Privacy Policy
Last updated 30 July 2026
In short
We collect only what you send us through the contact form, plus the minimum technical records needed to keep the site running. There is no advertising tracking, no behavioural profiling, and your data is never sold or rented to anyone.
This policy follows Indonesia's Law No. 27 of 2022 on Personal Data Protection (UU PDP).
Who is responsible
The data controller is PT Digi Harmony Fusion, registered in Jakarta, Indonesia, which operates neuraltan.com. For all personal data matters, write to hello@neuraltan.com.
What we collect
From the form you fill in. Your name, email address, company name (optional), the service area you are interested in, and your message. Required fields are marked clearly; the rest may be left blank without any reduction in service.
We do not ask for phone numbers, identity numbers, financial details, or the categories of personal data the law treats as specific — health, biometric, or criminal records. If you write such details into the message field yourself, we remove them from our records.
Automatically, when you open the site. Your IP address is stored as a one-way hash to stop automated repeat submissions; the original address is neither stored nor recoverable. We also read the country code set by the delivery network in front of the site, purely to choose which language to show first.
Cookies. Only two, both necessary for the site to work: one remembers your language choice, one records whether the language switcher needs to be shown. There are no advertising cookies and no third-party analytics cookies — which is why there is no intrusive cookie consent banner.
Lawful basis
| Data | Purpose | Basis |
|---|---|---|
| Form submissions | Replying and preparing a proposal | Your own request, as a step before entering an agreement |
| Hashed IP | Preventing automated repeat submissions | Legitimate interest in keeping the service available |
| Language cookie | Showing the site in the language you chose | Necessary to deliver the service you asked for |
What we use it for
Only to reply to you, prepare a proposal, and keep a record of the commercial conversation. We do not use it for automated decisions with legal effect on you, and we send no marketing unless you subscribe to it yourself.
Who else can see it
Your data is not sold, rented, or exchanged. It is accessible only to:
- Our own staff who need it to reply to you;
- The infrastructure providers hosting this site and database, who process data on our
- Authorities, where required by applicable law.
instructions and are bound by confidentiality terms;
If we add a third-party processor in future, this page is updated before that processing begins.
Where data is stored
Data is held on servers within Indonesia. Should a transfer abroad ever become necessary, it will only be to a country with an equivalent level of protection, or under equivalent contractual safeguards, as required by UU PDP.
How long we keep it
| Type | Retention |
|---|---|
| Enquiries that do not become work | 12 months from the last exchange |
| Enquiries that become work | For the duration of the engagement, plus 5 years for tax and evidentiary purposes |
| Hashed IP records | 30 days |
After that, data is deleted or anonymised so it can no longer be linked to you.
Your rights
Under UU PDP you have the right to know what data we hold, obtain a copy, correct what is wrong, erase your data, withdraw consent, restrict or object to processing, and lodge a complaint about how we handle it.
Send requests to hello@neuraltan.com. We respond within 14 working days. There is no charge for reasonable requests. Where we decline one, we put the reason in writing.
If there is a breach
If personal data protection fails, we notify you and the supervisory authority within 72 hours of becoming aware, as UU PDP requires. That notice states which data was affected, what we have already done, and what you should do.
Children
This site and these services are intended for business use and are not directed at anyone under 18. We do not knowingly collect children's data.
Changes
If this policy changes materially, the update date below changes with it and we explain what changed. Quietly keeping an old version is the same as having no policy at all.
---
This policy follows common practice and refers to Law No. 27 of 2022. It is not legal advice. For questions about how the law applies to your circumstances, consult a licensed legal adviser.