Legal

How PT. Wanda Indonesia Teknologi (Ravexa) collects, uses and protects your personal data when you use this website.

Last updated: September 20, 2026

1. Scope

This policy covers www.ravexa.co.id and every page on it. It explains what personal data we process when you visit the site, send the contact form, or reach us through the channels listed here.

It does not cover data processed inside the software we build for clients. On that work the client is the Data Controller and we are the Data Processor, and the terms are set in a separate engagement agreement rather than in this document.

By using this site you confirm that you have read and understood this policy. If you do not agree with it, please stop using the site.

2. Data Controller

The Data Controller for everything described in this policy is:

  • PT. Wanda Indonesia Teknologi, an Indonesian limited liability company trading as Ravexa.
  • Address: Jl. Platina 2, Vila Permata Serpong, Blok C29, Curug, Kec. Gunung Sindur, Kabupaten Bogor, Jawa Barat 16340, Indonesia.
  • Email: [email protected].
  • Phone: +62 813-483-4504.

3. What We Collect

We collect only what the site needs to work and what we need to reply to you. There are no user accounts here, no payments, and nothing that asks for specific personal data such as health, biometric or financial information.

  • What you type into the contact form: your full name, email address and message, which are required, plus your phone number and company name, which are optional.
  • Technical data collected by our analytics: approximate city-level location, device and browser type, the pages you open, and where your visit came from. None of it is collected until you accept analytics cookies.
  • Server logs written automatically by the infrastructure the site runs on, including IP address, access time and the path requested. These are needed for security and for tracing faults.
  • The content of your correspondence if you reach us by email, phone, WhatsApp or our social media accounts.

Our contact form has no field for specific personal data, and we ask you not to put any into the message field.

4. Why We Process It, and on What Basis

Law No. 27 of 2022 on Personal Data Protection requires every processing activity to rest on a lawful basis. Ours are:

  • Your consent, for analytics cookies. You give it through the cookie banner and can withdraw it at any time.
  • Fulfilling your own request as a data subject, to answer your contact form message, prepare a quote and arrange a call.
  • Legitimate interest, to keep the site secure, prevent abuse of the form, and understand which pages are useful to visitors, as long as that does not override your rights and interests.
  • Legal obligation, where regulation requires us to retain or disclose particular data.

We do not sell your personal data, we do not rent it out, and we do not use it for decisions taken solely by automated means that would have legal consequences for you.

5. Cookies and Analytics

This site uses the cookies it needs in order to work, such as the one that remembers your language. Those do not require consent, because without them the basic functions of the site do not run.

We also use Google Analytics, loaded through Google Tag Manager, to understand how visitors use the site. That script is not loaded at all until you press the accept button on the cookie banner, and it is never loaded if you decline.

Each cookie, its lifetime, and how to withdraw consent are set out in our Cookie Policy.

6. Who Else Is Involved

We do not share your personal data with anyone except the service providers we need in order to run the site and answer you. Each one receives only what it needs, and each is bound to confidentiality under its own service terms:

  • Zoho Corporation, the email service that receives and stores contact form messages.
  • Google LLC, for Google Analytics and Google Tag Manager, and only if you accept analytics cookies.
  • The server infrastructure provider the site runs on, which processes technical access logs.

Beyond that, we disclose personal data only where regulation, a court order, or a lawful request from a competent authority requires it.

7. How Long We Keep It

Contact form messages and the sender's details stay in the company mailbox for as long as the conversation is still relevant, and at most 24 months from the last contact where it does not turn into an engagement. Where it does, retention follows the term set in the engagement agreement and our company record-keeping obligations.

Statistics in Google Analytics are kept according to the retention setting on our analytics property, capped at 14 months, which is the longest Google Analytics 4 offers.

Server logs are kept briefly for security and fault tracing, then overwritten automatically once they reach their storage limit.

Once a retention period ends, the data is deleted or anonymised so that it can no longer be traced back to you.

8. Security

All traffic between your browser and this site is encrypted with HTTPS/TLS. Contact form messages travel to the company mailbox over an encrypted SMTP connection.

Access to the mailbox, the servers and the service credentials is limited to the people who need it, and those credentials are not stored in the source code.

No system is completely safe. If a personal data breach affects you, we will notify you and the competent authority in writing within 3x24 hours of becoming aware of it, as Law No. 27 of 2022 requires.

9. Your Rights

Law No. 27 of 2022 gives you a number of rights over your personal data. You may:

  • Be told who we are, on what basis, for what purpose, and with what accountability we process your data.
  • Complete, update or correct personal data of yours that is inaccurate.
  • Obtain access to, and a copy of, the personal data of yours that we process.
  • End the processing, and have your personal data deleted or destroyed, as far as that does not conflict with our legal obligations.
  • Withdraw consent you have given, without affecting the lawfulness of the processing carried out before you withdrew it.
  • Postpone or restrict the processing of your personal data, proportionately.
  • Object to a decision taken solely by automated means.
  • Bring a claim and receive compensation for a breach in the processing of your personal data.

To exercise any of these, email [email protected] and say which right you want to use. We may ask for more information to confirm the request really comes from you, and we will respond within 14 (fourteen) working days of verifying it.

Exercising these rights is free. We can decline part of a request only where regulation permits it, and we will tell you in writing why.

10. Children's Data

This site and our services are aimed at businesses and are not intended for anyone under 18. We do not knowingly collect children's personal data.

If you are a parent or guardian and believe your child has sent us personal data, contact [email protected] and we will delete it.

11. Transfers Outside Indonesia

Two of the providers we use, Google and Zoho, operate servers outside Indonesian jurisdiction, so your technical data and the content of your messages may be processed abroad.

For those transfers we make sure the receiving party applies a level of personal data protection equivalent to the one required by Law No. 27 of 2022, including through the data protection terms in each provider's service agreement.

13. Changes to This Policy

We may update this policy when our services, the technology behind them, or the applicable regulation changes. The current version is always the one on this page, and the date at the top says when it last changed.

Where a change is substantial and affects processing that rests on your consent, we will ask for your consent again before it takes effect.

14. Contacting Us

Questions, requests to exercise a right, and objections about personal data can be sent to [email protected], or by post to Jl. Platina 2, Vila Permata Serpong, Blok C29, Curug, Kec. Gunung Sindur, Kabupaten Bogor, Jawa Barat 16340.

If you think our answer is not good enough, you are entitled to complain to the competent personal data protection authority in Indonesia.