Privacy Policy
Last updated: August 5, 2026
1. Introduction & Data Controller
This Privacy Policy explains how Drevora ("we", "us", "our") collects, uses, and protects personal data submitted through drevora.pro. The data controller is Drevora, located at Jl. Angkatan 45 No. 26, Palembang 30137, Indonesia. For any privacy-related query, contact us at [email protected].
2. What Data We Collect
We collect data you provide directly through our contact form (name, email address, phone number, and message content) and data collected automatically through cookies, subject to your consent preferences, as described in our Cookie Policy.
3. Purposes & Legal Basis
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Contact form data | Responding to enquiries and providing services | Consent / contract performance |
| Cookie data (optional) | Analytics and site functionality | Consent |
| Essential cookies | Core site operation and security | Legitimate interest |
4. Data Sharing & Third Parties
We do not sell personal data. Data may be shared with service providers strictly necessary to operate our services, under confidentiality obligations. We do not transfer data to advertising networks unless you have granted the relevant cookie consent.
5. Retention
Contact form submissions are retained only as long as necessary to respond to your enquiry and maintain records of engagements, typically no longer than 24 months unless a longer period is required by law.
6. Security
We apply reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, or loss.
7. International Transfers
Where data is processed outside Indonesia, we take steps to ensure an adequate level of protection consistent with Indonesia's Personal Data Protection Law (Law No. 27 of 2022, "PDP Law").
8. Your Rights
Under the PDP Law, you have the right to access, correct, and request deletion of your personal data, to withdraw consent at any time, and to lodge a complaint with the Ministry of Communication and Digital Affairs (Kementerian Komunikasi dan Digital), which oversees personal data protection in Indonesia. To exercise these rights, contact us via our contact page.
9. Opt-Out & Data Deletion
Providing personal data through our forms is always optional. You may disable cookies at any time through our Cookie Policy preferences panel or your browser settings. To request deletion of any data we hold about you, please reach out via the contact page and we will act on your request within a reasonable timeframe.