Privacy Policy

Who this policy is from

This website, catlabs.id, is operated by Catlabs Digital, a trading name of PT. Kelas Cipta Sukses, Jakarta, Indonesia. For the purposes of Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP), PT. Kelas Cipta Sukses is the data controller for the processing described here.

Questions about this policy go to ainie@catlabs.id.

What this policy covers

This policy covers your visit to this website and the ways you can contact us from it.

It does not cover the marketing services we deliver for our clients. When we run campaigns, produce content or manage social accounts on a client's behalf, that client is the data controller and their own privacy policy applies. It also does not cover other websites we link to.

What the website collects

Nothing directly. Specifically, this site:

• sets no cookies and uses no browser storage;
• runs no analytics of any kind, so no Google Analytics, no Meta Pixel, no heatmaps and no session recording;
• contains no forms and no sign-up, so there is nothing to submit;
• loads no third-party resources. Fonts, images and styles are all served from this domain, so no outside provider is told that you visited.

You do not need to accept anything to read this site, which is why there is no cookie banner.

What our host processes

Like any website, this one is delivered by a hosting provider, and that provider processes technical data in order to serve pages and protect the site from attack. That means your IP address, the time of the request, the page requested, and your browser and device type.

This is ordinary server logging. We do not use it to build a profile of you, and we do not receive individual-level reports from it. Our hosting provider acts as our processor under a contract that binds it to protect the data. If you want to know who it is, ask us at ainie@catlabs.id.

Our legal basis is our legitimate interest in keeping the site available and secure.

When you contact us

If you email, call, or message us on WhatsApp or Instagram, we receive whatever you send. That is typically your name, your contact details, your company, and what you tell us about your enquiry.

We use it only to answer you and, if it goes further, to prepare a proposal and manage the working relationship. The legal basis is your request and, where it leads to work, the performance of a contract.

Note that WhatsApp and Instagram are operated by Meta, not by us. Messages you send through them are also processed under Meta's own terms and privacy policy, which we do not control.

How long we keep it

Enquiries that do not become projects are kept for up to 12 months, then deleted. Correspondence relating to actual engagements is kept for the life of the engagement and for as long afterwards as Indonesian tax and accounting rules require.

Who we share it with

We do not sell personal data, and we do not share it for anyone else's marketing.

Your data is handled by the service providers we use to run the business, namely our hosting provider, our email provider, and the messaging platforms named above. It may also be disclosed where Indonesian law requires it. That is all.

Where data goes

Our hosting provider and Meta both operate globally, so technical and message data may be processed on servers outside Indonesia. Where UU PDP requires it, we rely on those providers' contractual data-protection commitments for such transfers.

Your rights

Under UU PDP you have the following rights over your personal data:

Access

Ask what personal data of yours we hold, and get a copy.

Correction

Have inaccurate or incomplete data corrected.

Erasure

Ask us to delete your data, where we have no legal reason to keep it.

Withdraw consent

Withdraw consent at any time, where our processing rests on consent.

Object and restrict

Object to processing based on legitimate interest, or ask us to restrict it while a dispute is resolved.

Be informed of a breach

Be told, in the manner the law requires, if a breach affects your data.

To exercise any of these, email ainie@catlabs.id. We will respond within 3 × 24 hours as required by UU PDP, and may ask you to verify your identity first so we do not disclose data to the wrong person. You may also complain to the competent Indonesian supervisory authority.

Security

The site is served over HTTPS. We apply access controls to the accounts and inboxes that hold enquiry correspondence, and limit access to the people who need it. No system is perfectly secure, but we take reasonable and appropriate measures.

Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from children. If you believe a child has sent us personal data, contact us and we will delete it.

Changes to this policy

If we add anything that changes the picture, such as analytics, a contact form or an advertising pixel, we will update this page and change the date at the top before it goes live. It is worth re-reading if you visit again after a long gap.