Privacy Policy

1. Scope

This policy applies to kamiaja.com and to Kamiaja products such as Booking and Commerce. A product may publish additional privacy terms; where it does, those terms supplement this policy for that product.

2. Information we collect

Depending on how you interact with us, we may collect:

• Contact information — such as your name, email address, phone or WhatsApp number when you contact us.
• Account information — such as your name, business name, email address, and login credentials when you sign up for a product.
• Business data — information you or your customers enter into a product, such as reservations, products, orders, and customer records.
• Usage data — such as pages visited, features used, device and browser type, IP address, and approximate location, collected automatically.
• Payment information — processed by our payment providers; we do not store full card numbers.

3. How we use information

• To provide, operate, and maintain our products.
• To create and manage accounts and authenticate users.
• To respond to enquiries and provide customer support.
• To send service-related notices, such as security alerts and changes to our terms.
• To understand usage and improve our products and website.
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with legal obligations.

4. Legal bases for processing

We process personal data on the basis of your consent, the performance of a contract with you, compliance with legal obligations, protection of vital interests, and our legitimate interests in operating and improving our services — as permitted by applicable law.

5. Business data we process for customers

When a business uses a Kamiaja product, it controls the data it enters about its own customers (for example, guest or shopper details). Kamiaja processes that data on the business’s behalf and according to its instructions. Individuals who want to exercise rights over such data should contact the business directly; we will assist the business as required.

6. How we share information

We do not sell personal data. We share it only:

• With service providers that help us run our services — such as hosting, email delivery, analytics, and payment processing — under confidentiality and data-protection obligations.
• When required by law, regulation, legal process, or a lawful request from authorities.
• To protect the rights, property, or safety of Kamiaja, our users, or the public.
• In connection with a merger, acquisition, or sale of assets, subject to this policy.
• With your consent or at your direction.

7. International transfers

Our service providers may process data outside Indonesia. When we transfer personal data internationally, we take steps to ensure it receives a level of protection consistent with applicable law.

8. Data retention

We keep personal data only as long as necessary for the purposes described in this policy, to comply with legal obligations, resolve disputes, and enforce agreements. When it is no longer needed, we delete or anonymise it.

9. Security

We use technical and organisational measures — such as encryption in transit, access controls, and monitoring — to protect personal data. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a data breach where required by law.

10. Your rights

Subject to applicable law, you may have the right to:

• Access and obtain a copy of your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Withdraw consent at any time, without affecting prior processing.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.

11. Cookies

kamiaja.com currently uses only cookies and storage that are strictly necessary for the site to function. If we introduce analytics or other non-essential cookies, we will update this policy and ask for consent where required.

12. Children

Our services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and revise the date above; for material changes we will provide additional notice where appropriate.

14. Contact us

For questions about this policy or to exercise your rights, contact us through the channels listed in the contact section of our home page.