Last updated: 29 September 2026.

This policy explains what personal data the mardaya.id website collects, why, who else processes it, how long it is kept, and how you can exercise your rights under Indonesian Law No. 27 of 2022 on Personal Data Protection (the "PDP Law").

Data controller

PT MARDAYA, trading as MARDAYA Technology Solutions ("we"), based in Jakarta, Indonesia, is the controller of personal data collected through this site. Questions and requests about your personal data: info@mardaya.id or +62 812 8736 0014.

Data we collect

We only collect what you enter yourself in a form:

• Contact form — name, company, email, phone/WhatsApp number (optional), topic, and message.
• WeighX demo request form — name, company, work email, phone/WhatsApp number (optional), industry, number of weighbridges, and message.
• Document download form — name, work email, and company (optional).

With each submission, the system stores the page the form was sent from, the site language, your browser type (user agent), and a hash of your IP address — not the address itself — to prevent automated submissions and abuse.

This site sets no analytics or marketing cookies. The cookies it does use are described in the Cookie Policy.

If you contact us through the WhatsApp button, that conversation takes place on WhatsApp and is governed by WhatsApp's privacy policy. We only receive the number and messages you send.

Purposes and legal basis

We process this data to:

• answer your questions and follow up on demo, consultation, or quotation requests;
• send you the documents you asked for;
• protect the site from spam and abuse.

The legal basis is the consent you give when submitting a form, and acting on your request before any contract is made (Article 20(2) of the PDP Law). We do not sell personal data, do not use it for advertising, and do not make solely automated decisions about you.

Who else processes the data

• Hostinger International Ltd. — site and database server, located in Jakarta, Indonesia.
• Brevo (Sendinblue SAS, France) — email delivery, used to forward form submissions to our team and for reply emails.
• Cloudflare, Inc. (United States) — DNS for the mardaya.id domain and forwarding of email sent to @mardaya.id addresses.

Brevo and Cloudflare process data outside Indonesia. In line with Article 56 of the PDP Law, we choose providers bound by data protection standards equal to or higher than the PDP Law, under a data processing agreement with us.

How long data is kept

Form submissions are deleted automatically 24 months after they are sent. Emails we exchange with you are kept for as long as the business relationship and applicable legal obligations require. Records of access to submission data are also deleted after 24 months.

Security

The site uses encrypted connections (HTTPS). Submission data can only be opened by staff whose role allows it, and every time staff open, export, or delete a submission, that action is logged. If a personal data protection failure occurs, we notify you and the competent authority in writing within 3 × 24 hours (Article 46 of the PDP Law).

Your rights

Under Articles 5 to 13 of the PDP Law, you have the right to:

• be informed of our identity and the purpose of processing;
• complete, update, or correct your data;
• access and obtain a copy of your data;
• end processing and have your data deleted;
• withdraw your consent;
• delay or restrict processing;
• object to solely automated decisions;
• obtain your data in a commonly used, machine-readable format;
• sue for and receive compensation for unlawful processing of your data.

Send requests to info@mardaya.id from the same address you used in the form. Requests for correction, access, withdrawal of consent, and restriction are handled within 3 × 24 hours of receipt, as required by Articles 30, 32, 40, and 41 of the PDP Law.

Changes to this policy

This policy may be updated when the way we process data changes. The version in force is always the one published on this page.