Privacy Policy

Last updated: June 27, 2026, in accordance with Personal Data Protection Law (PDP) No. 27/2022

1. Information We Collect

We collect information you provide voluntarily, including:

  • Via the contact form: name, email, phone number, company name, message
  • Via newsletter signup: email, name (optional)
  • Via WhatsApp/direct communication: name, WhatsApp number
  • Automatic usage data: IP address, browser, pages visited, visit time (after you give consent via the consent banner)

Legal Basis: Your explicit consent via form/banner. Data is processed for business communication purposes under Article 4 letter h of the PDP Law.

2. How We Use Information

  • Respond to inquiries and provide consultation/demos
  • Send service communications (auto-reply, status updates)
  • Send marketing communications only with your consent (opt-in)
  • Analyze usage trends to improve our services
  • Legal compliance and fraud prevention

3. Data Storage & Retention

  • Leads (from form/WhatsApp): retained for up to 2 years or until marked "won/lost"
  • Subscribers (newsletter): retained until you unsubscribe or click "unsubscribe" in an email
  • Analytics data: automatically deleted per Plausible/GA4 retention policy (typically 90 days)
  • IP address: hashed when stored to prevent direct identification

4. Sharing Information

We do not sell, trade, or transfer your personal data to third parties without consent, except:

  • Email providers (Resend/Hostinger SMTP) to send communications, bound by security agreements
  • Analytics providers (Plausible/GA4), anonymized data
  • When ordered by a lawful authority

5. Your Rights (under the PDP Law)

You have the right to:

  • Access: request a copy of your personal data
  • Correction: update inaccurate data
  • Deletion: request deletion of data (within legal limits)
  • Withdrawal of Consent: unsubscribe from the newsletter or opt out of analytics at any time

Contact: privacy@include.co.id

6. Data Security

We use:

  • SSL/TLS encryption for data in transit
  • MySQL database on Hostinger with access control
  • Environment variables for sensitive credentials (never hardcoded)
  • Rate limiting on public APIs to prevent abuse
  • Honeypot + CSRF protection on forms to prevent spam

7. Consent Banner & Analytics

We show a consent banner the first time you visit. Your choice is stored in the iv-consent cookie. Analytics and ad pixels only activate after you choose "Agree" (Consent Mode v2).

8. Policy Changes

We may update this policy at any time. Significant changes will be announced by email to the address registered in our system.

9. Contact Us

Privacy questions:
Email: privacy@include.co.id
WhatsApp: +62 85 1711 10227