Privacy Policy
Last Updated: 30 September 2026
This Privacy Policy describes how Eka Sri Design, operated by Eka Sri (referred to as "I", "me", or "my"), collects, uses, and handles personal data on the website ekasridesign.com. This policy is issued in compliance with Law Number 27 of 2022 concerning Personal Data Protection (Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi, or "UU PDP"), which governs the protection of personal data in the Republic of Indonesia.
Who is responsible for this website?
This website is operated by Eka Sri, an independent graphic and web design specialist. Studio address: Jl. Mediterania Blok P.1 No.6, Balikpapan, East Kalimantan, Indonesia. Contact email: [email protected]. As the sole operator, I am the data controller responsible for personal data processed through this website.
What personal data does this website collect?
This website collects the following categories of personal data:
Data you provide voluntarily: When you submit the contact form, I collect your name, email address, and the content of your message. This data is transmitted directly to my email inbox via the mailto protocol and is not stored in a server database.
Data collected automatically: Like most websites, ekasridesign.com may collect standard technical data through cookies and similar technologies, including your IP address, browser type, operating system, pages visited, and time spent on the site. This data is collected to understand how visitors use the website and to improve the user experience.
Cookie preference data: When you interact with the cookie consent notice on this website, your choice (accept or decline) is stored in a browser cookie to avoid showing the notice on every visit.
Why is this data collected and what is the legal basis?
I collect and process personal data only for specific, explicit purposes:
Contact form data is processed to respond to your enquiry. The legal basis is your voluntary consent, expressed when you submit the form after accepting the privacy policy checkbox.
Technical usage data is processed to maintain the technical operation of the website and to understand aggregate visitor behaviour. The legal basis is legitimate interest, as a functional and accessible website is necessary to provide the services described on this site.
Cookie preference data is stored based on your explicit consent when you interact with the cookie consent notice. You may withdraw this consent at any time by clearing your browser cookies or adjusting your preferences through the cookie settings link in the website footer.
How long is personal data kept?
Contact form messages sent via the mailto protocol are received in my email inbox and are not automatically deleted. I retain email correspondence for as long as necessary to manage the professional relationship, typically no longer than three years from the last interaction, after which I delete correspondence that is no longer relevant to active business.
Cookie preference data stored in your browser expires after twelve months and is then deleted automatically.
Technical analytics data, if collected through third-party tools, is retained according to the retention policy of the respective tool provider, typically between fourteen months and twenty-six months depending on the service.
Is personal data shared with third parties?
I do not sell, rent, or trade personal data to any third party. Data may be shared in the following limited circumstances:
Service providers: If this website uses third-party analytics or performance tools (such as Google Analytics), data may be processed by those providers under their own privacy policies. I take reasonable steps to ensure that any such providers operate under data processing agreements consistent with applicable law.
Legal obligations: Personal data may be disclosed to competent authorities if required by Indonesian law or by a valid legal order.
What rights do you have over your personal data?
Under UU PDP and applicable Indonesian regulations, you have the following rights regarding your personal data:
Right to access: You may request a copy of the personal data I hold about you.
Right to correction: You may request correction of inaccurate or incomplete personal data.
Right to deletion: You may request deletion of your personal data, subject to any legal retention obligations.
Right to withdrawal of consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Right to object: You may object to processing based on legitimate interest where your specific situation warrants it.
To exercise any of these rights, send a written request to [email protected]. I will respond within a reasonable time and in accordance with applicable law.
How is personal data protected?
This website uses HTTPS to encrypt data transmitted between your browser and the server. Contact form data sent via the mailto protocol is transmitted through your own email client using your email provider's security infrastructure. I take reasonable technical and organisational measures to protect personal data from unauthorised access, alteration, or disclosure.
No method of data transmission over the internet is entirely secure. While I take appropriate precautions, I cannot warrant absolute security of data transmitted to or from this website.
Does this website transfer data outside Indonesia?
This website may use third-party services whose servers are located outside Indonesia, including in the European Union or the United States. Where personal data is transferred outside Indonesia, such transfers are conducted in accordance with UU PDP requirements, which require that the recipient country provides a level of personal data protection equivalent to or greater than that provided under Indonesian law, or that appropriate safeguards are in place.
Does this website collect data from children?
This website is intended for use by adults and business representatives. I do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal data through this website, please contact me at [email protected] so that the data can be deleted.
Can this policy change?
This Privacy Policy may be updated from time to time to reflect changes in the website, services, or applicable law. When changes are made, the "Last Updated" date at the top of this page will be revised. Continued use of this website after changes are posted constitutes acceptance of the updated policy. For significant changes, I may provide a more prominent notice on the website.
How can you contact me about this policy?
For questions, requests, or complaints about how I handle your personal data, contact me at:
Eka Sri Design
Jl. Mediterania Blok P.1 No.6
Balikpapan, East Kalimantan, Indonesia
Email: [email protected]
Phone: +62 542 764164