1. Introduction
BritIndo Global Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website or engage our services, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy is governed by the laws of England and Wales. Disputes are subject to the exclusive jurisdiction of the courts of England and Wales.
2. Data We Collect
2.1 Information You Provide
- Name, email address, phone number, and company details submitted via contact or quote forms.
- Business requirements, product specifications, and correspondence.
- Payment information (processed securely via third-party payment providers; we do not store card details).
2.2 Information Collected Automatically
- IP address, browser type, device information, and pages visited.
- Cookies and similar tracking technologies (see our Cookie Policy).
3. How We Use Data
We use your personal data to:
- Provide, manage, and improve our services.
- Respond to enquiries and communicate with you about your orders.
- Process payments and maintain financial records.
- Send service-related notifications and, where consented, marketing communications.
- Comply with legal and regulatory obligations.
- Detect and prevent fraud or misuse of our services.
4. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR:
- Contract: Processing necessary to perform a contract with you or take pre-contractual steps.
- Legitimate Interests: Processing necessary for our legitimate business interests, where not overridden by your rights.
- Legal Obligation: Processing required to comply with applicable law.
- Consent: Where you have given explicit consent, such as for marketing emails.
5. Data Sharing
We do not sell your personal data. We may share it with:
- Suppliers and partners in Indonesia and other countries, to the extent necessary to fulfil your order.
- Service providers such as payment processors, IT providers, and logistics partners acting as data processors under our instruction.
- Regulatory authorities where required by law, court order, or government request.
6. International Transfers
Your data may be transferred to and processed in countries outside the UK, including Indonesia. Where such transfers occur, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner's Office (ICO), to protect your data to the same standard as required under UK GDPR.
7. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Typically:
- Client and transaction records: 7 years (for tax and legal compliance).
- Marketing consent records: Until consent is withdrawn.
- Website analytics data: Up to 26 months.
8. Your Rights (GDPR)
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure ("right to be forgotten") in certain circumstances.
- Restriction of processing in certain circumstances.
- Data portability — receive your data in a structured, machine-readable format.
- Object to processing based on legitimate interests or for direct marketing.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact our Data Protection Officer (see Section 10). You also have the right to lodge a complaint with the ICO at ico.org.uk.
10. Contact DPO
For any privacy-related queries, to exercise your rights, or to raise a concern, please contact our Data Protection Officer:
- Email: [email protected]
- Address: Data Protection Officer, BritIndo Global Ltd, England, United Kingdom
We will respond to all requests within 30 days in accordance with UK GDPR requirements.