// privacy policy

Privacy Policy

Effective 9 October 2026 · version 1.0

This document explains what data we collect on this site, why, and what rights you have. It is drafted with reference to Indonesia's Law No. 27 of 2022 on Personal Data Protection (the PDP Law). The Indonesian version of this page is the primary text; if the two differ, the Indonesian version prevails.

01Data controller

The controller of personal data is datascience.co.id.
Contact for personal-data matters: office@datascience.co.id.

02Data we collect

Source	Data	Notes
Waitlist form	Name, email or WhatsApp number, business name and type, point-of-sale system, answer about stock problems, acceptable price range, willingness to be interviewed, sign-up time, consent version	Only what you enter yourself. Fields other than name, contact and consent may be left blank.
Sandbox demo (CSV/Excel upload)	None	Files are processed in your browser and are not sent to our server.
Visit statistics	Event counts per day (for example “sandbox tried”)	Anonymous: no IP address, no tracking cookies, no visitor identity.
Form spam protection	A one-way daily random code (hash) derived from the IP address	The real IP address is not stored. The code is deleted automatically within 2 days.

The home page sets no tracking cookies and loads no scripts or fonts from third parties. The blog at /blog/ runs on WordPress with a number of plugins (including for SEO and analytics) that may set cookies or collect visit statistics according to their settings.

03Purpose and legal basis

The legal basis for processing is the consent you give by ticking the box in the form. The purposes are:

to contact you about the beta programme and the waitlist;
needs research, including interviews if you agree to one;
to understand your problems and a fair price range so that the product and plans fit.

We do not use your data for automated decisions that have legal effects on you, and we do not sell or rent it.

04Who can access it

We do, through the office@datascience.co.id mailbox and the sign-up file on the server.
The hosting provider (Hostinger), where the site and the sign-up file are stored.
The email provider (Google Workspace), which receives sign-up notifications in our mailbox.

These providers may process data on servers located outside Indonesia. We choose providers that apply industry-standard security.

05How long we keep data

Sign-up data is kept for the duration of the beta programme and for at most 24 months after you sign up, unless you ask for earlier deletion. After that the data is deleted or anonymised.

06Your rights

You have the right to:

know about and access the personal data we hold about you;
have inaccurate data corrected;
request deletion or destruction of your data;
withdraw your consent at any time (withdrawal does not affect processing that has already taken place);
object to processing, and ask for a copy of your data in a commonly used format.

Send your request to office@datascience.co.id from the contact you used when signing up, so we can confirm the data is yours. We aim to respond within 14 working days.

07Security

Sign-up files are stored outside the server's public folder, with restricted access permissions.
Email notifications are sent over an encrypted connection (TLS) using an app password, not the main account password.
No system is completely immune. If a breach affects you, we will notify you and the competent authorities as required by applicable rules.

08Children

This service is intended for adult business owners. We do not knowingly collect data from children.

09Changes to this policy

If the policy changes in a material way, we will update this page and its effective date. Changes that affect the basis on which we process your data will be put to you for consent again.