PT Tunas Kreasi Digital ("Looyal One", "we", "us", or "our") operates the Looyal One Business Operating System platform and website. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our website, services, and applications.
We are committed to protecting your personal data in accordance with applicable privacy laws, including the Indonesian Personal Data Protection Law (UU No. 27/2022 tentang Perlindungan Data Pribadi or "UU PDP"), the General Data Protection Regulation ("GDPR"), and other globally recognized privacy standards.
1. Information We Collect
We collect information to provide better services to our users. The categories of information we collect include:
- Account Data: Personal identification details such as name, corporate email address, telephone number, business address, and authentication credentials when registering or using our private cloud modules.
- Customer & Transactional Data: Business operational data processed within our CRM, POS, HRIS, and Document management systems on your private cloud instance.
- Technical & Usage Data: IP addresses, browser types, operating systems, access logs, and performance metrics collected via our hosted telemetry.
- Cookies & Tracking: We use essential cookies to maintain sessions and verify user authentication states. Non-essential tracking is disabled by default.
2. Legal Bases and Use of Information
We process your personal data under the following legal bases:
- Performance of a Contract: To provision, configure, and maintain your dedicated private cloud servers and applications.
- Consent: When you voluntarily request product demonstrations, newsletters, or submit sales inquiries.
- Legal Obligations: To comply with regulatory financial audits, security standards, and local law enforcement warrants in jurisdictions where we operate.
3. Data Autonomy and Private Cloud Hosting
Looyal One operates on a modular private cloud architecture. Unlike traditional multi-tenant SaaS providers:
- All operational business data (customer logs, financial statements, employee rosters, document attachments) is hosted inside your dedicated private cloud instance (AWS, Google Cloud, Alibaba Cloud, or on-premise infrastructure).
- PT Tunas Kreasi Digital does not have direct access to your private cloud storage keys unless explicitly granted by your administrator for support or troubleshooting purposes.
4. Data Sharing and Disclosures
We do not sell, trade, or rent your corporate or personal data. We only share information with:
- Third-Party Infrastructure Providers: Hosting companies where your private cloud environment is provisioned (e.g., AWS, GCP) solely to maintain service uptime.
- Legal Compliance: When required to fulfill applicable laws, regulations, or enforceable government requests under Indonesian law.
5. International Data Transfers
Personal data collected by us may be stored and processed in Indonesia, Singapore, Hong Kong, or any other country where our infrastructure partners maintain facilities. By using our services, you consent to any such transfer of information outside of your country.
6. Security of Your Data
We implement robust administrative, technical, and physical security measures to protect your data, including TLS 1.3 encryption in transit, AES-256 encryption at rest, and regular automated vulnerability scans. However, no electronic transmission over the internet or storage technology can be guaranteed 100% secure.
7. Your Privacy Rights
Under the Indonesian UU PDP and GDPR, you have the right to:
- Access, update, or correct your personal data.
- Request deletion or restriction of processing of your data.
- Withdraw consent at any time for promotional correspondences.
- Request portability of your personal data.
To exercise these rights, please contact our Data Protection Officer at legal@looyal.one.
8. Changes to this Policy
We reserve the right to modify this Privacy Policy at any time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.