Privacy Policy

1. Data Controller

PT HOMEX GLOBAL INTEGRATOR (“homeX”, “we”) is the controller of personal data collected through www.homex.co.id, within the meaning of Indonesian Law No. 27 of 2022 on Personal Data Protection (“PDP Law”).

Address: Priskilla Tower Lt. 6, Jl. Atang Sanjaya No.21, Benda, Kota Tangerang, Banten 15125.

Personal Data Protection Contact: WhatsApp +62 821 1818 998 · Email homex9998@gmail.com. This contact receives questions, rights requests and complaints about your personal data.

2. Data We Collect

Data you enter in the message form on the Contact page:

• Name and email address
• Phone/WhatsApp number (optional)
• Your message

Data saved automatically together with your message: your IP address and the date and time of submission.

Technical data collected automatically when you visit the site:

• Server access logs (IP address, time, requested page, status code and browser user agent) for security and visit statistics
• The hx_lang cookie and local storage item homex_lang_v2, to remember your language choice

We currently do not use third-party analytics such as Google Analytics, and we do not use advertising cookies.

Third-party services that may process your technical data: Google Maps (map on the Visit Showroom page), Google Fonts (Chinese-language font), and WhatsApp/Meta if you click a WhatsApp link. They have their own privacy policies.

3. Purposes

• Responding to your messages and inquiries and contacting you via WhatsApp, phone or email
• Preparing quotations, project proposals and material delivery
• Arranging and confirming showroom/warehouse visits
• Keeping the site secure and preventing spam and abuse
• Understanding site usage in aggregate (visit statistics)

We do not make solely automated decisions with legal effect on you, and we do not sell personal data.

4. Basis for Processing

You send a message through the form voluntarily. We process that data on the basis of your request and our legitimate interest in responding to it. The form currently has no separate consent checkbox.

Technical data is processed on our legitimate interest in keeping the site secure and working.

You may ask us at any time to stop processing or delete your data through the Personal Data Protection Contact (sections 7 and 13).

5. Retention

We keep form messages for as long as needed to follow up your request and as a record of business correspondence, and delete or anonymise them when no longer needed. Data linked to a transaction or contract is kept for as long as applicable law requires (e.g. tax and accounting).

• Server access logs: about 14 to 90 days

You may ask us to delete your data at any time through section 7.

6. Disclosure and Sharing

• Internal: authorised homeX staff who need to follow up your message (through the site’s account-protected admin panel)
• Service providers: Tencent Cloud (hosting and server infrastructure) and our email service provider if you contact us by email
• Third-party services you use yourself on this site, such as Google Maps, Google Fonts and WhatsApp (see section 2)
• Competent authorities where required by law

We do not sell or rent your personal data. Service providers may only use data on our instructions.

7. Your Rights

Under the PDP Law you have the right to:

• Be informed about how your data is processed
• Access and obtain a copy of your data
• Complete and/or update inaccurate data
• End processing, delete and/or destroy your data
• Withdraw consent where processing is based on consent
• Object to decisions based solely on automated processing
• Delay or restrict processing, and bring a claim and receive compensation as provided by law

Submit requests through the Personal Data Protection Contact in section 13. We will verify your identity and respond as soon as possible, and at the latest within 14 working days of receiving the request.

8. Security

We apply reasonable technical and organisational measures:

• Connections to our site use HTTPS
• The database is not exposed to the internet and can only be accessed from the server itself
• The site’s admin panel can only be accessed with authenticated accounts

In the event of a personal data protection incident we will notify the affected persons and the competent authority as required by applicable law.

9. Cross-Border Transfer

The servers of www.homex.co.id and its database are hosted on Tencent Cloud in the Jakarta region, Indonesia.

However, some of our team members are located in China and may access data (for example through the admin panel) from outside Indonesia. Such access is a cross-border transfer of personal data. Third-party services such as Google may also process technical data outside Indonesia.

To protect your data we:

• give access only to staff who need it for the purposes in section 3, through authenticated accounts and encrypted connections (HTTPS);
• ensure cross-border transfers have an equal or higher level of protection, or adequate and binding safeguards, as required by the PDP Law.

By submitting the form you acknowledge this cross-border access. You may object or ask for deletion through section 7.

10. Children

This site is intended for businesses and not for children under 18. We do not knowingly collect children’s data. If you know a child has sent us data, contact us so we can delete it.

11. Cookies and Similar Technologies

We use the hx_lang cookie (valid for about 1 year) and the browser local storage item homex_lang_v2 only to remember your language choice. We do not use advertising cookies. Google Maps on the Visit Showroom page may set its own technical cookies. You can clear cookies in your browser settings.

12. Changes

We may update this policy. The latest effective date is shown at the top of the page. Material changes will be announced on the site and, where required, your consent will be requested again.

13. Contact

PT HOMEX GLOBAL INTEGRATOR · Priskilla Tower Lt. 6, Jl. Atang Sanjaya No.21, Benda, Kota Tangerang, Banten 15125

Personal Data Protection Contact — WhatsApp: +62 821 1818 998 · Email: homex9998@gmail.com