Privacy Policy
Last updated: April 17, 2026
BeresinAja committed to protecting the privacy and security of your personal data. This policy explains transparently how we collect, use, store and protect your information when using our services at beresinaja.net. This policy refers to Law Number 27 of 2022 concerning Personal Data Protection (UU PDP) Republic of Indonesia.
Table of Contents
1. Introduction
This Privacy Policy applies to all visitors and users of the website beresinaja.net as well as services provided by BeresinAja — MSME website creation service business operating in Bandung, West Java, Indonesia.
By accessing our website, filling out the contact form, or placing an order for services, you acknowledge that you have read, understand and agree to this policy. If you do not agree, please stop using our services.
2. Data We Collect
We collect the following three categories of data:
a. Personal Data
- Full name — for communications and order documents
- Email address — for project confirmation and coordination
- Mobile/WhatsApp number — for coordination of work and notifications
- Business/enterprise name — as a reference for the branding of the website that will be created
- Orders/requirements — the project description you submitted via the form
b. Payment Data
Payment is made via bank transfer or e-wallet. BeresinAja does not process or store your card data or payment instrument details. The only data we store is: payment records (nominal, date, status) and proof of transfer that you send via WhatsApp.
c. Usage Data
- Pages visited and duration of visit (via Google Analytics)
- Device type, browser, and operating system
- IP Address (anonymized by Google Analytics)
- Traffic source (direct, organic search, referral, social media)
3. How We Collect Data
We collect your data through four mechanisms:
- 01
Contact Form
When you fill out a free consultation or inquiry form on our website. Filling out is voluntary — you only provide the necessary information.
- 02
Order Process
When you order a service and make a down payment via bank transfer or e-wallet. We keep records of payments and proof of transfers that you send via WhatsApp.
- 03
Cookies and Local Storage
We use cookies for session authentication and Google Analytics to understand website usage. Details in Section 6.
- 04
Automated Analytics
Google Analytics 4 (GA4) and Google Tag Manager (GTM) collect usage behavior data anonymously as you browse the website.
4. Purpose of Data Use
We use your data only for lawful and relevant purposes:
Communication & Consultation
Answer questions, follow up on requests, and coordinate while working on your website.
Order Processing
Manage service orders, process payments, and ensure on-time project delivery.
Service Improvement
Analyze usage patterns to improve website performance, content and experience.
Marketing Communications
Send deals or tips — only if you give explicit consent. You can stop at any time.
Legal Obligations
Comply with tax regulations, financial reporting and other legal obligations in Indonesia.
System Security
Detect and prevent fraud, unauthorized access, or misuse of the service.
5. Data Storage and Security
Your data is stored in a database PostgreSQL which is located at servers in Indonesia. We implement multiple security measures:
Data encryption: All communications between your browser and our servers are protected by HTTPS/TLS protocols.
Hashing passwords: Passwords are encrypted using bcrypt — we never store passwords in plain text.
Rate limiting: API endpoints are protected by request rate limiting to prevent brute force and DDoS.
Input validation: All incoming data is validated using Zod to prevent malicious injection and input.
Limited access: Only authorized BeresinAja personnel can access your data, according to the principle of least privilege.
Cloudflare Protection: The website is protected by Cloudflare CDN which provides an additional layer of security against cyber threats.
Although we have implemented the best security measures, no system is 100% secure. If an incident occurs that impacts your data, we will notify you in accordance with our PDP Act obligations.
7. Sharing Data with Third Parties
We DO NOT sell, rent or trade your personal data to any third party.
Your data is only shared with the following partners in the limited capacity necessary to perform the service:
Cloudflare, Inc.
CDN and SecurityIP address and HTTP request data for DDoS protection and content acceleration.
Cloudflare Privacy Policy→Google (Analytics & Tag Manager)
Website AnalyticsAnonymized usage behavior data for website analysis.
Google Privacy Policy→In legally required situations (e.g. court order or official law enforcement request), we may disclose your data in accordance with applicable obligations.
8. User Rights
In accordance with PDP Law no. 27 of 2022, you have the following rights over your personal data:
Access Rights
Request a copy of the personal data we hold about you.
Correction Rights
Request an update if your data is inaccurate or incomplete.
Right of Erasure
Request deletion of your personal data, as long as it does not conflict with legal obligations.
Portability Rights
Request your data in a machine-readable format for transfer to another party.
Right to Object
Object to data processing for direct marketing purposes at any time.
Right to Withdraw Consent
Withdraw the consent that has been given. Revocation does not apply retroactively.
To make a request, contact us via contact in Section 11. We will respond within maximum 3 working days and may require identity verification before processing your request.
9. Data Retention
We retain your data only as long as necessary for the purposes described in this policy:
Contact data & messages
Stored for 2 years since the last interaction, for service follow-up purposes.
Order & transaction data
Stored for 5 years in accordance with Indonesian tax bookkeeping obligations.
Form & preview lead data
Stored for 2 years since last contact, then deleted or anonymized.
Data analytics
Stored for 14 months as per Google Analytics 4 default retention settings.
Security logs
Stored for 90 days for security incident investigations.
Once the retention period ends, the data is permanently deleted or anonymized so that it cannot be re-associated with your identity.
10. Policy Changes
We reserve the right to update this Privacy Policy at any time to reflect changes in services, technology or applicable regulations.
If material changes occur, we will provide notification via:
- Announcement on the main page of beresinaja.net
- Notification email to users whose data we process (if relevant)
- Update “Last updated” date at the top of this page
Use of the service after changes are published is deemed to constitute agreement to the updated policy. We recommend that you review this page periodically.
11. Contact
For questions, complaints or requests regarding your data privacy, contact us:
Business
BeresinAja
Bandung, West Java, Indonesia
Response time: 1–3 business days.
This Privacy Policy is effective as of . Previous versions are available upon request.