Privacy Policy
This policy explains how PT Duta Cakra Asia handles personal data collected through seko.bike, under Indonesia's Personal Data Protection Law (Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi, "UU PDP"). We collect as little as we can. If you only browse the site, we collect nothing beyond what is needed to load it.
1. Who is responsible
PT Duta Cakra Asia ("DCA", "we") is the data controller (Pengendali Data Pribadi) for seko.bike.
Tarum Barat 1 A4 No.90, Cikarang, Jawa Barat, Indonesia 17530
Privacy contact: hello@seko.bike
2. What we collect and why
Your email address, if you sign up
- Purpose: to email you about Seko's launch: the launch date, models, pricing and when ordering opens. Nothing else.
- Legal basis: your explicit consent (UU PDP Article 20(2)(a)), given when you submit the signup form. We record the date you signed up and the version of this policy you agreed to.
Your contact details, if you send us an inquiry
- What: your name, email address, WhatsApp number, city, the topic you pick and your message.
- Purpose: to reply to your inquiry, by email or WhatsApp, and to follow up on that same request (for example a purchase, service or dealer question). We do not add you to the launch list unless you sign up separately.
- Legal basis: taking the steps you ask for before a possible purchase or other agreement (UU PDP Article 20(2)(b)), and our legitimate interest in answering questions sent to us (Article 20(2)(f)).
Technical data, when any page loads
- What: your IP address, browser and device type, the page requested and the time of the request.
- Purpose: to deliver the site, keep it secure, stop spam and fix problems.
- Legal basis: our legitimate interest in running a safe, working website (UU PDP Article 20(2)(f)). We do not use this data to identify you, build a profile of you or advertise to you.
Apart from what you choose to send us in an inquiry, we do not collect your name, phone number or location. We never collect payment details or any specific personal data (data pribadi yang bersifat spesifik), and we make no automated decisions about you.
3. Cookies
We do not use cookies for tracking or advertising. Cloudflare's security features, including the Turnstile spam check on the signup and inquiry forms, may use strictly necessary technical signals to tell people from bots.
4. Who processes data for us
Cloudflare, Inc. hosts the site, stores the signup list and inquiries, protects the site from attacks and runs the Turnstile spam check. It processes data only to provide that service to us.
The Turnstile check on the signup and inquiry forms processes your IP address, TLS fingerprint and browser user-agent to tell people from bots. Cloudflare also uses these signals to improve its bot detection, and not for advertising. See Cloudflare's Turnstile Privacy Addendum.
We never sell or rent personal data, and we do not share it with anyone else unless the law requires us to.
5. Transfers outside Indonesia
Cloudflare runs a global network, so your data may be processed on servers outside Indonesia. As UU PDP Article 56 requires, Cloudflare is bound to protect personal data under its data processing terms with us.
6. How long we keep it
- Your email address: until you withdraw your consent, or 12 months after Seko's public launch, whichever comes first. We then delete it (UU PDP Articles 42 and 43).
- Inquiries: 12 months after our last reply to you, then deleted, unless the inquiry leads to a purchase, in which case the purchase and warranty terms set how long we keep it.
- Technical data: kept by Cloudflare for a short period for security and troubleshooting, then deleted automatically.
7. Your rights
Under UU PDP you have the right to:
- know who is processing your data, and why (Article 5). That is this page.
- access your data and get a copy of it (Articles 7 and 32).
- correct or update it (Articles 6 and 30).
- have it deleted, or have its processing ended (Articles 8 and 43).
- withdraw your consent at any time (Articles 9 and 40).
- have processing postponed or restricted (Articles 11 and 41).
- object to decisions made only by automated processing (Article 10). We make none.
- receive your data in a common, machine-readable format, and have it sent to another controller (Article 13).
- file a claim and receive compensation if your data is processed unlawfully (Article 12).
How to use your rights: email hello@seko.bike from the address you signed up with, with the subject "Privacy request". We may ask you to confirm you control that address. We act on requests to access, correct, withdraw consent or restrict processing within 3 x 24 hours of receiving them, and we email you when it is done, including when we delete your data (UU PDP Articles 30, 32, 40, 41 and 45).
If you are unhappy with how we handle your data, please contact us first. You can also complain to Indonesia's personal data protection authority.
8. Security
The site is served only over encrypted HTTPS. The signup list and inquiries are stored on Cloudflare's infrastructure, and only authorised DCA staff can access them. If a data breach affects your personal data, we will notify you and the personal data protection authority in writing within 3 x 24 hours, stating what was exposed, when and how, and what we are doing about it (UU PDP Article 46).
9. Children
Seko launch news and inquiries are meant for adults. If you are under 18, please sign up or send an inquiry only with your parent's or guardian's consent (UU PDP Article 25). If we learn we hold a child's personal data without that consent, we will delete it.
10. Changes to this policy
If we change this policy, we will update the date and version above. If a change affects how we use your email address, we will email you before the change takes effect (UU PDP Article 21(2)).
11. Contact
PT Duta Cakra Asia · hello@seko.bike
Tarum Barat 1 A4 No.90, Cikarang, Jawa Barat, Indonesia 17530