Privacy note

1 · Who is responsible (data controller): TapakNusa, Indonesia. Privacy contact: [email protected].

2 · What we collect: via the RFQ form — company, country/port, product interest, volume band, work email, your optional notes, and the page you came from (UTM parameters stored with your inquiry for attribution). Via the seasonal-notes form — your work email, only after you submit it. We run no advertising cookies and no third-party trackers.

3 · Why (lawful bases): answering your quote request and keeping our own record of correspondence — steps toward a contract you asked for (PDP Law: pelaksanaan perjanjian; GDPR Art. 6(1)(b), and 6(1)(f) for general trade inquiries). Seasonal harvest notes are sent only with your explicit consent, which you may withdraw at any time (PDP Law: persetujuan; GDPR Art. 6(1)(a)).

4 · What we never do: sell, rent, or share your data with third parties for marketing; send newsletters without opt-in; profile you for ads.

5 · How long we keep it: inquiry records are kept while commercially relevant and reviewed at least once a year. Ask us to delete yours earlier — we will, unless a law requires us to keep it.

6 · Your rights (UU PDP & GDPR): access, correction, erasure, withdrawal of consent, and objection. Email [email protected] — target reply: 3 working days.

7 · If data is breached: we will notify affected people and the supervisory authority as Indonesia's PDP Law requires — our internal procedure follows the 3×24-hour rule (Law 27/2022 Art. 46).

8 · Data protection officer: not appointed at our current size; we monitor the appointment thresholds (including the 2025 Constitutional Court ruling that widened them) and will appoint one when required.

9 · Where data lives: in our own CRM database. It is not uploaded to advertising platforms, and it is never used to train AI models.

Last updated 2026-09-04. This page is the governing policy; material changes are announced on this page before they take effect.