Privacy Policy
PT Luwes Inovasi Mandiri is committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information when you visit our website or use our services.
Jump to section
1. Data Controller
PT Luwes Inovasi Mandiri ("the Company", "we", "us", or "our") is the data controller responsible for your personal data collected through this website.
2. Data We Collect
We collect the following categories of personal data:
3. How We Use Your Data
We use your personal data for the following purposes:
Responding to enquiries
To answer questions submitted through our contact form and provide requested information.
Customer communication
To send information about our products, services, and updates that you have requested.
Analytics & improvement
To analyse website usage patterns and improve our content, features, and user experience.
Technical operations
To maintain website security, diagnose technical issues, and ensure proper functionality.
Legal compliance
To comply with applicable Indonesian laws and regulations, including UU No. 27 Tahun 2022 (UU PDP).
Business development
To understand market needs and develop new products and solutions for our clients.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds under Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP) and applicable international standards:
5. Cookies & Tracking Technologies
We use cookies and similar technologies to operate our website and, with your consent, to analyse traffic and deliver personalised content.
Required for the website to function. Cannot be disabled.
Cookies: lim_essential (session token), language preference
Help us understand visitor behaviour (requires your consent).
Cookies: lim_analytics, Google Analytics (_ga, _gid, _gat)
Used for targeted advertising and personalisation (requires your consent).
Cookies: lim_marketing, Google Ads, LinkedIn Insight
You can manage or withdraw your cookie consent at any time.
6. Third-Party Services
We use the following third-party services that may process your personal data. Each provider has their own privacy policy:
Website analytics, traffic analysis, and user behaviour tracking. Uses Consent Mode v2.
Primary database for storing contact form submissions, media metadata, articles, and admin data on our own hosting environment.
Transactional email delivery for contact form confirmations and admin notifications.
Satellite data provider for weather forecasting and precision farming intelligence features.
7. Data Sharing & Disclosure
We do not sell your personal data to third parties. We may share your data only in the following circumstances:
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
| Data Type | Retention Period | Justification |
|---|---|---|
| Contact form submissions | 2 years | Business correspondence and follow-up |
| Analytics data | 14 months | Google Analytics default retention |
| Cookie consent records | 1 year | Proof of consent (renewed annually) |
| Server logs | 90 days | Security monitoring and debugging |
| Email correspondence | 3 years | Legal and business records |
9. Your Rights
Under UU No. 27 Tahun 2022 (Indonesian Personal Data Protection Law) and applicable international standards, you have the following rights:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data in certain circumstances.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Restrict
Request restriction of processing in certain circumstances.
Right to Object
Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent
Withdraw consent at any time without affecting prior processing.
Right to Complain
Lodge a complaint with the relevant supervisory authority (Kominfo).
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:
TLS/HTTPS Encryption
All data in transit is encrypted using TLS 1.3
Database Security
Row-level security policies via Supabase (PostgreSQL)
Access Control
Role-based access control for admin functions
Audit Logging
All admin actions are logged with timestamps
Regular Updates
Dependecies and security patches applied regularly
Incident Response
Data breach notification within 72 hours if required
11. Children's Privacy
12. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
Your continued use of our website after any changes constitutes your acceptance of the updated policy.
13. Contact & Data Protection Officer
For any questions about this Privacy Policy, to exercise your rights, or to report a privacy concern, please contact our Data Protection Officer:
PT Luwes Inovasi Mandiri
Data Protection Officer
⏱ We aim to respond to all privacy-related requests within 30 calendar days.
Manage your cookie preferences
You can update which cookies you allow at any time using our cookie management tool.