Privacy Policy

Welcome to coklat.febunsil.ac.id (hereinafter referred to as “the Website,” “we,” “us,” or “our”). This Privacy Policy is designed to inform you about how coklat.febunsil.ac.id, operating under the same entity name (coklat.febunsil.ac.id), collects, uses, processes, and protects your personal information when you visit and interact with our website, which specializes in Home Exterior services and content.

We are committed to transparent practices and upholding the highest standards for data privacy. Your privacy is critically important to us, and we respect your personal data, striving to be clear about the information we collect, why we collect it, how we use it, and your rights concerning your data.

By accessing or using our Website at https://coklat.febunsil.ac.id/, you signify your acknowledgment and agreement to the terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please do not use our Website.

1. Who We Are

Website Name: coklat.febunsil.ac.id
Entity Name: coklat.febunsil.ac.id
URL: https://coklat.febunsil.ac.id/
Niche: Home Exterior
Contact Email: [email protected]

This Privacy Policy applies to all services and products offered by coklat.febunsil.ac.id and its associated websites, applications, and services that link to this policy.

2. Information We Collect

We collect various types of information from and about users of our Website, including information that may personally identify you, information about your internet connection, the equipment you use to access our Website, and usage details. This information can be broadly categorized into:

2.1. Personal Data (Personally Identifiable Information – PII)

Personal Data refers to any information that can directly or indirectly identify you. We may collect the following types of Personal Data:

Contact Information: This includes your name, email address, postal address (for service quotes or project addresses), and telephone number. We collect this when you fill out contact forms, request a quote, subscribe to our newsletter, or create an account.
Identification Data: While less common for our niche, if you engage in specific transactions, we might require additional verification information.
Project-Specific Information: For Home Exterior services, this is crucial. We may collect details about your property, specific exterior design preferences, material choices, current exterior photographs (if you upload them for a quote), project budget ranges, desired timelines, and any other information relevant to proposing or executing a home exterior project.
Communication Data: Records of any correspondence between you and us, including emails, chat conversations, or phone call summaries, especially concerning inquiries, quotes, or project support.
Payment Information: If we offer direct services or products for purchase on the website, we would collect necessary payment details (e.g., credit card information, billing address). However, for many Home Exterior consultations, payments may be handled offline or through third-party processors, where we would only retain transaction records, not raw payment card data.
Account Credentials: If you create an account on our Website, we collect your username and password (which is always stored as a hashed, encrypted value).
Service Preferences: Information about your preferences for our services, communication methods, or personalized recommendations based on your interactions.

2.2. Non-Personal Data (Non-Personally Identifiable Information – Non-PII)

Non-Personal Data is data that cannot be directly linked to your identity. We collect this type of information to improve our Website and services.

Usage Data: Details of your visits to our Website, including traffic data, location data, logs, browser information, pages viewed, how you navigate through the site, and the resources that you access and use on the Website. This helps us understand user behavior and optimize our content for “Home Exterior” topics.
Technical Data: Information about your computer, device, and internet connection, including your IP address, operating system, browser type, device type, screen resolution, and mobile network information.
Aggregated Data: Statistical or demographic data derived from your Personal Data but which is not considered Personal Data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature or interested in a particular exterior design style.

3. How We Collect Your Information

We use different methods to collect data from and about you, including through:

3.1. Direct Interactions

You may give us your Personal Data by filling in forms or by corresponding with us by email, phone, or otherwise. This includes Personal Data you provide when you:

Request information or a quote for Home Exterior services.
Subscribe to our newsletter or other publications.
Create an account on our Website.
Participate in surveys, contests, or promotions related to Home Exterior topics.
Engage with our customer support.
Submit feedback or reviews.
Upload images or files related to your home exterior project.

3.2. Automated Technologies or Interactions

As you interact with our Website, we may automatically collect Technical Data and Usage Data about your equipment, browsing actions, and patterns. We collect this Personal Data by using cookies, server logs, and other similar technologies.

3.3. Third Parties or Publicly Available Sources

We may receive Personal Data about you from various third parties and public sources, such as:

Analytics Providers: Such as Google Analytics, based outside [Your Country/Region is Assumed to be Indonesia based on febunsil.ac.id].
Advertising Networks: Like Google Ads or social media advertising platforms, based inside or outside [Your Country/Region].
Technical, Payment and Delivery Service Providers: Who may provide us with updated payment information or delivery status.
CRM (Customer Relationship Management) Tools & Marketing Platforms: If we use third-party platforms to manage customer interactions and marketing campaigns.
Social Media Platforms: If you interact with our social media profiles or choose to log in to our Website using a social media account.
Public Databases: In specific, legally permissible circumstances.

4. How We Use Your Information

We use the information we collect about you for various purposes, primarily to provide and improve our Home Exterior services. Each use is subject to appropriate legal bases for processing, which we detail further below.

To Provide and Manage Our Services: To present our Website and its contents to you; to provide you with information, products, or services that you request from us (e.g., specific exterior design ideas, material recommendations, cost estimates); to manage your account; and to process your inquiries and project proposals.
To Improve Our Website and Offerings: To analyze how the Website is used, conduct research and analytics, and enhance your user experience by tailoring content to your interests (e.g., displaying more relevant “Home Exterior” articles or service offerings). This includes understanding which exterior styles are most popular or what information users seek most.
For Marketing and Promotion: To provide you with information about our products and services, new exterior trends, promotions, and news that we believe may be of interest to you. This may include sending you newsletters, special offers, or other marketing communications related to Home Exterior improvements. You will always have the option to opt-out of these communications.
For Customer Support: To respond to your comments, questions, and requests, provide customer support, and resolve any issues you may have.
For Security and Fraud Prevention: To protect our Website, users, and business; to detect, prevent, and respond to fraud, abuse, security risks, and technical issues that could harm our Website or our services.
To Comply with Legal Obligations: To fulfill our legal and regulatory requirements, enforce our terms and conditions, and protect our rights and the rights of others.
Business Operations: For internal administration, data analysis, troubleshooting, testing, and statistical purposes.
Personalization: To personalize your experience on our Website, such as remembering your preferences or displaying content relevant to your past interactions or expressed interests in Home Exterior topics.

5. Legal Bases for Processing Your Information (GDPR Style)

For users residing in regions subject to privacy regulations like the General Data Protection Regulation (GDPR), we must have a legal basis to process your Personal Data. Our legal bases include:

Consent: Where you have given us explicit consent to process your Personal Data for a specific purpose (e.g., subscribing to our newsletter). You have the right to withdraw your consent at any time.
Contractual Necessity: When processing is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (e.g., providing a quote for exterior renovation, managing your project).
Legal Obligation: When processing is necessary for compliance with a legal obligation to which we are subject (e.g., tax compliance, regulatory reporting).
Vital Interests: When processing is necessary to protect your vital interests or those of another natural person (e.g., in emergencies).
Legitimate Interests: When processing is necessary for the purposes of our legitimate interests or those of a third party, provided that your interests and fundamental rights do not override those interests. Our legitimate interests include improving our services, marketing our offerings, detecting fraud, and ensuring the security of our IT systems. When relying on legitimate interests, we ensure a balance between our interests and your rights.

6. Disclosure and Sharing of Your Information

We do not sell your Personal Data to third parties. We may share your Personal Data with select third parties for specific purposes, as outlined below:

6.1. Service Providers

We may share your data with third-party service providers who perform services on our behalf, such as:

Hosting and Infrastructure Providers: To run and maintain our Website (e.g., cloud hosting services).
Analytics Providers: To understand website usage and performance (e.g., Google Analytics).
CRM and Marketing Platforms: To manage customer relationships and send communications (e.g., email marketing platforms).
Payment Processors: To facilitate secure online payment transactions if applicable.
IT and System Administration Services: For data security, troubleshooting, and system maintenance.
Professional Advisers: Including lawyers, bankers, auditors, and insurers who provide consultation, banking, legal, insurance, and accounting services.

These service providers are contractually obligated to protect your data, only use it for the purposes for which it was disclosed, and comply with this Privacy Policy and applicable data protection laws.

6.2. Business Partners

For specific Home Exterior projects, we may collaborate with trusted business partners, such as:

Contractors/Subcontractors: To fulfill the services you have requested (e.g., specific installation teams, material suppliers). We only share the necessary information required for project completion.
Referral Partners: If you were referred to us or if we refer you to another trusted service for complementary services.

We will always inform you and, where necessary, obtain your consent before sharing your sensitive project-specific information with such partners.

6.3. Legal and Law Enforcement Purposes

We may disclose your information if required to do so by applicable law or in the good faith belief that such action is necessary to:

Comply with a legal obligation or valid legal process (e.g., subpoenas, court orders, government requests).
Protect and defend the rights or property of coklat.febunsil.ac.id.
Act in urgent circumstances to protect the personal safety of users of the Website or the public.
Protect against legal liability or enforce our Terms and Conditions.

6.4. Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your Personal Data may be transferred to the acquiring entity. You will be notified via email or a prominent notice on our Website of any such change in ownership or control of your Personal Data.

6.5. With Your Consent

We may share your information for any other purpose disclosed to you at the time we collect the information or with your explicit consent.

7. Cookies and Tracking Technologies

Our Website uses “cookies” and similar tracking technologies (like web beacons, pixels, and local storage) to enhance your experience, analyze website usage, and for marketing purposes.

7.1. What are Cookies?

Cookies are small text files placed on your device by a web server when you access a website. They allow the website to recognize your device and remember certain information about your visit.

7.2. How We Use Cookies

We use cookies for various purposes:

Strictly Necessary Cookies: Essential for the operation of our Website, enabling core functionalities like page navigation and access to secure areas. Without these, the Website may not function correctly.
Performance/Analytics Cookies: Help us understand how visitors interact with our Website by collecting information about which pages are visited most often, time spent on pages, and where errors occur. This helps us improve website performance and user experience, especially in relation to popular “Home Exterior” content.
Functionality Cookies: Allow our Website to remember choices you make (like your username, language, or region) and provide enhanced, more personalized features. For instance, if you’ve searched for specific exterior materials, these cookies can help display related content.
Targeting/Advertising Cookies: Used to deliver advertisements more relevant to you and your interests. They are also used to limit the number of times you see an advertisement and help measure the effectiveness of advertising campaigns. These are commonly placed by advertising networks with our permission.

7.3. Your Choices Regarding Cookies

Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. However, this may prevent you from taking full advantage of the Website or certain features.

You can manage your cookie preferences through your browser settings:

Google Chrome: Settings > Privacy and security > Site Settings > Cookies and site data.
Mozilla Firefox: Options > Privacy & Security > Enhanced Tracking Protection or Cookies and Site Data.
Microsoft Edge: Settings > Privacy, search, and services > Tracking prevention.
Safari: Safari > Preferences > Privacy.

You can also opt-out of personalized advertisements by visiting the Network Advertising Initiative Opt-Out Page or the Digital Advertising Alliance Opt-Out Page.

7.4. Do Not Track (DNT) Signals

Some web browsers offer a “Do Not Track” signal option. While we respect DNT signals, there is no universal industry standard for how websites should respond to these signals. Therefore, our Website may not respond to DNT signals.

8. Data Security

The security of your Personal Data is paramount to us. We implement robust technological, physical, and administrative safeguards designed to protect your Personal Data from accidental loss, unauthorized access, use, alteration, and disclosure.

Measures we employ include:

Encryption: We use Secure Socket Layer (SSL) technology to encrypt data during transmission between your browser and our server. Data stored on our servers may also be encrypted at rest.
Access Controls: Strict access controls are in place, limiting who can access your Personal Data based on a need-to-know basis.
Firewalls and Intrusion Detection Systems: To protect against unauthorized access and cyber threats.
Regular Security Audits and Vulnerability Scans: To identify and address potential security weaknesses.
Data Minimization: We only collect Personal Data that is relevant, adequate, and limited to what is necessary for the purposes for which it is processed.
Employee Training: Our employees are regularly trained on data privacy and security best practices.
Backup and Recovery Procedures: To ensure business continuity and data integrity in case of unforeseen incidents.

Despite our efforts, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee the absolute security of your Personal Data.

9. Data Retention

We retain your Personal Data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, reporting requirements, or for establishing and defending legal claims.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

For example:

Customer account data: Retained as long as your account is active and for a reasonable period thereafter to facilitate re-engagement or for legal compliance.
Project-related data: Retained for the duration of the project and for a subsequent period (e.g., 5-7 years) for warranty purposes, record-keeping, and potential further projects, even after project completion.
Marketing communication data: Retained until you unsubscribe or request deletion, or after a period of inactivity.
Transaction records: Kept for a minimum of 7-10 years to comply with tax and legal obligations.
Website usage data: Often anonymized or aggregated after a shorter period, but raw data may be retained for analytics for up to 26 months.

When we no longer need your Personal Data, we will securely destroy or anonymize it in accordance with applicable laws and our internal policies.

10. Your Data Protection Rights

Depending on your jurisdiction and applicable data protection laws (such as GDPR for individuals in the European Economic Area/UK, or CCPA/CPRA for California residents), you may have specific rights regarding your Personal Data:

10.1. General Rights (Applicable in most jurisdictions)

Right to Access (Subject Access Request): You have the right to request a copy of the Personal Data we hold about you and to know how we process it.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete Personal Data we hold about you.
Right to Erasure (Right to Be Forgotten): You have the right to request the deletion of your Personal Data under certain circumstances (e.g., the data is no longer necessary for the purposes for which it was collected, or you withdraw consent).
Right to Object to Processing: You have the right to object to the processing of your Personal Data in certain situations, including for direct marketing purposes.
Right to Restrict Processing: You have the right to request that we limit the way we use your Personal Data under certain circumstances (e.g., you dispute the accuracy of the data, and we are verifying it).
Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible and it doesn’t adversely affect the rights of others.
Right to Withdraw Consent: Where we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time.

10.2. California Specific Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell/share.
Right to Delete: You have the right to request the deletion of personal information we have collected from you, subject to certain exceptions.
Right to Opt-Out of Sale/Sharing: You have the right to opt-out of the “sale” or “sharing” of your Personal Information, as defined by CCPA/CPRA. We do not sell your personal information in the traditional sense, but if our use of cookies for advertising purposes falls under “sharing” you may opt out.
Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA/CPRA rights.
Right to Correct Inaccurate Personal Information: You have the right to request correction of inaccurate personal information we maintain about you.
Right to Limit Use and Disclosure of Sensitive Personal Information: You have the right to limit the use and disclosure of your sensitive personal information, if applicable.

10.3. Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Data (or to exercise any of your other rights). This is a security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We aim to respond to all legitimate requests within [30 days for GDPR, 45 days for CCPA] of receiving them. Occasionally it may take us longer if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

11. Children’s Privacy

Our Website is not intended for children under the age of 13. We do not knowingly collect Personal Data from children under 13. If you are under 13, please do not provide any information on this Website or through any of its features, register on the Website, make any purchases, use any of the interactive or public comment features of this Website, or provide any information about yourself to us.

If we learn that we have collected or received Personal Data from a child under 13 without verification of parental consent, we will take steps to delete that information. If you believe we might have any information from or about a child under 13, please contact us at [email protected]. Parents or legal guardians can review, update, or delete their children’s Personal Data by contacting us.

12. Third-Party Links

Our Website may contain links to third-party websites, applications, and services that are not operated by us. These links are provided for your convenience and information. Once you leave our Website, we have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of every site you visit.

13. International Data Transfers

As we operate globally and utilize service providers who may be located in different countries, your Personal Data may be transferred to, stored, and processed in countries outside of your own, including countries that may not provide the same level of data protection as your home country. For instance, data for our website might be hosted on servers located in various regions by our service providers.

When we transfer Personal Data across international borders, especially outside the European Economic Area (EEA) or the UK which have stringent data protection laws, we ensure that appropriate safeguards are in place to protect your data, such as:

Standard Contractual Clauses (SCCs): Implementing the SCCs approved by the European Commission or equivalent regulatory body, which require the recipient to protect your personal data to the same standards as required in the EEA/UK.
Adequacy Decisions: Transferring data to countries deemed by the European Commission or relevant authority to have an adequate level of data protection.
Binding Corporate Rules (BCRs): For transfers within a group of companies.
Your Consent: In specific situations, we may rely on your explicit consent for international transfers after having informed you of the potential risks.

By using our Website, you understand and acknowledge that your Personal Data may be transferred to these destinations. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable data protection laws.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last Updated” date at the top of this policy. If the changes are significant, we may provide a more prominent notice (including, for certain services, email notification of Privacy Policy changes).

You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Website after we make changes is deemed to be acceptance of those changes.

15. Contact Us

If you have any questions, concerns, or comments about this Privacy Policy or our data practices, please do not hesitate to contact us:

Email: [email protected]

We are committed to addressing your inquiries and resolving any concerns you may have regarding your privacy.