Privacy Policy
1. Introduction
This Privacy Policy describes how Halberg ("we", "us", "our") collects, uses, and retains personal data when you visit our website at halberg.info ("the Website") or interact with our services. We are committed to handling personal data with care, transparency, and in accordance with applicable Indonesian data protection regulations, including Law No. 27 of 2022 on Personal Data Protection (PDP Law).
By using this Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Website.
Halberg is the data controller for personal data collected through this Website. Our contact address for data-related queries is: Jl. Mega Kuningan No. 41, 12950 Jakarta, Indonesia. Email: [email protected].
2. Data We Collect
We collect the following categories of personal data:
When you submit a contact form on this Website, we collect your name, email address, and the content of your message. If you select "Batch record request" as a subject, we may also collect the lot number you provide.
We collect standard browser and server log data when you visit the Website. This includes your IP address (anonymised after processing), browser type and version, pages visited, time and date of visit, and referring URL. This data is used for Website analytics and security purposes only.
We use cookies as described in our Cookie Policy. Cookie data may include session identifiers and preference settings. See the Cookie Policy for full details of the cookies used and how to manage them.
If you place an order for Halberg products, we collect the information necessary to process and fulfil your order, including name, delivery address, email address, and payment confirmation reference. Payment card details are processed by our payment provider and are not stored by Halberg.
3. Legal Basis and Purpose of Processing
We process personal data on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Responding to contact form enquiries | Legitimate interest / contractual necessity |
| Processing and fulfilling orders | Contractual necessity |
| Website analytics and security | Legitimate interest |
| Cookie-based preference storage | Consent |
| Compliance with legal obligations | Legal obligation |
4. Data Retention
Contact form submissions are retained for a period of twenty-four (24) months from the date of submission, after which they are deleted unless an ongoing correspondence or order relationship requires longer retention.
Order data is retained for the period required by Indonesian accounting and tax regulations, currently five (5) years from the date of transaction.
Usage and server log data is retained in identifiable form for a maximum of ninety (90) days, after which it is anonymised or deleted.
We do not retain personal data for longer than is necessary for the purpose for which it was collected.
5. Third-Party Services
The Website uses a limited number of third-party services. These services may process data in connection with their standard operation:
- Web hosting and infrastructure provider — processes server logs and connection data.
- Analytics service (anonymised usage data only) — no personally identifiable visitor profiles are maintained.
- Payment processing provider — handles payment transactions. Halberg does not receive or store payment card details.
- Google Maps (contact page embed) — subject to Google's own privacy terms when the map is interacted with.
We do not sell personal data to third parties. We do not share personal data with third parties for marketing purposes.
6. Your Rights
Under the Indonesian Personal Data Protection Law (UU PDP), you hold the following rights in relation to personal data we hold about you:
- Right of access: you may request a copy of personal data we hold about you.
- Right of correction: you may request correction of inaccurate or incomplete data.
- Right of deletion: you may request deletion of personal data we hold, subject to any retention obligations that apply.
- Right to withdraw consent: where processing is based on consent (such as non-essential cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing.
- Right to object: you may object to processing based on legitimate interest where you have grounds relating to your particular situation.
To exercise any right, contact us at [email protected] with the subject line "Data Rights Request". We will respond within the timeframes required by applicable law.
7. Contact and Updates
For any question about this Privacy Policy or the personal data we hold, please contact: [email protected] or write to Jl. Mega Kuningan No. 41, 12950 Jakarta, Indonesia.
This Privacy Policy may be updated from time to time to reflect changes in our practices or applicable law. The revision date at the top of this document will be updated when changes are made. Continued use of the Website after a revised policy is posted constitutes acceptance of those changes.
Halberg products are nutritional food-supplements registered with the applicable local regulatory authority under food-supplement classification. Products meet compositional and labelling requirements for nutritional supplement categories. This Privacy Policy relates solely to website and order data, not to product composition.