Privacy Policy

1. Introduction & Data Controller

This Privacy Policy explains how Evorian ("we," "us," "our"), Jl. Prawirotaman No. 29, Yogyakarta 55153, Indonesia, collects, uses, and protects personal data in connection with this website. We act as the data controller for personal data submitted through this site. Questions can be directed to [email protected]. This policy is written to align with Indonesia's Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Pelindungan Data Pribadi, or "PDP Law").

2. What Data We Collect

We collect personal data in two ways: directly, when you fill out the contact form, and automatically, through cookies described in our Cookie Policy.

Data Category	Purpose	Legal Basis
Name, email, phone, message	Responding to inquiries and proposing services	Consent
Cookie identifiers	Site functionality and, where permitted, analytics	Consent / legitimate interest

3. Purposes and Legal Basis

We process personal data to respond to messages sent through the contact form, to schedule and deliver the services described on this site, and to maintain basic site functionality and security. Where cookies are not essential, we rely on your consent, collected through the cookie consent tool described in our Cookie Policy.

4. Data Sharing & Third Parties

We do not sell personal data. Data may be shared with service providers strictly necessary to operate this site, and may be disclosed if required by Indonesian law or a valid request from a competent authority.

5. Retention

Contact form submissions are retained only as long as needed to respond to your inquiry and, where a service engagement follows, for the duration of that engagement plus a reasonable period for record-keeping. You may request earlier deletion as described below.

6. Security

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, or loss, consistent with the security obligations set out in the PDP Law.

7. International Transfers

Where personal data is processed outside Indonesia, we take steps consistent with the PDP Law's cross-border transfer requirements, including confirming that the receiving jurisdiction offers an equivalent or adequate level of protection where required.

8. Your Rights

Under the PDP Law, you have the right to access, correct, and request deletion of your personal data, to withdraw consent, to object to certain processing, and to lodge a complaint with the relevant supervisory authority. To exercise any of these rights, contact us at [email protected] or through our contact page.

9. Opt-Out & Data Deletion

Providing personal data through this site is entirely optional. Non-essential cookies can be disabled at any time through the cookie preferences panel on our Cookie Policy page or your browser settings. To request deletion of data you've previously submitted, contact us via the contact page.