Privacy Policy
Draft for legal review. The final wording of this page must be approved by the company’s legal team before publication.
This website is informational. It has no contact form, no accounts and no payments, so it asks you for nothing. This policy explains the little personal data that still arises when you visit — server logs and, if you accept them, analytics cookies — and what rights you have over it under Law No. 27 of 2022 on Personal Data Protection (UU PDP).
Data we collect
You are never asked to submit anything on this site. Two things are nevertheless recorded:
- Server logs: like any website, our hosting provider records the IP address, browser user agent, requested page and timestamp of each request. This is automatic and is used to run and secure the site.
- Analytics cookies: only if analytics is enabled and you accept it in the cookie banner. These record how pages are used, in aggregate. If you decline, or if analytics is not configured, no analytics cookie is set.
What we do not collect
This site has no contact form, no newsletter sign-up, no job application form and no ordering. We do not build visitor profiles, we do not run advertising or tracking pixels, and we do not sell or share personal data.
If you contact us by email, phone or WhatsApp, that conversation happens outside this website and is handled under our normal business correspondence practices.
Why we process it
Server logs are processed on the basis of our legitimate interest in keeping the site available, diagnosing faults and protecting it from abuse.
Analytics data is processed only on the basis of the consent you give in the cookie banner, to understand how the site is used and improve it. Google Consent Mode denies every storage purpose by default, so nothing is stored before you choose.
Who we share it with
We do not sell your personal data and we do not share it for advertising.
Data is handled by the providers that operate this website on our behalf: our hosting provider (server logs) and Google Analytics (only after you accept analytics cookies). Some of these providers operate outside Indonesia.
How long we keep it
Server logs are kept for the period set by our hosting provider and are then rotated out. Analytics data is retained according to the Google Analytics retention setting in force at the time.
Your rights
Under UU PDP you may request access to your personal data, ask for it to be corrected or deleted, withdraw your consent, or object to processing.
You can withdraw analytics consent at any time by clearing this site’s data in your browser, which brings the cookie banner back.
To exercise any of these rights, contact us at halo@medikaaltiora.co.id.
Security
The site is served over HTTPS and applies a Content Security Policy and other protective headers. Because it collects nothing from you, there is no submitted data of yours for us to hold or lose.
Changes and contact
We may update this policy. The date above shows when it was last revised.
Questions about this policy or about your data: halo@medikaaltiora.co.id, or by post at Cluster Permata, Jl. Nilam 01 No 33, Jatisari, Bekasi, Indonesia.