Privacy Policy
Terakhir diperbarui: 18 Februari 2026
webexpress.id berkomitmen untuk melindungi privasi Anda. Privacy Policy ini menjelaskan bagaimana kami mengumpulkan, menggunakan, menyimpan, dan melindungi informasi pribadi Anda saat menggunakan layanan kami.
Jenis Layanan yang Kami Tawarkan
Layanan webexpress.id mencakup (namun tidak terbatas pada):
- Company Profile Website
- Personal Branding Website
- Landing Page Campaign
- Blog / Content Hub
- Portofolio / Showcase Website
Model pembelian layanan:
- Paket Beli Putus (One-Time Purchase)
- Paket Include Hosting (Subscription Tahunan)
1. Informasi yang Kami Kumpulkan
1.1 Informasi yang Anda Berikan
Data Kontak:
- Nama lengkap
- Email address
- Nomor telepon
- Alamat (jika diperlukan untuk invoicing)
Data Bisnis:
- Nama perusahaan/brand
- Industri/bidang usaha
- Informasi bisnis untuk project brief
Data Project:
- Brief requirements
- Brand materials (logo, guidelines, color palette)
- Content (text, images, videos)
- Referensi website & kompetitor list
- Domain access credentials (jika diperlukan)
Data Pembayaran:
- Informasi invoice
- Metode pembayaran
- Bank account details (untuk refund purposes)
1.2 Informasi yang Dikumpulkan Otomatis
Website Analytics:
- IP address
- Browser type & version
- Device type & OS
- Pages visited & time spent
- Referral source
Cookies:
- Session cookies (functionality)
- Analytics cookies (Google Analytics)
- Preference cookies (settings)
1.3 Data Berdasarkan Model Pembelian
Paket Include Hosting (Subscription Tahunan):
Kami collect data tambahan karena manage server Anda:
- Server access logs
- Uptime & performance metrics
- Backup data (weekly, 30-day retention)
- SSL certificate information
- Security monitoring data
Paket Beli Putus (One-Time Purchase):
Kami collect data minimal:
- Project development data
- Communication logs (30 hari support period)
- Payment records
2. Bagaimana Kami Menggunakan Informasi Anda
2.1 Penyediaan Layanan
- Penyediaan layanan website: Company Profile, Personal Branding, Landing Page Campaign, Blog/Content Hub, Portofolio/Showcase (sesuai scope yang disepakati)
- Project execution: Brand positioning (bila termasuk), copywriting, design, development, dan deployment website
- Communication: Updates progress, approvals, revisions, support
- Payment processing: Generate invoice, confirm payment, process refund
- Hosting & maintenance (Include Hosting): Server management, monitoring, backups, updates
2.2 Peningkatan Layanan
- Analytics: Understand user behavior untuk improve service quality
- Performance monitoring: Optimize load times, fix bugs, enhance UX
- Quality assurance: Testing, compliance dengan technical standards
2.3 Marketing & Communication
- Newsletter (Opt-in only): Tips, case studies, service updates
- Promotional offers: Discounts, package deals (dengan consent)
- Portfolio showcase: Display website (dengan approval, lihat Section 5.2)
- Testimonials: Dengan explicit permission
2.4 Legal & Compliance
- Contract management: Terms & Conditions, agreements
- Dispute resolution: Investigation dan resolution
- Legal obligations: Comply dengan hukum Indonesia
3. Data Retention
3.1 Active Projects
Data disimpan selama project active + support period.
3.2 Paket Beli Putus
- Project data: Dihapus setelah 30 hari support period berakhir (kecuali client request backup)
- Communication logs: 90 hari (untuk reference)
- Payment records: 7 tahun (required by Indonesian tax law)
3.3 Paket Include Hosting
- Project data: Selama subscription aktif + 30 hari post-suspension
- Server logs: 90 hari rolling retention
- Backups: 30-day retention policy
- Payment records: 7 tahun (tax compliance)
3.4 Marketing Data
- Newsletter subscribers: Hingga Anda unsubscribe
- Portfolio showcase: Hingga Anda request removal
3.5 Legal Holds
Jika ada dispute/investigation, data dapat di-retain lebih lama untuk legal compliance.
4. Keamanan Informasi Anda
4.1 Security Measures
Encryption:
- SSL/TLS untuk data transmission
- Encrypted storage untuk sensitive data
Access Control:
- Hanya tim authorized yang access client data
- Need-to-know basis
- Two-factor authentication untuk critical systems
Server Security (Include Hosting):
- Firewall protection
- Regular security patches
- Intrusion detection
- DDoS protection (best effort)
Backup & Recovery:
- Regular automated backups
- Encrypted backup storage
- Disaster recovery plan
4.2 Confidentiality
Sesuai Terms & Conditions Section 12.1, kami menjaga kerahasiaan:
- Business information & trade secrets
- Proprietary data
- Login credentials
- Financial information
Kami TIDAK share data Anda tanpa consent, kecuali:
- Required by law (court order, investigation)
- Third-party service providers dengan NDA (see Section 5.1)
5. Sharing Informasi dengan Third Parties
5.1 Service Providers (Necessary for Service)
Kami share data minimal dengan:
Payment Gateway:
- Untuk process payment
- Tidak store full payment details
Hosting Provider (Include Hosting):
- Cloud infrastructure (server management)
- CDN & DNS services
Analytics Tools:
- Google Analytics (anonymized data)
- Dapat di-opt-out
Email Services:
- Communication & support (encrypted)
Domain Registrars:
- Jika assist dengan domain setup
Semua third parties terikat NDA dan privacy standards.
5.2 Portfolio & Marketing (Dengan Permission)
Public Showcase:
- Display website di portfolio (dapat opt-out)
- Create case study (dengan explicit permission)
- Testimonials (dengan approval)
Anda berhak request removal kapan saja.
5.3 Business Transfers
Jika webexpress.id di-acquire/merger, client data dapat di-transfer ke new entity (dengan notice).
6. Cookies & Tracking
6.1 Jenis Cookies
Essential Cookies:
- Session management
- Security features
- Required untuk functionality
Analytics Cookies:
- Google Analytics
- User behavior understanding
- Dapat di-opt-out
Preference Cookies:
- Language settings
- Theme preferences
6.2 Cookie Management
Anda dapat:
- Disable cookies via browser settings
- Opt-out Google Analytics (browser extension)
- Request cookie deletion (contact kami)
7. Hak Anda atas Data Pribadi
7.1 Akses & Portabilitas
- Request akses: Copy data pribadi kami
- Export data: Machine-readable format
- Response time: 14 hari kerja
7.2 Koreksi & Update
- Update data yang outdated/incorrect
- Correction untuk data yang salah
7.3 Penghapusan (Right to be Forgotten)
- Request deletion data pribadi
- Exceptions: Data required by law (tax, disputes)
- See Section 3 untuk retention periods
7.4 Objection & Restriction
- Opt-out marketing: Unsubscribe kapan saja
- Restrict processing: Limit penggunaan data
- Object profiling: Kami tidak use automated decision-making
7.5 Cara Exercise Hak
Contact: privacy@webexpress.id dengan subject "Data Privacy Request"
8. Transfer Data Internasional
Saat ini: Semua data disimpan di Indonesia (server Indonesia).
Jika future international providers:
- Adequate protection (Standard Contractual Clauses)
- Notice kepada Anda
- Comply dengan Indonesian data protection laws
9. Children's Privacy
Layanan tidak ditujukan untuk anak <18 tahun. Kami tidak knowingly collect data dari minors. Jika discovered, akan dihapus immediately.
10. Changes to Privacy Policy
Kami dapat update Policy ini:
- Notice: 7 hari via email sebelum effective
- Posted: Updated version di webexpress.id/privacy
- Continued use: Acceptance of new policy
Version history available upon request.
11. Third-Party Services & Hosting
11.1 Paket Include Hosting
Kami bertanggung jawab:
- Server uptime & performance (99.5% target)
- Server security & patches
- SSL management
- Backup management
Kami TIDAK bertanggung jawab:
- Domain renewal (client responsibility)
- Third-party downtime (Google Analytics, etc.)
- DDoS attacks (beyond capacity)
- Content legality issues
11.2 Paket Beli Putus
Client bertanggung jawab penuh:
- Server/VPS management
- Uptime & performance
- SSL installation & renewal
- Backups & disaster recovery
- Security (firewall, OS updates)
Kami TIDAK bertanggung jawab:
- Server downtime/issues
- Hosting bugs/errors
- Data loss (client responsible untuk backups)
11.3 Both Models
- Client responsible untuk third-party subscriptions (domain, plugins, APIs)
- Third-party service terms apply separately
- Kami tidak liable untuk third-party disruptions
12. Contact & Data Protection
Untuk pertanyaan tentang Privacy Policy atau exercise privacy rights:
Email: privacy@webexpress.id
WhatsApp: +62 823 7336 8664
Website: webexpress.id/privacy
Data Protection Officer (DPO): [To be appointed]
Response Time: Maksimal 14 hari kerja untuk privacy requests
13. Consent
Dengan menggunakan layanan webexpress.id:
- Anda acknowledge telah membaca Privacy Policy ini
- Anda consent untuk collection, use, storage sesuai policy ini
- Anda dapat withdraw consent kapan saja (may affect service delivery)
Marketing Communications: Opt-in required. Kami tidak spam.
14. Relationship with Terms & Conditions
Privacy Policy ini complement Terms & Conditions kami (Section 12).
Dalam hal conflict, Terms & Conditions prevails.
Terima kasih telah mempercayai webexpress.id. Kami berkomitmen melindungi privasi dan data Anda dengan standar keamanan tertinggi.
Last Updated: 18 Februari 2026 | Version: 1.0