Privacy Policy

1. Introduction

This Privacy Policy describes how Talone ("Talone", "we", "us", "our") collects, uses, and protects personal data submitted through the website located at talone.info (the "Site"). By using the Site, you acknowledge that you have read and understood this policy.

Talone is a nutritional food-supplement brand registered and operating in Indonesia. This policy applies to all visitors and correspondents who interact with the Site. It does not apply to third-party websites or services linked from the Site.

2. Data Controller

The data controller for personal data collected through this Site is:

Talone
Jl. Sabang No. 73
10250 Jakarta, Indonesia
[email protected]
+62 21 4502 8731

3. Data We Collect

We collect the following categories of personal data:

• Contact form data: Name, email address, subject, and message content submitted through the contact form on the Site.
• Technical data: IP address, browser type, operating system, referring URL, pages visited, and time of visit. This data is collected automatically through server logs and analytics tools.
• Cookie data: Data stored in cookies placed on your device. See our Cookie Policy for full details.

We do not collect sensitive categories of personal data (such as financial information, identification numbers, or health records) through this Site.

4. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to enquiries submitted through the contact form.
• To maintain and improve the technical performance of the Site.
• To analyse aggregate visitor behaviour for the purpose of understanding how the Site is used.
• To comply with applicable legal obligations.

We do not use your personal data for automated decision-making, profiling, or direct marketing without your explicit consent.

5. Legal Basis for Processing

We process your personal data on the following legal bases under applicable data protection law:

• Legitimate interests: Operating the Site, responding to correspondence, and maintaining site security.
• Consent: Where you have given consent through the cookie banner for analytics and non-essential cookies.
• Legal obligation: Where processing is required to comply with applicable Indonesian and international data protection regulations.

6. Data Retention

Contact form submissions are retained for a period of twenty-four (24) months from the date of submission, after which they are permanently deleted. Technical and server log data is retained for a period of twelve (12) months. Cookie data is retained in accordance with the periods set out in the Cookie Policy.

Where retention beyond these periods is required by applicable law or regulatory obligation, data will be retained for the required period and deleted thereafter.

7. Third-Party Data Processors

We share data with a limited number of third-party processors in connection with operating the Site. These include:

• Hosting provider: Server infrastructure hosting the Site and processing associated log data.
• Analytics provider: Aggregate, anonymised visitor analytics (only where analytics cookies are accepted).

We do not sell personal data to third parties. All third-party processors are contractually bound to process data only in accordance with our instructions and applicable data protection law.

8. International Data Transfers

Some third-party processors we use may process data outside of Indonesia. Where this occurs, we take steps to ensure that appropriate safeguards are in place, consistent with applicable data protection requirements.

9. Your Rights

You have the following rights in relation to your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You may request correction of inaccurate or incomplete data.
• Erasure: You may request deletion of your personal data where there is no legal basis for continued retention.
• Restriction: You may request that we restrict processing of your data in certain circumstances.
• Objection: You may object to processing based on legitimate interests.
• Withdrawal of consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within thirty (30) days of receiving your request.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include HTTPS encryption for data in transit and access controls for data at rest. No transmission over the internet is completely secure, and we cannot guarantee the absolute security of data transmitted to the Site.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The revised policy will be posted on this page with an updated revision date. Continued use of the Site following a revision constitutes acceptance of the updated policy.

12. Contact

For questions or requests relating to this Privacy Policy, contact us at:
[email protected] · +62 21 4502 8731 · Jl. Sabang No. 73, 10250 Jakarta, Indonesia