Privacy Policy

PT Karsa Nutrisi Nusantara ("Company", "we", "us") is the personal data controller responsible for the website KarsaPria.

• Company Name: PT Karsa Nutrisi Nusantara
• Address: Jl. Ir. H. Juanda No. 108, Lebakgede, Kec. Coblong, Kota Bandung, Jawa Barat 40132
• Privacy Email: Compliance Desk (Inquiry Form)
• Phone: +62 22 2534 8910

We collect two categories of data:

A. Data you provide actively:

• Name and email address (via contact forms or newsletter subscription)
• Content of messages you send to us
• Communication preferences you set

B. Data collected automatically:

• IP address (anonymized after 24 hours)
• Browser type and operating system
• Pages visited and duration of visit
• Referral source (where you came from to our site)
• Cookies and session data (see Section 6)

• Responding to messages and inquiries you submit through the contact form
• Sending newsletters if you subscribe (with explicit consent, can be unsubscribed at any time)
• Analyzing site usage to improve content quality and user experience
• Displaying contextual ads that are relevant (only with consent for advertising cookies)
• Complying with legal obligations applicable in Indonesia

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

• Consent: For newsletters, non-essential cookies, and marketing communications
• Performance of a Contract: To respond to service inquiries and editorial correspondence
• Legitimate Interests: For site security analysis and abuse prevention
• Legal Obligation: When requested by competent authorities in accordance with Indonesian law

We may share data with the following categories of third parties, subject to appropriate safeguards:

• Analytics service providers (e.g., Google Analytics — data is anonymized prior to transmission)
• Email service providers for delivering newsletters and notifications
• Hosting and technical infrastructure providers for the site
• Advertising networks (only if you consent to advertising cookies)
• Legal authorities if required by court order or applicable regulation

All third-party partners are required to adhere to equivalent data security standards and are not permitted to use your data for any other purpose.

We use cookies in three categories:

You can manage cookie preferences at any time through your browser settings or via the cookie banner on this site.

• Contact form data: Deleted 24 months after the last correspondence
• Analytics data: Anonymized after 26 months (standard Google Analytics retention)
• Newsletter data: Retained for the duration of active subscription + 6 months after unsubscribing
• Server logs: Deleted after 90 days

We implement technical and organizational measures to safeguard your data, including:

• Data transmission encryption using TLS/SSL (HTTPS)
• Personal data access restricted strictly to authorized personnel
• Regular system security updates and patching
• Annual security risk assessments

However, no method of transmission over the Internet is 100% secure. We will notify you within 14 business days should a significant data breach occur.

In accordance with Indonesia's PDP Law and GDPR principles, you have the right to:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request the deletion of your data ("right to be forgotten")
• Right to Restriction: Restrict the processing of your data under certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: At any time, without affecting the lawfulness of processing prior to withdrawal

To exercise these rights, please send a request to Compliance Desk (Inquiry Form). We will respond within 30 calendar days.

Some of our service partners (analytics, email providers) may store data on servers located outside Indonesia. In such cases, we ensure equivalent protection through appropriate contractual clauses and by selecting partners subject to internationally recognized data protection frameworks.

KarsaPria services are intended for adult men aged 18 and older. We do not knowingly collect personal data from children under the age of 18. If you become aware that your child has provided us with personal data, please contact Compliance Desk (Inquiry Form) and we will promptly delete such data.

We may update this policy from time to time. Material changes will be communicated via a banner on the site's homepage at least 14 days before taking effect. The "Last updated" date at the top of this page will always reflect the current version.

For questions, concerns, or privacy-related requests:

• Email: Compliance Desk (Inquiry Form)
• Mail: PT Karsa Nutrisi Nusantara, Jl. Ir. H. Juanda No. 108, Bandung 40132
• Phone: +62 22 2534 8910 (Business hours: Mon–Fri 08:30–17:30 WIB)

If you believe your privacy rights have been violated, you may also lodge a complaint with the Ministry of Communication and Informatics of the Republic of Indonesia (Kominfo) or the relevant supervisory data protection authority.