Privacy Policy
Your privacy matters to us. This policy explains how we collect, use, and protect your personal information.
Last Updated: May 2026
Published by
PT INDO SHIP GLOBAL — licensed freight forwarder
Kendal, Central Java, Indonesia
Email: support@indoshipglobal.com · Hours: Mon–Fri, 09:00–21:00 WIB
Effective Date: May 14, 2026
Legal Framework
IndoShip Global complies with the Indonesian Personal Data Protection Law (UU PDP No. 27 Tahun 2022), effective October 2024. This law governs the collection, processing, storage, and transfer of personal data of Indonesian citizens and residents.
UU PDP Compliance Summary
- Legal Basis: Contract performance (Art. 20), legitimate interests (Art. 22), and explicit consent (Art. 21).
- Data Controller: PT INDO SHIP GLOBAL
- DPO Contact: privacy@indoshipglobal.com
- Registration: We maintain a Record of Processing Activities (RoPA) as required by UU PDP Article 31.
- Cross-Border Transfers: Conducted under contractual safeguards (Art. 56 UU PDP) and adequacy assessments.
1. Information We Collect
We collect information you provide directly, automatically when you use our Services, and from third-party sources.
1.1 Information You Provide
- Account: Full name, email, phone, password.
- Shipping: Delivery addresses, recipient details, customs documentation.
- Payment: Billing info (processed securely by third parties).
- Communication: Support messages, feedback, reviews.
1.2 Automatically Collected
- Device & browser info, IP address, usage patterns.
- Approximate geographic location (from IP only).
- Server logs and error reports.
2. How We Use Your Information
- Service Delivery: Processing shipments, warehouse management, customer support.
- Account Management: Authentication, preferences, security.
- Communication: Order updates, notifications, marketing (with consent).
- Improvement: Analytics to improve our services.
- Security: Fraud prevention and unauthorized access detection.
- Legal Compliance: Customs declarations, tax obligations, legal requests.
4. Third-Party Sharing
We do not sell your personal information. We share data only with:
- Shipping Partners: Courier companies for delivery.
- Payment Processors: For transaction processing.
- Customs Authorities: Legal requirement for international shipments.
- Service Providers: Email, analytics, hosting (contractually protected).
5. Data Retention
- Account Data: Duration of account + 2 years after closure.
- Transaction Records: 7 years (tax compliance).
- Communications: 3 years.
- Server Logs: 90 days.
- Package Photos: 6 months after delivery.
6. Your Rights
- Access: Request a copy of your data.
- Rectification: Correct inaccurate data.
- Erasure: Request deletion (subject to legal obligations).
- Portability: Receive data in machine-readable format.
- Object: Object to processing for marketing.
- Withdraw Consent: At any time where consent-based.
Contact support@indoshipglobal.com to exercise any right. Response within 30 days.
6.1 Account Deletion (Right to Erasure)
You can delete your account yourself at any time from your dashboard under Settings → Danger zone, in line with the right to erasure (GDPR Article 17). Deletion erases your profile, saved addresses, notifications and marketing data, and permanently disables your login. Order and payment records are retained in anonymized form for statutory accounting retention — they can no longer be linked to you. Deletion may be deferred while packages are in our custody or orders are still in progress. For manual deletion or other GDPR requests, email support@indoshipglobal.com.
6.2 Data Export (Right to Portability)
You can download a copy of the personal data we hold for your account at any time from your dashboard under Settings → Download my data, in line with the right to data portability (GDPR Article 20). The export is a JSON file covering your profile, orders, packages, wallet history, saved addresses and personal-shopper requests.
7. Data Processing Agreement (DPA)
For our business partners, courier providers, and enterprise clients, IndoShip Global operates under a Data Processing Agreement that ensures:
- Processor Obligations: All third-party processors are contractually bound to process personal data only on documented instructions from IndoShip Global.
- Sub-Processors: Any engagement of sub-processors requires prior written authorization and equivalent data protection commitments.
- Security Measures: Processors must implement technical and organizational measures (TOMs) appropriate to the risk, including encryption, access controls, and regular audits.
- Breach Notification: Processors must notify IndoShip Global of any personal data breach within 24 hours of discovery.
- Data Deletion: Upon termination of services, processors must delete or return all personal data unless required by law to retain it.
- Audit Rights: IndoShip Global reserves the right to audit processor compliance annually or upon reasonable suspicion of non-compliance.
To request a copy of our standard DPA, email privacy@indoshipglobal.com.
8. Children's Privacy
Our Services are not intended for individuals under 18. We do not knowingly collect data from children.
9. Data Security
- SSL/TLS encryption for all data transmission.
- Encrypted storage of sensitive data.
- Regular security audits.
- Access controls on need-to-know basis.
- Two-factor authentication available.
10. International Data Transfers
As an international service, data may be transferred to countries where our courier partners operate. We ensure appropriate safeguards through contractual agreements.
11. Changes to This Policy
We may update this policy periodically. Material changes will be announced via website notice and email notification.
12. Contact Us
- General Support: support@indoshipglobal.com
- Privacy / DPO: privacy@indoshipglobal.com
- Live Chat: Available via our website
- Hours: Monday – Friday, 09:00 AM – 09:00 PM WIB
Still have questions?
Related Pages
Was this page helpful?