Privacy Policy
Last updated: September 22, 2026 · PT Stellar Digital Innovations
PT Stellar Digital Innovations ("Stellar", "we", "our", or the "Personal Data Controller") operates www.stellardigitalinnovations.com and related services. This Privacy Policy is prepared with reference to Law of the Republic of Indonesia Number 27 of 2022 on Personal Data Protection ("PDP Law" / UU PDP) and its implementing regulations. It explains how we collect, process, store, disclose, and protect your Personal Data. By using our website or services, you acknowledge the practices described herein.
1. Legal Basis
Stellar processes Personal Data in accordance with the PDP Law and other applicable laws of the Republic of Indonesia. This Policy reflects our transparency obligations as a Personal Data Controller toward Personal Data Subjects.
2. Identity of the Personal Data Controller
The Personal Data Controller for Personal Data processed through our website and services is:
- Name: PT Stellar Digital Innovations
- Business ID (NIB): 2903240045594
- Address: Jagakarsa, South Jakarta, DKI Jakarta 12640, Indonesia
- Email: [email protected]
- WhatsApp: +62 899-9999-5593
For requests relating to Personal Data Subject rights, please contact us using the details above with the subject line "Personal Data Request / PDP Law".
3. Key Definitions
For this Policy:
- Personal Data means data about an identified or identifiable individual, alone or combined with other information.
- Personal Data Subject means the individual to whom the Personal Data relates.
- Processing includes obtaining, collecting, processing, analyzing, storing, correcting, updating, displaying, announcing, transferring, disseminating, disclosing, deleting, and/or destroying Personal Data.
4. Types of Personal Data We Collect
We may process general Personal Data, including:
- Identity and contact details: full name, company name, email address, phone/WhatsApp number.
- Order/transaction data: order details, service request notes, and payment proofs you submit.
- Communication data: message content sent via contact forms, email, or WhatsApp.
- Technical and usage data: IP address, browser/device type, pages visited, visit time, server logs, and similar analytics data.
We do not intend to collect specific Personal Data (e.g., health, biometric, genetic data, or children's data specifically) through this website. Please do not submit specific Personal Data unless expressly requested in writing for a particular service and with a clear legal basis.
5. How We Obtain Data
Personal Data is obtained directly from you (for example when submitting forms, using Store checkout, contacting us, or confirming payment) and automatically when you access the website (logs and similar technologies).
6. Purposes of Processing
We process Personal Data for the following purposes:
- Responding to inquiries, consultations, and providing customer support.
- Processing orders, invoices, service delivery, and payment confirmation.
- Providing, maintaining, securing, and improving our website, tools, and IT services.
- Analyzing site usage in aggregate to improve user experience.
- Complying with legal, audit, tax, and lawful authority requests.
- Protecting the rights, security, and legitimate interests of Stellar and users.
7. Legal Grounds for Processing (PDP Law)
Under the PDP Law, we process Personal Data based on one or more of the following:
- Valid consent from the Personal Data Subject for one or more specific purposes.
- Performance of a contract to which the Personal Data Subject is a party, or steps at the Subject's request prior to entering into a contract.
- Compliance with the Controller's legal obligations under applicable laws.
- Stellar's legitimate interests, provided they do not override the Subject's fundamental rights, interests, and freedoms.
- The vital interests of the Personal Data Subject, where relevant.
Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
8. Storage and Retention
Personal Data is retained only as long as necessary for the stated processing purposes, or as required by law (e.g., accounting/tax). After that period, we securely delete, destroy, or anonymize the data, unless a longer retention is legally required.
9. Disclosure to Third Parties
We do not sell your Personal Data. We may disclose Personal Data to:
- Service providers supporting our operations (hosting, email, analytics, payment gateways, cloud infrastructure), limited to what is necessary and under confidentiality obligations.
- Professional advisers (legal, accounting) where needed.
- Authorities or competent parties when required by law or lawful order.
Where a third party acts as a Personal Data Processor, we seek to ensure processing is carried out under instructions and with adequate protection standards.
10. Cross-Border Data Transfers
Some infrastructure or third-party services we use may be located outside Indonesia. Where Personal Data is transferred abroad, we will ensure the transfer complies with the PDP Law, including ensuring an adequate level of protection and/or a valid legal basis for the transfer.
11. Personal Data Security
We implement reasonable and proportionate technical and organizational measures to protect Personal Data against unauthorized access, disclosure, alteration, or destruction, including access controls, secure website connections (HTTPS/SSL), and security-oriented operational practices. No system is completely risk-free.
12. Personal Data Breaches
If a Personal Data protection failure occurs that may harm Personal Data Subjects, we will take reasonable remediation steps and, as required by the PDP Law and related regulations, notify the competent authority and/or affected Subjects within the legally required timeframe, where such notification is mandated.
13. Rights of Personal Data Subjects
Under the PDP Law, you as a Personal Data Subject have rights including to:
- Obtain information on the clarity of identity, legal interest basis, request purpose, and use of Personal Data.
- Complete, update, and/or correct inaccurate Personal Data.
- Access and obtain copies of Personal Data as provided by law.
- End processing, erase, and/or destroy Personal Data in accordance with the PDP Law.
- Withdraw consent previously given for Personal Data processing.
- Object to decisions based solely on automated processing (where relevant).
- Suspend or restrict processing proportionately as provided by law.
- Obtain Personal Data from the Controller in a commonly used format (data portability), where PDP Law conditions are met.
- Lodge a complaint with the competent authority regarding alleged PDP Law violations.
To exercise these rights, contact us via our official email or WhatsApp with sufficient identity details. We may verify your identity before processing the request. We will respond within a reasonable time consistent with applicable law.
14. Cookies and Similar Technologies
Our website may use cookies and similar technologies to maintain site functions, remember preferences, and analyze traffic in aggregate. On your first visit, we display a cookie consent banner. Analytics cookies are enabled after you choose “Accept”. That preference is stored on your device and can be reset by clearing site data in your browser.
15. Children's Data
Our services are intended for adults and/or business users. We do not knowingly collect Personal Data of children below the legally required age without valid parental/guardian consent. If you believe a child has provided Personal Data to us, please contact us so we can review and delete it where appropriate.
16. Third-Party Links
Our website may contain links to third-party sites. We do not control and are not responsible for their privacy practices. We encourage you to review the privacy policy of every site you visit.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in services, operations, or legal requirements (including PDP Law implementing regulations). Material changes will be posted on this page with an updated revision date. Continued use after an update indicates you understand the then-current Policy.
18. Contact Us
If you have questions, Personal Data Subject rights requests, or complaints about Personal Data processing, please contact the Personal Data Controller:
- Company: PT Stellar Digital Innovations
- Email: [email protected]
- WhatsApp: +62 899-9999-5593
- Address: Jagakarsa, South Jakarta, DKI Jakarta 12640, Indonesia