Privacy Policy

This Privacy Policy describes how PetitBeary ("we," "us," or "our"), an entity based in Indonesia, collects, uses, processes, and shares your personal information when you visit, use, or make a purchase from petitbeary.com (the "Site") or otherwise interact with us.

We are committed to protecting your personal data in accordance with the Personal Data Protection Law No. 27 of 2022 (UU PDP) of the Republic of Indonesia, and other applicable data protection laws.

By using our Site, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not use our Site.

1. Information We Collect

We collect various types of information from and about you, including:

• • Personal Data you provide to us directly:
    • Contact Information: Name, email address, postal address, phone number.
    • Account Information: Username, password, and other registration details.
    • Financial Information: Payment card details (processed securely by our third-party payment processors; we do not store full card numbers), billing address.
    • Order Information: Details about the products you purchase.
    • Communications: Information you provide when you communicate with us, such as customer service inquiries, feedback, or survey responses.
    • Demographic Information (optional): Age, gender (if you choose to provide it).
    • Marketing Preferences: Your preferences for receiving marketing communications.
  • Personal Data collected automatically when you use our Site:
    • Usage Data: Information about how you access and use the Site, such as pages visited, time spent on pages, clickstream data, referring/exit pages, and dates/times of access.
    • Device Information: Your IP address, browser type, operating system, device type, unique device identifiers, and mobile network information.
    • Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to track the activity on our Site and hold certain information.
    • Cookies: Small data files placed on your device. For more information about cookies and how to disable them, visit allaboutcookies.org.
    • Web Beacons (also known as clear gifs, pixel tags): Electronic files used to track information about your Browse.
  • Personal Data from Third Parties:
    • We may receive information about you from third-party services, such as payment processors, shipping partners, analytics providers, or marketing partners, to help us fulfill orders, provide services, and improve our offerings.

2. How We Use Your Information (Purpose of Data Processing)

We use the information we collect for various purposes, including but not limited to:

• • To Provide and Maintain Our Services:
    • Process your orders and complete transactions.
    • Manage your account and provide customer support.
    • Fulfill and deliver your purchases.
    • Send you order confirmations, shipping notifications, and updates.
  • To Improve and Personalize Your Experience:
    • Understand how you use our Site to improve its functionality and user experience.
    • Personalize your shopping experience, including product recommendations.
    • Develop new products, services, features, and functionality.
  • For Marketing and Communications:
    • Send you promotional emails, newsletters, and special offers if you have given your explicit consent to receive them.
    • Inform you about changes to our products or services.
    • Conduct contests, surveys, and promotions.
  • For Security and Fraud Prevention:
    • Detect, prevent, and address technical issues, fraud, or other illegal activities.
    • Protect the security and integrity of our Site and our users.
  • For Legal and Compliance Purposes:
    • Comply with applicable Indonesian laws and regulations, including the UU PDP, legal processes, or governmental requests.
    • Enforce our Terms and Conditions and other agreements.
    • Protect our rights, privacy, safety, or property, and that of our users or the public.
    • To fulfill our obligations under contracts with you.

3. Sharing Your Information (Disclosure to Third Parties)

We may share your personal data with third parties in the following circumstances:

• • Service Providers: We engage third-party companies and individuals to facilitate our services, provide services on our behalf (e.g., payment processing, shipping, web hosting, analytics, marketing, customer service). These third parties have access to your personal data only to perform these tasks on our behalf and are obligated by contract to protect your data and not to disclose or use it for any other purpose, in accordance with the UU PDP.
  • Business Transfers: In the event of a merger, acquisition, restructuring, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, provided that the acquiring entity commits to protecting your data in accordance with this Privacy Policy and applicable laws.
  • Legal Requirements: We may disclose your information if required to do so by Indonesian law or in response to valid requests by public authorities (e.g., a court order or a government agency request), and only to the extent necessary.
  • To Protect Our Rights and Others: We may disclose your information when we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the physical safety of any person, or as evidence in litigation in which we are involved.
  • With Your Explicit Consent: We may share your information with third parties when we have obtained your explicit consent to do so.

4. International Data Transfers

As PetitBeary is based in Indonesia, your personal data will primarily be processed and stored within Indonesia. However, some of our service providers (e.g., cloud hosting, certain analytics tools) may operate globally, meaning your information, including personal data, may be transferred to and maintained on computers located outside of Indonesia.

Where personal data is transferred outside Indonesia, we will ensure that such transfers comply with the requirements of the UU PDP, including ensuring that the recipient country has an adequate level of personal data protection or that appropriate safeguards are in place (e.g., standard contractual clauses). Your continued use of our Site and services implies your consent to such transfers as described in this policy.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements under Indonesian law. This also includes compliance with specific retention periods mandated by the UU PDP or other relevant regulations.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

6. Your Data Protection Rights under UU PDP

In accordance with the Personal Data Protection Law (UU PDP) of the Republic of Indonesia, you, as the Personal Data Owner, have the following rights regarding your personal data:

• • The right to obtain information regarding the clarity of identity, legal basis, purpose of requesting and using Personal Data: You have the right to know clearly who we are, why we collect your data, and how we use it.
  • The right to complete, update, and/or correct errors in Personal Data: You can request that we correct any inaccurate or incomplete personal data.
  • The right to obtain access to and obtain a copy of Personal Data: You have the right to request access to your personal data that we hold.
  • The right to withdraw consent for Personal Data processing: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  • The right to object to the processing of Personal Data: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
  • The right to postpone or restrict the processing of Personal Data: You can request us to temporarily stop or limit the processing of your data under certain conditions.
  • The right to delete and/or destroy Personal Data: You have the right to request the deletion or destruction of your personal data under certain conditions (e.g., if it is no longer necessary for the purposes collected).
  • The right to receive Personal Data from the Personal Data Controller in a structured, commonly used, and machine-readable format: You have the right to request your data in a portable format.
  • The right to compensation for violations of Personal Data processing: If your rights are violated due to data processing, you may have the right to seek compensation.

To exercise any of these rights, please contact us using the contact details provided below. We will respond to your request in accordance with the deadlines stipulated by the UU PDP.

7. Cookies and Tracking Technologies

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this Site may become inaccessible or not function properly.We use cookies to [e.g., remember your preferences, keep you logged in, analyze site traffic].

8. Third-Party Links

Our Site may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

9. Children's Privacy

Our Site is not intended for individuals under the age of 18, in accordance with Indonesian law concerning the age of majority. We do not knowingly collect personal data from children under 18 without verifiable parental consent. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from a child under the age of 18 without verification of parental consent, we will take steps to remove that information from our servers.

10. Data Security

We are committed to protecting the security of your personal data. We implement appropriate technical, physical, and administrative security measures to protect your personal data from unauthorized access, collection, use, disclosure, copying, modification, or disposal, in accordance with the UU PDP. These measures include [e.g., encryption, access controls, regular security audits]. However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons, particularly in response to developments in Indonesian data protection law. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights under the UU PDP, please contact us by email at hello@petitbeary.com.