Privacy Policy

Your privacy is important to us. It is mbpr.cc's policy to respect your privacy regarding any information we may collect from you across our website, mbpr.cc, and other sites we own and operate. This Privacy Policy is designed to help you understand how we collect, use, disclose, and/or process the personal data you have entrusted to us, in line with applicable data protection laws, including Indonesia's Personal Data Protection (PDP) Law and relevant security standards.

1. Information We Collect

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, on the basis of your explicit consent (as required by Article 15 of the PDP Law), and with your knowledge. We also let you know why we're collecting it and how it will be used.

The types of information we collect may include general and specific personal data (as described in Articles 1 & 2 of the PDP Law), such as:

• Log data (e.g., IP address, browser type, operating system, date and time of access)
• Information you provide directly (e.g., name, email address when signing up for a newsletter, contacting us, or using other interactive features)
• Cookies and similar tracking technologies (see Cookies section below)
• Location data (if you provide permission)

2. How We Use Your Information

We use the information we collect in various lawful ways and consistent with the purpose of collection, including to:

• Provide, operate, and maintain our website and services
• Improve, personalize, and expand our website and services
• Understand and analyze how you use our website
• Develop new products, services, features, and functionality
• Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes (with your consent where required)
• Send you emails
• Find and prevent fraud and other illegal activities

3. Log Files

mbpr.cc follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users' movement on the website, and gathering demographic information.

4. Cookies and Web Beacons

Like any other website, mbpr.cc uses 'cookies'. These cookies are used to store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users' experience by customizing our web page content based on visitors' browser type and/or other information. You can manage your cookie preferences through your browser settings.

5. Security of Your Information

We are committed to protecting the confidentiality and security of your personal data (as mandated by Article 35 of the PDP Law). We only retain collected information for as long as necessary to provide you with your requested service or as required by law. What data we store, we'll protect within commercially and technically acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use, or modification.

These protection efforts include implementing appropriate technical and organizational security measures, including but not limited to:

• Access Control: Implementing strict access controls to ensure that only authorized personnel can access personal data, in line with principles such as those outlined in NIST SP 800-53 AC-3.
• Cryptographic Protection: Using encryption and other cryptographic techniques to protect sensitive personal data during transmission and at rest, in accordance with cryptographic protection policies (referencing ISO 27001 A.10).
• Security Logging and Monitoring: Maintaining secure system activity logs and conducting monitoring to detect and respond to security incidents promptly, to prevent security logging and monitoring failures that could lead to personal data breaches (referencing OWASP A09).
• Regular training for our employees on the importance of data protection and security practices.
• Periodic risk assessments to identify and address potential vulnerabilities.

However, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee the absolute security of your personal data.

6. Your Rights Regarding Your Data

Depending on your jurisdiction and in accordance with applicable laws like Indonesia's PDP Law, you may have certain rights regarding the personal data we collect about you through your interaction with our website and use of cookies. These rights may include:

• The right to access: You may have the right to request copies of the personal data we hold about you.
• The right to rectification: You may have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete. (This is more relevant if you collect directly identifiable information beyond cookies).
• The right to erasure (right to be forgotten): You may have the right to request that we erase your personal data, under certain conditions. This includes data collected via cookies.
• The right to withdraw consent: For data processing based on consent (such as for certain types of cookies), you have the right to withdraw your consent at any time. You can manage your cookie preferences as described in our Cookie Banner or through your browser settings.
• The right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data infringes applicable data protection laws.

If you wish to exercise any of these rights, or have questions about the data we collect, please contact us at hello@mail.mbpr.cc. Please note that for requests related to data collected via cookies or server logs, we may need further information from you to help identify and locate your data, as this data is often not directly linked to a specific named individual in our systems if you have not otherwise provided identifiable information to us.

7. Links to Other Sites

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.

8. Your Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

9. Changes to Our Privacy Policy

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

10. Contact Us

If you have any questions about this Privacy Policy, or if you wish to exercise your rights regarding your personal data, please contact us: hello@mail.mbpr.cc