Privacy Policy

Introduction

Whitesec ID respects and protects the privacy of everyone who interacts with us, whether through our website, consulting services, training, or other professional communication. We are committed to handling personal data transparently, lawfully, and accountably under Law No. 27 of 2022 on Personal Data Protection, and with reference to international best practice such as ISO/IEC 27701:2019 and the GDPR.

This policy explains how we collect, use, store, protect, and — where necessary — share the personal data you provide to us.

Scope

This policy applies to every user and entity that:

• Accesses or uses our website
• Completes a contact or service request form
• Attends training or webinars we deliver
• Becomes a client, training participant, business partner, or professional contact

Types of Personal Data We Collect

Identity data

Full name, job title, organisation name

Contact data

Email address, phone number, office address

Technical data

IP address, device type, browser, interaction history, cookies

Professional & service data

Proposal request history, training participation, service preferences, feedback

Additional documents

Assignment letters, NDAs, registration forms, or other relevant administrative documents

Purpose of Processing

We use personal data to:

• Process service, consulting, or training requests
• Contact you about professional activities, service updates, or responses to your questions
• Administer training participants, result reporting, and certification
• Provide material, proposals, or information suited to your needs
• Meet legal obligations as well as internal and external audit requirements

Lawful Basis for Processing

We process personal data on the following lawful bases:

• Explicit consent from the data subject
• Legitimate interest in conducting business and improving our services
• Performance of a contract or a valid legal relationship
• Legal obligations under Indonesian law and regulation

Storage & Retention

We retain your data for as long as it is:

• Required to fulfil the original purpose of collection
• Required to meet legal or regulatory obligations
• Required for audit documentation, training records, and organisational accountability

Data Security

We apply appropriate technical and administrative controls — including encryption, access restriction, and periodic backup — to protect personal data from loss, misuse, or unauthorised access.

Your Rights as a Data Subject

As the owner of your personal data, you have the right to:

• Access the personal data we hold about you
• Request correction or updating of that information
• Withdraw consent at any time, without affecting the lawfulness of prior processing
• Request erasure or restriction of processing
• Object to processing based on certain legitimate interests
• Lodge a complaint through our official contact channels

Disclosure to Third Parties

We do not sell, rent, or share your personal data with third parties without your consent, except where:

• Required by law or legal process
• Necessary for training or joint projects with partners bound by a confidentiality agreement
• Explicitly directed by you as the data subject

Cookies and Tracking Technology

Our website uses cookies to improve the user experience, analyse site usage, and optimise content. You can manage your cookie preferences through your browser settings.

Links to Other Sites

Our site may contain links to external websites. This policy does not apply to those third-party sites, and we are not responsible for their privacy practices, content, or policies.

Changes to This Privacy Policy

We may update this policy from time to time. Where changes are material, we will notify you through the website or by email. The date of the latest revision is always shown at the top of this policy.