securely deleted or anonymized.

6. Data Security

   1. We implement strict security measures, including encryption, access controls, and secure data storage, to protect your personal data from unauthorized access, loss, or misuse. Our data is hosted on AWS servers located in Indonesia.

7. Data Location & Compliance

   1. All personal data collected is stored and processed exclusively on AWS servers located in Indonesia, ensuring full compliance with UU PDP 2022.

8. Data Sharing and Third Parties

   1. We do not sell or rent your data. However, we may share data with trusted third-party service providers, including:

      • AWS for cloud hosting and data storage
      • Xendit for payment processing

   2. Any data shared will comply with UU PDP 2022 and will be subject to strict security measures.

9. Cookies & Tracking Technologies

   1. We use cookies and similar tracking technologies for the following purposes:

      • Authentication & Security: To maintain your login session securely.
      • User Preferences: To remember your settings and preferences.
      • Analytics & Performance: To monitor site performance and improve user experience.

   2. You can manage your cookie preferences through your browser settings. Disabling cookies may affect your ability to use certain features of our services.

10. Your Rights

    1. Under UU PDP 2022, you have the right to:
       • Access, update, or delete your personal data
       • Withdraw consent for data processing
       • Request an explanation of how your data is used
       • Lodge a complaint with Kominfo (Ministry of Communication and Information Technology) if you believe your rights have been violated

11. Data Breach Notification

    1. In the event of a data breach, we will notify affected users and relevant authorities as required by UU PDP 2022. We will take immediate steps to mitigate any potential risks.

12. Children’s Privacy

    1. Our services are not intended for individuals under 18 years old. We do not knowingly collect personal data from minors. If we become aware of such data collection, we will take appropriate steps to delete it.

13. Updates to This Privacy Policy

    1. We may update this Privacy Policy from time to time to comply with legal requirements and improve transparency. We will notify users of significant changes through email or in-app notifications.

14. Contact Us

    1. If you have any questions or concerns about this Privacy Policy, you may contact us at:
       • Email: info@galeri.art