Privacy Policy

1. Introduction and data controller

This policy explains how Valnexis ("we," "us," "our") collects, uses, and protects personal data submitted through this website. Valnexis acts as the data controller for the purposes of Indonesia's Law No. 27 of 2022 on Personal Data Protection (UU PDP). Questions about this policy can be sent to [email protected].

2. Data we collect

We collect data through two channels: information you submit directly through our contact form, and information gathered automatically through cookies once you've given consent for optional categories.

Data category	Purpose	Legal basis
Name, email, phone, message	Responding to your enquiry	Consent / contract steps
Cookie identifiers (optional categories)	Understanding site usage	Consent
Essential cookie data	Site function and security	Legitimate interest

3. Purposes and legal basis

We process personal data to respond to enquiries submitted through our contact form, to maintain the security and functionality of this site, and, where you've given consent, to understand how the site is used. We do not process personal data for any purpose beyond what is disclosed in this policy without seeking further consent.

4. Data sharing and third parties

We do not sell personal data. Data submitted through the contact form is used internally to respond to your message and is not shared with third parties except where required by law or where a specialist advisor is engaged with your prior knowledge as part of a service you've requested.

5. Retention

Contact form submissions are retained only as long as needed to respond to your enquiry and for a reasonable follow-up period afterward, after which they are deleted unless a longer retention period is required by law.

6. Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, or loss, appropriate to the scale of a small independent practice.

7. International transfers

Personal data collected through this site is processed and stored within Indonesia. If this changes, we will update this policy to describe the safeguards applied to any cross-border transfer, consistent with UU PDP requirements.

8. Your rights under UU PDP

Under Indonesia's Personal Data Protection Law, you have the right to access, correct, and request deletion of your personal data, to withdraw consent at any time, and to lodge a complaint with the relevant supervisory authority if you believe your data has been mishandled. To exercise any of these rights, contact us through the details on our Contact page.

9. Opt-out and data deletion

Providing personal data through our contact form is entirely optional; choosing not to provide it simply means we won't be able to respond to your enquiry. Cookies can be disabled or adjusted at any time through the Cookie Settings link in our footer or through your browser's own settings. To request deletion of data already submitted, reach out via our Contact page and we will act on the request promptly.