Privacy Policy
1. Introduction
Purework respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Indonesia's Personal Data Protection Law (UU PDP No. 27 of 2022) and other applicable regulations.
2. Information We Collect
2.1. Information you provide directly:
Full name and job title
Email address and phone/WhatsApp number
Company/UMKM name and industry
Project requirements (technical needs, budget, timeline)
Supporting documents (briefs, logos, content materials)
2.2. Information collected automatically:
IP address and approximate geographic location
Device type and browser information
Pages visited on our website
Access timestamps and session duration
Cookies and similar tracking technologies
2.3. Information from third parties:
Public profile information (LinkedIn, your company website) for verification
Data from communication platforms (WhatsApp Business, email providers)
3. How We Use Your Information
3.1. We use your data to:
Respond to inquiries and provide consultations
Prepare tailored project proposals
Execute agreed-upon projects
Send invoices and payment documentation
Provide project updates and technical support
Send newsletters or relevant information (with your consent)
Analyze website performance to improve our services
3.2. We will not:
Sell your personal data to any party
Use your data for purposes beyond those stated without permission
Share your data with third parties except as necessary for project operations (see Section 5)
4. Legal Basis for Processing
Under Indonesia's PDP Law, we process data based on:
Consent: When you fill out our contact form or communicate with us
Contractual necessity: To perform projects you have engaged us for
Legitimate interest: Website analytics and service improvement (using anonymized data where possible)
5. Sharing with Third Parties
5.1. We may share limited data with:
Hosting providers (Vercel, AWS, or others) to operate our website and applications
Payment platforms (Midtrans, Xendit, or banks) for transaction processing
Communication platforms (WhatsApp Business API, email providers) for project coordination
Analytics tools (Google Analytics, Plausible) to understand website traffic
5.2. All third parties are contractually obligated to maintain data confidentiality in accordance with our agreements.
5.3. We may disclose data if required by:
Court order or lawful authority
Law enforcement requests under Indonesian law
6. Data Storage and Security
6.1. Data is stored on cloud servers with SSL/TLS encryption and firewall protection.
6.2. Internal access is restricted to team members directly involved in your project.
6.3. Sensitive credentials and passwords are encrypted using bcrypt or equivalent algorithms.
6.4. Retention periods:
Active project data: For the duration of the project + 1 year after completion
Communication records: 2 years for reference and archival purposes
Analytics data: Anonymized after 26 months (per Google Analytics policy)
7. Cookies and Tracking Technologies
7.1. Our website uses:
Essential cookies: For basic website functionality (forms, navigation)
Analytics cookies: Google Analytics or privacy-focused alternatives to understand visitor behavior
Preference cookies: To remember language or theme settings
7.2. You may disable cookies through your browser settings, though some website features may not function optimally.
8. Your Rights as a Data Subject
Under Indonesia's PDP Law, you have the right to:
8.1. Right to Access — Request information about the personal data we hold about you.
8.2. Right to Correction — Request correction of inaccurate or incomplete data.
8.3. Right to Deletion — Request deletion of your data (subject to legal or contractual obligations that may prevent deletion of certain records).
8.4. Right to Restrict Processing — Request limitation on how we use your data in certain circumstances.
8.5. Right to Data Portability — Request your data in a machine-readable format to transfer to another provider.
8.6. Right to Object — Object to the use of your data for direct marketing purposes.
8.7. Right to Withdraw Consent — Withdraw your consent to data processing at any time.
To exercise these rights, email contact@purwoko.dev with the subject line "Data Subject Request." We will respond within 14 business days.
9. Cross-Border Data Transfers
9.1. As a freelance team using international cloud services (Vercel, Google, AWS), your data may be processed on servers located outside Indonesia.
9.2. We ensure that international third parties maintain data protection standards equivalent to those required by Indonesian PDP Law.
10. Children's Privacy
10.1. Our services are intended for businesses and adult individuals. We do not knowingly collect data from individuals under 17 years of age.
10.2. If you believe a child has provided us with personal data, please contact us immediately for deletion.
11. Changes to This Privacy Policy
11.1. We may update this Privacy Policy to reflect changes in our services or regulations.
11.2. Material changes will be announced via email or website banner at least 14 days before taking effect.
12. Privacy Contact
For questions, complaints, or requests regarding privacy:
Email: contact@purwoko.dev
13. Consent
By accessing the Purework website, filling out our contact form, or using our services, you confirm that:
You have read and understood this Privacy Policy
You consent to the processing of your data as described herein
You are at least 17 years old or have permission from a legal guardian