Skip to main content
Dewata Tech LogoDEWATA TECH

Privacy Policy

How we collect, use, and protect your personal data.

Last updated: September 15, 2026

1. Introduction

Dewata Tech ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website dewatatech.com (the "Website") or engage our services.

This policy is governed by Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP) and, where applicable to our international clients, the European Union's General Data Protection Regulation (GDPR). Browsing the Website does not mean you consent to data processing: analytics and marketing cookies run only if you choose them in the cookie banner, and the legal basis for each kind of processing is set out in section 5.

2. Information We Collect

We may collect the following types of information:

  • Personal Data: Name, email address, phone number, and company name provided through our contact form or WhatsApp inquiries.
  • Usage Data: Pages visited, time spent on pages, referring URLs, browser type, and device information collected automatically when you browse our Website.
  • Device Information: IP address, operating system, browser type and version, and screen resolution.
  • Communication Data: Messages, feedback, and correspondence you send us via contact forms, email, or WhatsApp.

3. How We Collect Information

We collect information through the following methods:

  • Contact Forms: When you submit an inquiry through our Website's contact form.
  • WhatsApp Communication: When you initiate contact via our WhatsApp button or direct messaging.
  • Cookies and Similar Technologies: Small data files placed on your device to enhance your browsing experience.
  • Google Analytics 4: We use Google Analytics 4 for Website usage statistics. The data is pseudonymous (no name, but linked to a device identifier). Google tags load on every page under Consent Mode: before you choose in the cookie banner, every category is set to denied and the tags send only cookieless pings. Analytics cookies are set only after you accept them.

4. How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your inquiries and provide customer support.
  • To deliver, maintain, and improve our services as agreed upon in project engagements.
  • To analyze Website usage patterns and improve user experience.
  • To send marketing communications, newsletters, or updates, only with your explicit consent.
  • To comply with legal obligations under Indonesian law.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you voluntarily provide your data through our contact forms or opt in to marketing communications.
  • Contractual Necessity: When processing is necessary to perform a contract or project engagement with you.
  • Legitimate Interest: For Website security and the cookieless pings Google tags send before you choose in the cookie banner, where that interest is not overridden by your rights. Analytics and marketing cookies run only with your consent.
  • Legal Obligation: When processing is required to comply with applicable Indonesian or international laws.

6. Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We may share your information with the following categories of service providers:

  • Google LLC: Google Analytics 4, Google Tag Manager, and Google Ads for analytics and ad measurement. Google tags load under Consent Mode and send only cookieless pings until you choose; analytics and ad cookies follow your choice in the cookie banner. Google processes that data under its own privacy policy.
  • Meta Platforms: WhatsApp when you contact us. Meta Pixel in the browser and the Conversions API from our server for ad measurement, both only if you accept marketing cookies. Meta processes that data under its own privacy policy.
  • TikTok: TikTok Pixel in the browser and the Events API from our server for ad measurement, both only if you accept marketing cookies. TikTok processes that data under its own privacy policy.
  • Microsoft: Microsoft Clarity for session replay and heatmaps, only if you accept analytics cookies. Microsoft processes that data under its own privacy policy.
  • Hosting and content providers: Vercel for the Website and Sanity for the blog, each processing data under its own privacy policy.
  • Payment Processors: If applicable, for processing project payments securely.

Hosting providers and payment processors process data to provide their services to us. Google, Meta, TikTok, and Microsoft process data under their own privacy policies and may use it for the purposes those policies describe, including their own services and advertising. That is why Meta Pixel, the Conversions API, TikTok Pixel, and the Events API run only if you accept marketing cookies.

7. International Data Transfers

The providers we use run their servers outside Indonesia: Vercel (Website hosting), Sanity (blog content), Supabase (application databases), and Google, Meta, TikTok, and Microsoft for analytics and ad measurement. Your data is therefore transferred to and processed outside Indonesia. We make those transfers under Article 56 of UU PDP, with the safeguard being each provider's contractual data processing terms.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Contact inquiry data: Retained for up to 2 years after the last communication.
  • Project-related data: Bookkeeping records and contracts are kept for 10 years under Article 28 paragraph 11 of the General Tax Provisions and Procedures Law (UU KUP). Other project data is kept for as long as the service in place needs it, then deleted or returned to you.
  • Analytics data: Kept in pseudonymous form (no name, but linked to a device identifier), following our Google Analytics 4 retention setting, at most 14 months.
  • Marketing consent data: Retained until you withdraw your consent.

After the retention period, your data will be securely deleted or anonymized.

9. Your Rights

Under UU PDP (Articles 5 to 15) and, where applicable, GDPR (Articles 15 to 22), you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Deletion: Request the deletion of your personal data, subject to legal retention requirements.
  • Right to Restrict Processing: Request that we limit how we process your data.
  • Right to Data Portability: Request your data in a structured, commonly used format.
  • Right to Withdraw Consent: Withdraw your consent at any time without affecting the lawfulness of prior processing.
  • Right to Object: Object to the processing of your data for direct marketing purposes.

To exercise any of these rights, please contact us at weida.dewatatech@gmail.com. We act on your request within 3x24 hours of receiving it, the deadline UU PDP sets for, among others, access requests (Article 32 paragraph 2) and ending processing (Article 40 paragraph 2).

10. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to enhance your experience:

  • Essential Cookies: Required for the Website to function properly (e.g., theme preference, language selection).
  • Analytics Cookies: Used by Google Analytics 4 and Microsoft Clarity for usage statistics, active only if you accept them in the cookie banner. Until then, Google tags send only cookieless pings.
  • Marketing Cookies: Used by Meta Pixel, TikTok Pixel, and Google Ads to measure advertising, active only if you accept them in the cookie banner.

You can change your choice at any time with the "Manage Cookies" button in the Website footer, or through your browser settings. Each tool is described in the Cookie Policy. You may also install the Google Analytics Opt-out Browser Add-on. Disabling essential cookies may affect some Website functionality.

11. Data Security

We implement appropriate technical and organizational security measures to protect your personal data, including encrypted communications (HTTPS/TLS), secure hosting infrastructure, access limited to the people doing the work, and multi-factor authentication on the admin accounts we manage. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our Website and services are not directed at individuals under the age of 17. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete such information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

  • Company: PT Dewata Artificial Intelligence (Dewata Tech)
  • Email: weida.dewatatech@gmail.com
  • Phone: +62 851-7975-5016
  • Location: Bali, Indonesia