Privacy Policy

Contact Information

Kepulauan Roast

Jl. Kemang Raya No. 58

Bangka, Jakarta Selatan 12730

Indonesia

Phone: +62 21 7179 4823

Email: [email protected]

Last Updated: December 2, 2024

At Kepulauan Roast, we are committed to protecting your privacy and handling your personal information with care and transparency. This Privacy Policy explains how we collect, use, protect, and manage your personal data when you visit our website or use our services.

Information We Collect

How We Use Your Information

We use the personal information we collect for the following purposes:

• • Service Delivery: To respond to your inquiries, provide information about our services, and facilitate coffee sourcing relationships
• • Communication: To send you updates, newsletters, and information about Indonesian coffee sourcing (with your consent)
• • Website Improvement: To analyze how visitors use our website and improve user experience, content, and functionality
• • Security: To protect our website, prevent fraud, and ensure the security of our systems and users
• • Legal Compliance: To comply with applicable laws, regulations, and legal obligations
• • Marketing: To provide relevant information about our services and Indonesian coffee opportunities (only with your consent)

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• • Consent: When you provide explicit consent for specific processing activities
• • Contractual Necessity: When processing is necessary to fulfill our services to you
• • Legitimate Interest: When we have a legitimate business interest that does not override your privacy rights
• • Legal Obligation: When required by law or to comply with regulatory requirements

How We Share Your Information

We respect your privacy and do not sell your personal information. We may share your data in the following limited circumstances:

• • Service Providers: With trusted third-party service providers who assist us in operating our website, conducting business, or providing services to you (such as email service providers, analytics platforms, and hosting services)
• • Coffee Producers: When facilitating sourcing relationships, we may share relevant information with Indonesian coffee producers and farms
• • Legal Requirements: When required by law, court order, or governmental authority, or when necessary to protect our rights or the safety of others
• • Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business

All third parties we work with are contractually obligated to protect your personal information and use it only for the purposes we specify.

How We Protect Your Data

We implement appropriate technical and organizational security measures to protect your personal information:

• • Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers
• • Access Controls: Limited access to personal data, granted only to authorized personnel who need it to perform their duties
• • Secure Storage: Personal data is stored on secure servers with regular backups and monitoring
• • Regular Reviews: We regularly review and update our security practices to address emerging threats
• • Breach Notification: In the event of a data breach, we will notify affected individuals and relevant authorities as required by law

While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but are committed to maintaining reasonable safeguards.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• • Contact information and correspondence are retained for as long as you maintain a relationship with us, plus a reasonable period afterward for record-keeping purposes
• • Website analytics data is typically retained for 26 months or as specified by our analytics providers
• • Marketing communications data is retained until you withdraw consent or unsubscribe
• • Legal and regulatory compliance may require us to retain certain data for specific periods

When personal data is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

Your Privacy Rights

You have the following rights regarding your personal data:

• • Right to Access: You can request access to the personal data we hold about you
• • Right to Rectification: You can request correction of inaccurate or incomplete personal data
• • Right to Erasure: You can request deletion of your personal data in certain circumstances
• • Right to Restrict Processing: You can request limitation of how we process your data
• • Right to Data Portability: You can request a copy of your data in a structured, commonly used format
• • Right to Object: You can object to processing of your personal data for certain purposes
• • Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the information at the top of this page. We will respond to your request within a reasonable timeframe and in accordance with applicable data protection laws.

Your Rights and Opt-Out Instructions

You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:

• • Avoid filling out contact forms, account registrations, or any data-submitting features on our website
• • Disable cookies through your browser settings (see our Cookie Policy for detailed instructions)
• • Contact us directly to request the deletion of any previously shared personal data

We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided at the top of this page. We will process your request promptly and in accordance with applicable data protection regulations.

International Data Transfers

As our business operates internationally and we use service providers located in various countries, your personal information may be transferred to and processed in countries outside of Indonesia. When we transfer data internationally, we ensure appropriate safeguards are in place:

• • We work only with service providers who comply with applicable data protection standards
• • We implement contractual protections such as Standard Contractual Clauses where appropriate
• • We ensure data is processed in accordance with this Privacy Policy regardless of location

Children's Privacy

Our website and services are directed toward business professionals in the coffee industry and are not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party websites you visit. This Privacy Policy applies only to information collected through our website.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• • We will update the "Last Updated" date at the top of this policy
• • Significant changes will be communicated through our website or by email
• • Continued use of our website after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.