Privacy policy

RLU is committed to protecting your personal information and being clear and transparent about what information we collect and how we will use it. This policy explains how any personal information we collect when you use our website or digital services, or that you provide to us, will be processed by us.  

Please read the following policy carefully to understand our views and practices regarding your personal information and how we will treat it.  

Summary 

1. Who we are and how we can be contacted? 

2. Our websites covered by this privacy policy  

3. About our Data Protection Officer  

4. Other policies and information we encourage you to read 

5. Information we may collect from you 

6. Information we collect about you from other places 

7. Where we store your personal information 

8. Sharing your personal information 

9. International Transfers of Personal Data 

10. How long will personal information be kept by us? 

11. Your rights under data protection legislation 

12. What can you do if you’re not happy? 

13. About Data Security 

14. Changes to our Privacy Policy 

1.Who we are and how we can be contacted? 

Our full company name is PT Royal Lestari Utama(“RLU”) and when you use our website and our services directly, we act as a Data Controller. 

If you need to contact us you have a number of options, you can: 

• email us at contact@rlu.co.id 

• You can send us a letter addressed to the Pondok Indah Office Tower 5 Lt. 18, Jalan Sultan Iskandar Muda Kav. V-TA, Jakarta Selatan, DKI Jakarta, Indonesia, 12310 

• You can also contact us using our contact form on our website ([to be completed]) 

• You can also contact us by telephone on  +62 5347050 

2.Our websites covered by this privacy policy  

The information set out in this policy is applicable to the website : rlu.co.id

3.About our Data Protection Officer  

While everyone at RLU is committed to protecting and respecting your privacy and we have a Data Protection Officer who deals with all aspect of personal data at RLU. You can contact contact@rlu.co.id. 

4.Other policies and information we encourage you to read 

While this Privacy Policy contains all the information you need on how we collect and use your personal information on our websites, there is information in some other places which we encourage you to read.  

Linked Platforms  

• Additional privacy policies 

  This is our main privacy policy for your use of website and digital services and products offered by RLU. However, there may be additional information in privacy policy for specific digital products and services. Please read these policies when you register or subscribe to these products and services. 

• Our Cookie Policy 

  When you use our website and other digital products and services provided by us, information can be collected through cookies to distinguish you from other users of our website and other digital products and services. We have a separate Cookie Policy which explains our use of cookies and the purposes for which we use them. We encourage you to Cookies policyread our Cookie Policy here. 

• Linked platforms 

  Our site may contain links to and from our websites and digital platforms of our partner networks, advertisers, affiliates and social media pages. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal information to these websites. 

5.Information we may collect from you 

This section sets out: 

• how we collect your personal information; 

• the categories of data that we collect; 

• a description of how we plan to use the information we collect;  

• the legal basis that we will rely on to process information collected; 

• how long we will hold the information collected; and 

• specific types of data 

We may collect and hold the following information about you: 

Voluntary Information 

When you provide us information (for example, the information set out in the scenarios above), in some cases we may ask you for additional, voluntary information. This information will be identified as optional and is used to help us better understand our customers and tailor our services to them.  

Statistical Information  

We also collect and use aggregated data such as statistical or demographic data (“Aggregated Data”). Aggregated Data may be derived from your personal information but does not reveal your identity in any way. For example, we may aggregate your Usage and Device Data to calculate the percentage of our website users accessing a specific feature of our website. Aggregated Data is used for our own business purposes only. 

Sensitive Personal Information 

While we do not request sensitive personal data, we do have sections on our websites where you can submit additional information, for example, when you submit a review. If you submit information on these free text section, only submit information you are comfortable providing and always bear in mind that it may be sensitive information. If you submit reviews or feedback for our website, please remember that this information will be visible to others users of our website.  

6. Information we collect about you from other places 

To enable us to provide you with our services, we may receive personal information about you from other sources, including: 

• We may receive information about you if you use any of the other websites we operate or the other products and/or services we provide. We also work closely with third parties (including, for example, business partners, sub-contractors in technical, payment services, analytics providers, search information providers and credit reference agencies) and may receive information about you from them. The legal basis for his processing is our legitimate interests, namely monitoring and improving our website, products and services. 

• Information from our web servers’ logs, for example information about your computer, such as your IP address, operating system and browser type. We may also collect information on the searches you carry out on our website and your interaction with communications we send you, for example, when you open email communications. (“Usage and Device Data”). This information is used by us for system administration and to analyse how people are using our websites and digital platforms. It also helps us to provide the best online infrastructure for your online activities. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website, products and services. 

• As mentioned above, we collect information using cookies or other similar technologies stored on your device about how you use our website, digital products and services. Cookies contain information that is transferred to your computer's hard drive. They help us to improve our websites and deliver a better and more personalised service to you. You can read our Cookie Policy here. 

• Our website may enable you to share your experience and connect with us through third party social networks such as Facebook and Twitter. We may collect this information from our social media sites, including likes, shares and tweets, and about the content on social networking sites. We do not control the privacy of the information you provide on social media networks and the privacy policies of those social media networks will apply when using their services. 

1. Where we store your personal information 

All information you provide to us is stored on secure servers.  

While we are committed to keeping your personal information secure, the transmission of information online via the internet is not completely secure. We, together with our service providers will do our best to protect your personal information but information provided is at your sole risk. 

8. Sharing your personal information 

We only share your personal data with people who have a need to know such information to perform their responsibilities. We may share your personal information with the following: 

• Within the RLU Group - we may disclose your personal information to any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries to the extent necessary for the same purposes of the initial processing set out in this policy.  

• Service Providers - RLU may share your personal information with selected service providers that RLU may use to process your request or provide its services to you. These service providers act as data processors on our behalf and provide IT and system administration services, such as hosting and email services and managing the ratings and reviews. These service providers are legally obligated to keep the personal information they may have received confidential and secure and to use your personal information the basis of our instructions only.  

We may also share your personal information with third parties: 

(i)For legal reasons 

If we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions and other agreements; or to protect the rights, property, or safety of the RLU Group, our customers, or others. In this context, we may disclose your personal information to our professional advisors who are under a duty of confidentiality.

(ii) On the basis of your consent 

Third parties can collect information about you on our website, products or services via cookies or similar technologies, in order for example to provide personalised ads or to make profiling. These cookies will be accepted by you in accordance with our Cookie Policy. You can read it here. 

9.International Transfers of Personal Data 

RLU is part of an international group with databases in the various countries in which it operates. RLU may transfer your personal data within the group to one of its databases or to its external partners located outside of your home country. 

As levels of data protection vary worldwide, we do not transmit your personal data to RLU group companies or to third-party companies outside of the European Union unless these companies offer the same or similar level of personal data protection as RLU. 

10. How long will personal information be kept by us? 

As a rule, we will not hold your personal information for any purpose or purposes for longer than is necessary to fulfil the purposes we collect it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For more specific retention periods, please see section 5 above.  

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. 

In some circumstances you can ask us to delete your data: see your right to be deleted below for further information. 

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you. 

11.Your rights under data protection legislation 

Your rights protected under prevailing data protection legislation in Indonesia, i.e. Law No. 27 of 2022 on Personal Data Protection, and its implementing regulations.  

12. What can you do if you’re not happy 

We are committed to protecting and respecting your privacy. However, if you’re not happy with how we collect or process your information or just want some further information on your rights, you can contact us in the following ways: 

• You can email us at contact@rlu.co.id 

• You can send us a letter addressed to the Pondok Indah Office Tower 5 Lt. 18, Jalan Sultan Iskandar Muda Kav. V-TA, Jakarta Selatan, DKI Jakarta, Indonesia, 12310 

• You can also contact us using our contact form on our website

We will work with you to resolve any issues you may have and aim to answer any question raised by you as soon as possible.  

1. About Data Security 

RLU has implemented measures to protect the privacy, security and integrity of your personal data. Access to personal data is restricted to those employees and service providers who need to know this information and who have been trained to comply with rules on confidentiality. 

RLU ensures that your personal data are not altered, damaged or accessed by unauthorised third parties. 

14.Changes to our Privacy Policy 

We may change our policy from time to time. Any changes we make to this policy in the future will be posted on this page. If you have an online account with us, we may notify you of any changes by email or through your account the next time you log on. 

Date: May 2025