Privacy Policy

The Data Controller legally responsible for the processing of personal data gathered via the digifolks.id website and our official communication channels is:

Legal Entity Name: Arunika Vistara Digital

Brand & Operational Identity: Digifolks

Registered & Operational Office: Yogyakarta, Special Region of Yogyakarta, Indonesia

Official Privacy Email: marketing@digifolks.id / digifolkstech@gmail.com

Official Telephone / WhatsApp: +62 858-1441-2099 / +62 895-4010-88270

In the B2B context, Arunika Vistara Digital serves as a Data Controller for inbound enterprise inquiries and business relationships, and operates as a Data Processor when building custom systems governed by separate bilateral Master Services Agreements.

We process personal data strictly where an authorized lawful ground exists under Article 20 of Law No. 27 of 2022 (PDP Law), specifically:

Explicit Consent: When you voluntarily submit an inquiry form, schedule a consultation, or request technical proposals.

Contractual / Pre-contractual Necessity: Processing is required to prepare technical architecture estimates, Non-Disclosure Agreements (NDAs), or Statements of Work (SOWs) prior to entering into a formal agreement.

Legal Obligation: Compliance with statutory obligations under Indonesian corporate, electronic transaction, and tax laws.

Legitimate Interests: Maintaining server cyber hygiene, mitigating malicious automated submissions, and ensuring high-availability web delivery without overriding your fundamental privacy rights.

We adhere to the principle of data minimization, collecting only information vital for B2B technological consultation and commercial engagements:

Information collected is utilized exclusively for legitimate business objectives:

1. Fulfilling Consultation Requests: Communicating with your team to discuss engineering requirements, architectural feasibility, and custom software roadmaps.

2. Commercial & Legal Preparation: Generating customized technical proposals, Statements of Work (SOWs), Non-Disclosure Agreements (NDAs), and SLAs.

3. Ongoing Business Communication: Delivering updates regarding mutual projects, meeting schedules, or pertinent operational service alerts.

4. Infrastructure Integrity & Performance: Safeguarding against DDoS incidents, preventing brute-force or bot abuse on contact forms, and ensuring ultra-fast page delivery.

5. Regulatory & Audit Compliance: Fulfilling accounting, commercial record-keeping, and legal compliance mandates under Indonesian jurisdiction.

Our web properties utilize cookies and local storage tokens for strictly controlled technical functions:

Strictly Necessary Cookies: Essential for fundamental navigation, language switching (ID/EN), and session authentication verification.

Performance & Analytics Cookies: Gather aggregated, anonymized insights regarding page load times and user engagement patterns to refine our technical information architecture.

You retain the authority to configure or decline cookies through your web browser preference settings. Please note that disabling essential cookies may impact specific user interface behaviors.

Arunika Vistara Digital maintains transparent, ethical handling of all information:

1. No Commercial Data Trading: We do not sell, rent, or lease your personal information to third-party data brokers or marketing intermediaries under any circumstance.

2. Vetted Infrastructure Providers: Data may be securely processed by premier infrastructure services (e.g., encrypted cloud hosting, transactional email relays like Resend) bound by stringent contractual data protection terms and certified security credentials (SOC 2, ISO 27001).

3. Law Enforcement Disclosures: We disclose records only where legally mandated by an authentic court order, warrant, or valid governmental subpoena under Indonesian law.

We deploy robust administrative, organizational, and technical security safeguards to prevent unauthorized interception, alteration, disclosure, or loss:

Encryption In Transit: All communications between your client device and our infrastructure are encrypted utilizing TLS 1.3.

Least-Privilege Access Controls: Access to prospective enterprise correspondence is restricted strictly to authorized solutions architects and legal leads protected with multi-factor authentication (2FA).

Data Retention Period: Inbound inquiry records are retained for the duration needed to resolve your technical consultation or for up to three (3) years following your last correspondence, after which records are permanently purged unless retention is required by prevailing statutory legislation.

Under Indonesian Law No. 27 of 2022 (PDP Law), you hold explicit legal rights regarding your personal records:

1. Right to Information: Gain full transparency concerning the processing purposes and identities of recipients.

2. Right of Access & Portability: Request confirmation and structured digital copies of your personal data.

3. Right to Rectification: Require correction and updating of inaccurate, outdated, or incomplete records.

4. Right to Erasure / Deletion: Demand the permanent removal of your data where original processing purposes are fulfilled or upon consent withdrawal.

5. Right to Withdraw Consent: Revoke previously granted processing consent at any time without invalidating prior lawful processing.

6. Right to Restrict Processing: Suspend processing activities while disputed data accuracy is verified.

To exercise any of these statutory rights, please submit a formal request to marketing@digifolks.id. Our compliance team verifies your identity and processes verified requests within 3 business days.

Certain underlying cloud infrastructure nodes may reside in tier-1 enterprise data centers located outside the territory of the Republic of Indonesia. Whenever cross-border transmission occurs, Arunika Vistara Digital verifies that the destination jurisdiction enforces equivalent or higher standards of data governance, and binds all vendors to Standard Contractual Clauses (SCC) in complete compliance with Article 56 of the PDP Law.

We reserve the right to amend this Privacy Policy periodically to reflect technological shifts, operational updates, or legal enactments. Revisions become effective upon publication with the updated effective date reflected at the header. Continued usage of our website and services denotes acceptance of the revised terms.