Privacy Policy

1. Introduction and Commitment to Data Protection

At Infolani, we understand that your privacy is not just a legal requirement but a fundamental trust. We are committed to protecting your personal data with military-grade encryption protocols and transparent practices. Our privacy framework is built on the principles of data minimization, purpose limitation, and user empowerment, ensuring that every piece of information you share with us is handled with the utmost care and respect.

This policy outlines our comprehensive approach to data collection, processing, and storage across all our digital platforms, including our primary operations at Jalan Gatot Subroto 324, Medan, Indonesia. Whether you are interacting with our technical services or contacting our support team, we apply the same rigorous standards to safeguard your digital footprint.

2. Information We Collect and Processing Basis

We collect specific data points necessary to deliver our professional services. This includes identity information such as your full name and professional title, contact details including email addresses and phone numbers like +62 8997407873, and technical data such as IP addresses, browser types, and session durations. Our technical team analyzes this information to optimize service delivery and maintain system security.

The legal basis for processing your data falls into three categories: contractual necessity (when you engage our services), legitimate interest (for security and analytics), and explicit consent (for marketing communications). You can withdraw consent at any time by contacting our Data Protection Officer at info@infolani.com, and we will process your request within one business day.

3. Data Usage and Service Fulfillment

Your information serves multiple critical functions within our infrastructure. We use contact data to respond to technical inquiries submitted through our forms, process service requests, and deliver project updates. Technical analytics help us identify system bottlenecks, improve user experience, and ensure compatibility across different devices and platforms.

For clients located in Medan and throughout Indonesia, we may use address information to coordinate on-site consultations or verify business registration details. All data processing operations are logged and audited regularly to maintain compliance with Indonesian electronic transaction regulations and international standards.

4. Third-Party Sharing and International Transfers

Infolani maintains strict control over data sharing. We do not sell your personal information to advertisers or data brokers. Limited third-party sharing occurs only with essential service providers: cloud hosting infrastructure, payment processors (if applicable), and professional advisors (legal, accounting). Each partner undergoes rigorous security assessments and signs comprehensive data processing agreements.

Any international data transfers outside Indonesia are protected by standard contractual clauses and adequacy decisions. We maintain data sovereignty principles and prefer local infrastructure providers where possible, though some technical services may involve servers in Singapore or other regional hubs with equivalent protection standards.

5. Security Measures and Encryption Standards

We implement enterprise-grade security controls including end-to-end encryption for data in transit (TLS 1.3) and at rest (AES-256). Our infrastructure is monitored 24/7 by automated systems detecting anomalies, unauthorized access attempts, and potential vulnerabilities. Access to personal data is restricted to authorized personnel via multi-factor authentication and role-based permissions.

Regular penetration testing is conducted by independent security firms, and we maintain a bug bounty program for ethical hackers. In the unlikely event of a data breach affecting your information, we will notify you and relevant authorities within 72 hours as required by applicable law, along with remediation steps and protective measures.

6. Your Rights and Data Control Options

You possess comprehensive rights over your personal data under applicable privacy regulations. These include the right to access (receive a copy of all data we hold), rectification (correct inaccurate information), erasure (delete your data subject to legal retention periods), and portability (export your data in machine-readable format). You also have the right to object to processing based on legitimate interests.

To exercise these rights, contact our privacy team at info@infolani.com or call +62 8997407873 during business hours (Mon-Fri: 9:00-18:00). We respond to all requests within 30 days and provide detailed explanations of any processing activities. For complex requests, we may extend the period by an additional 60 days with written notification.

7. Retention Periods and Data Destruction

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Business contact information is kept for the duration of our professional relationship plus seven years for legal and accounting purposes. Technical logs and analytics data are anonymized after 12 months or deleted completely if not required for security analysis.

When data is no longer needed, we employ secure deletion methods including cryptographic shredding and physical destruction of backup media. Our data retention schedule is reviewed annually to ensure compliance with evolving regulations and to minimize our data footprint proactively.

8. Updates and Contact Information

This Privacy Policy may be updated to reflect changes in our services or legal requirements. We will notify registered users of significant changes via email and post notices on our website. The current version is always available at infolani.com/privacy-policy.php with a clear revision history showing what changed and when.

For privacy-related questions, concerns, or to file a complaint, please reach out to our dedicated privacy team. We are committed to resolving any issues promptly and transparently. You may also contact your local data protection authority if you believe your rights have been violated, though we encourage you to contact us first so we can address your concerns directly.