Privacy Policy

Effective date: 1 June 2026
Regulation: Law No. 27 of 2022 on Personal Data Protection (UU PDP)

1. Who We Are

ESI Indonesia (Energy Savings Insurance Indonesia) is the controller of your personal data as defined under UU PDP. For any privacy-related questions, contact us at via Contact page.

2. Data We Collect

We only collect data relevant to our services:

Data you provide: name, email address, phone number, company name, and messages submitted through our contact form.
Technical data: IP address, browser type, pages visited, and visit duration (via Google Analytics).

We do not collect sensitive data such as health data, biometrics, or financial information through this website.

3. Purposes and Legal Basis for Processing

We process your data for the following purposes:

Responding to your enquiries — based on pre-contractual interest.
Sending service information and newsletters — based on your explicit consent.
Analysing site usage to improve our services — based on our legitimate interest.
Fulfilling applicable legal obligations — based on legal obligation.

Your data will not be used for purposes other than those stated above without new consent from you. We do not sell your personal data to any party.

4. How Long We Retain Data

We retain data only as long as necessary. Contact form data is retained for 2 years. Newsletter data is retained for the duration of an active subscription plus 1 year. Technical log data is retained for a maximum of 12 months. After these periods, data is permanently deleted or anonymised.

5. Data Sharing and International Transfers

We may share your data with technology service providers that support our site operations (such as hosting and analytics services), under binding data processing agreements. We do not sell your data.

Some providers operate servers outside Indonesia (e.g. Google). Such transfers are carried out with adequate contractual safeguards in accordance with UU PDP standards.

6. Your Rights

Under UU PDP, you have the right to:

Access — view what data we hold about you.
Rectification — request correction of inaccurate data.
Erasure — request deletion of your data (right to be forgotten).
Portability — receive your data in a machine-readable format.
Objection — object to processing for specific purposes, including direct marketing.
Withdrawal of consent — withdraw your consent at any time.

Submit your request via Contact page. We will respond within 14 working days. You also have the right to file a complaint with the National Personal Data Protection Commission (Komnas PDP) if your rights are not fulfilled.

7. Data Security

We apply SSL/TLS encryption, access controls, and system monitoring to protect your data. In the event of a data breach affecting your rights, we will notify you and the relevant authority within 72 hours of becoming aware of the incident, in accordance with Article 46 of UU PDP.

8. Changes to This Policy

If we update this policy, the “Effective date” above will be revised. For changes that significantly affect your rights, we will notify you via email or a notice on the website.

9. Contact Us

ESI Indonesia — Personal Data Protection Officer

Email: [Contact us via Contact page]
WhatsApp: [Contact us via WhatsApp hyperlink/button]