LEGAL

Privacy Policy

Last updated: 22 September 2026

This policy explains what personal data PT Mandala Teknologi Persada collects through this website, why we collect it, how long we keep it, and the rights you have over it.

In short

We collect what you send us through the contact form, plus standard technical server logs.
We do not run third-party advertising or analytics trackers, and we do not sell or rent personal data.
We process personal data in line with Indonesia's Personal Data Protection Law (UU No. 27 of 2022).
Systems we deliver for clients can run entirely inside their own infrastructure, so their operational data never reaches us.
You can ask to see, correct or delete your data at any time by writing to us.

Who we are

PT Mandala Teknologi Persada ("MTP", "we", "us") is the data controller for the processing described in this policy. We are a technology company based in Indonesia that designs, builds and operates AI systems for organisations.

This policy covers this website and any enquiry you send us through it. It does not cover the platforms and services we deliver under a separate agreement, where the client is the data controller and we act as a processor under their instructions.

What we collect

We keep collection deliberately small. There are two sources.

What you give us — the name, organisation, email address, area of interest and message you enter in the contact form, and any details you add when you reply to us.
What the server records — the technical data any web server logs: IP address, browser user agent, requested URL and timestamp. These logs exist to keep the site secure and available.
Language preference — if your browser or our site remembers that you read the site in Bahasa Indonesia or English, that preference is stored in your browser, not used to build a profile of you.

What we do not do

We do not run third-party advertising or behavioural analytics trackers on this site, and we do not embed social or advertising pixels.
We do not sell, rent or trade personal data.
We do not use your enquiry to send marketing you did not ask for.
We do not profile you, and we do not make automated decisions with legal effect about you.

Why we process it, and on what basis

Under Indonesia's Personal Data Protection Law (UU No. 27 of 2022, "PDP Law") we rely on the following bases:

Your consent — when you submit the contact form, you are asking us to respond to you.
Legitimate interests — keeping the site secure, preventing abuse, and understanding at aggregate level how the site is used.
Performance of a contract — where we are evaluating or performing work for your organisation.
Legal obligation — where we are required to retain or disclose information by law.

How we use it

To answer your enquiry and arrange a briefing, demo or technical discussion.
To follow up on a commercial conversation you started.
To keep the website secure and stable, and to investigate misuse.
To meet accounting, tax and other legal obligations that apply to us.

Cookies and similar technologies

This site does not set advertising, tracking or third-party analytics cookies. If a language preference is remembered, it is stored locally in your browser and you can clear it at any time through your browser settings. Blocking it does not prevent you from using the site.

Sharing your data

We do not sell personal data. Access inside MTP is limited to the people who need it to answer you.

Service providers — email or infrastructure providers may process data on our instructions and under confidentiality obligations.
Professional advisers — where necessary for accounting, audit or legal advice.
Authorities — only where we are legally required to disclose, and only to the extent required.

How long we keep it

Enquiries — as long as needed to deal with your request and the relationship that follows, then for a limited administrative period (currently up to 24 months) unless the law requires longer.
Server logs — a short, rolling period (currently up to 90 days) for security and troubleshooting.
Contractual records — for the period required by Indonesian accounting and tax rules.

How we protect it

Traffic to this site is encrypted in transit (HTTPS with HSTS).
Access to systems holding enquiry data is restricted to named personnel and protected by authentication.
Environments are separated, and access is logged.
Self-hosted and on-premise delivery is our default for client work: platforms can run entirely inside the client's own network, so operational data never leaves their environment.

International transfers

We prefer to keep processing inside Indonesia. Where a transfer outside Indonesia is necessary, we require a level of protection equivalent to that required by the PDP Law before the transfer takes place.

Your rights

Subject to the conditions in the PDP Law, you may exercise the following rights over your personal data:

Access — to know whether we process your data and to receive a copy of it.
Correction — to have inaccurate or incomplete data put right.
Erasure — to have data deleted where we no longer have a lawful reason to keep it.
Restriction and objection — to limit or object to certain processing, including processing based on consent or legitimate interests.
Withdrawal of consent — at any time, without affecting processing already carried out lawfully.
Portability — to receive your data in a commonly used format where technically feasible.
Complaint — to lodge a complaint with the supervisory authority for personal data protection in Indonesia, and to seek compensation where the law provides for it.

Children

Our services are aimed at organisations and working professionals. We do not knowingly collect personal data from anyone under 18 through this site. If you believe we have, contact us and we will delete it.

Changes to this policy

We may update this policy as our practice or the law changes. The date at the top of this page always shows the current version. Where a change materially affects you, we will make that clear on this page.

How to reach us

To exercise any of the rights above, or to ask a question about this policy, write to hello@mandalateknologi.com or use the contact form. We will respond as soon as we can and, where the PDP Law sets a deadline, within it.

If you are a client and your question concerns data processed inside your own environment under your instructions, please raise it with your MTP technical contact first — in those engagements you are the controller, and we act on your instructions.

Questions about your data?

Write to us and we will answer, or use the contact form.