Privacy & Data Protection Policy

Compliance: Indonesian Personal Data Protection Law (UU PDP No. 27 of 2022)

Last updated: 14 October 2026. This notice explains how Innovation Exchange (“we”, “us”) handles personal data when you visit indonesianetwork.org or email our editorial desk. It reflects Indonesia’s Personal Data Protection Law No. 27 of 2022 (UU PDP) and Government Regulation No. 33 of 2026, which takes effect on 16 January 2027.

1. Who is responsible

Innovation Exchange, the operator of indonesianetwork.org, determines why and how the personal data described here is processed. For privacy requests, contact signal@indonesianetwork.org. The site is an editorial and public-information website; it does not provide betting accounts, user registration, comments, subscriptions, payment processing, or online gambling services.

2. Data we process and why

When your browser requests a page, the website’s hosting and security infrastructure may receive technical request data such as your IP address, request date and time, requested URL, referring page, browser and device information sent in request headers, response status, and security or error events. IP addresses and related identifiers can be personal data. We use this information to deliver pages, protect the site and network, investigate abuse, and diagnose technical problems.

If you email us, we process the email address and any name you provide, the message and attachments, and correspondence metadata so we can read and respond to your request, maintain the conversation, and protect our rights. Please do not send your NIK, passwords, payment credentials, health or biometric information, or other sensitive details unless they are strictly necessary to your request.

Where permitted by Article 20 of the UU PDP, the relevant legal bases are our legitimate interests in operating, securing, and maintaining an informational website and responding to correspondence; compliance with applicable legal obligations; and, where we specifically request it, your consent. We assess legitimate interests against the rights and reasonable expectations of individuals. We do not use this website to make decisions about you solely by automated means that produce legal or similarly significant effects.

3. Cookies, analytics, and advertising

At the date of this notice, the website’s own front-end code does not set cookies, use browser local or session storage, or include analytics or advertising pixels. Hosting or security providers may create server-side logs or use strictly necessary security measures to deliver and protect the site. If we add optional cookies, analytics, or advertising technologies, we will update this notice and obtain consent where required before using them.

4. Service providers and disclosures

Limited data may be handled by service providers that support website hosting, network delivery, domain or DNS management, security, or email. They may process data only as needed to provide those services and protect the infrastructure. We do not sell personal data or provide it to advertisers for behavioural advertising. We may disclose data when required by law or a valid legal process, or when reasonably necessary to establish, exercise, or defend legal claims and protect people or the site.

5. Processing outside Indonesia

Depending on the location of our infrastructure and service providers, technical data or correspondence may be processed outside Indonesia. If personal data is transferred across borders, we will apply the transfer requirements in Article 56 of the UU PDP, including the required level of protection, appropriate safeguards, or consent where applicable.

6. Retention

We keep technical logs only for as long as reasonably needed for site delivery, security, incident investigation, and troubleshooting. The period may depend on the configuration and retention settings of the relevant infrastructure provider. We keep email correspondence for as long as needed to respond, maintain necessary records, meet legal obligations, and establish or defend claims. Data is deleted or anonymised when it is no longer needed, unless a legal obligation or dispute requires longer retention.

7. Your rights

Subject to the UU PDP and its exceptions, you may request confirmation and access to your personal data and a copy; correction or completion; termination or restriction of processing; deletion or destruction; withdrawal of consent; portability where applicable; and an explanation or review of a decision based solely on automated processing that has a significant effect on you. You may also submit a claim or seek compensation where the law allows. Certain requests under the UU PDP have statutory response deadlines, including 3 × 24 hours for specified rights requests.

To make a request, email signal@indonesianetwork.org with “Privacy request” in the subject and enough detail for us to understand what you are asking about. We may request proportionate information to verify that you are the person concerned or are authorised to act for them; please do not send your NIK unless we explain why it is legally necessary. We will respond within the time and subject to the exceptions required by applicable law.

8. Children’s data

This website is not designed to collect personal data from children. We do not knowingly request children’s personal data. If you believe a child has sent us personal data, contact us at the address below so we can assess the request and take the steps required by the UU PDP, including involving a parent or legal guardian where required.

9. Security and personal data incidents

We use reasonable technical and organisational measures suited to the limited processing described in this notice. No website or email transmission can be guaranteed completely secure. If a personal data protection failure occurs, we will provide written notice to affected individuals and the relevant authority within the period and in the manner required by Article 46 of the UU PDP, including its 3 × 24-hour deadline where applicable.

10. External links and changes

Our articles may link to third-party websites. Those sites have their own operators and privacy practices, which we do not control; review their notices before sharing information with them. We may revise this notice when our processing or legal requirements change. The updated date above shows when the current version took effect. Where the law requires advance notice or consent for a material change, we will provide it.

11. Contact

For privacy questions or requests, email signal@indonesianetwork.org. This notice does not waive any rights or obligations that cannot be excluded under applicable law.