Privacy Policy

The following Privacy Notice describes how PT Olsera Indonesia Pratama (hereinafter referred to as "Olsera") processes Personal Data consisting of obtaining, collecting, processing, analyzing, storing, rectifying, updating, displaying, disclosure, transferring, sharing, and / or protecting Personal Data. This Privacy Notice applies to Merchants and Customers who use services as provided by Olsera. Olsera may also link to third parties on our services or provide third party applications for download. We encourage you to read their Privacy Notice and know your privacy rights before using the service and interacting further. By agreeing to this Privacy Notice, you acknowledge that you have read and understood this Privacy Notice and agree to the use, practices, processing, and transfer of your Personal Data by Olsera as set out in this Privacy Notice.
By agreeing to this Privacy Notice, you agree to the practices set out in this Privacy Notice. If you continue to use the services provided by Olsera after an update to this policy, then you agree to the changes.
We have made changes to our Privacy and Cookies Policy, updating it to align with our efforts to always provide the best service for you and ensure that what we do is in accordance with applicable laws and regulations in Indonesia.

Olsera may process your Personal Data in various situations, including when you register an account for the first time through our Platform and when you use the services provided by Olsera. When you register an account on the Olsera Platform, you will be asked to provide your Personal Data in the form of your full name, gender, nationality, religion, marital status, IP Address, and cellular telephone number. When you use the Olsera Platform, we can process Personal Data in the form of biometric data (facial images), full name, gender, nationality, religion, marital status, IP Address, and cellular telephone number. In the event of Personal Data collection in the form of facial images, the data is only processed locally on your device and is not stored, not transmitted to our servers, and not shared with any third party. The Olsera Platform does not store any facial data. All processing is temporary and only used to enable application features on the device.

Personal Data that we process from you may be used for a number of legitimate purposes in accordance with the consent of the Personal Data subject, whether explicitly requested by you or permitted under the provisions of applicable laws in Indonesia ("Purposes"), including:

1. To register, verify, and/or identify yourself as a user of the Olsera Platform;
2. To verify your identity before you can access and use the services available on the Olsera Platform, to ensure security and compliance with applicable regulations;
3. To run and maintain the system and provide features and services that you use through the Olsera Platform;
4. To manage your account, including preference settings, account security, and transaction history;
5. To process transactions, payments, or orders made by you or your customers through the Olsera Platform;
6. To send notifications, receipts, proof of payment, or other notifications related to activities on the Olsera Platform;
7. To respond to questions, requests, complaints, or other communications from you;
8. To provide customer service and technical support, including operational assistance and resolution of problems or system disruptions on the Olsera Platform;
9. To notify you of service updates, policy changes, or new features available;
10. To send information or marketing materials, including promotions, special offers, campaigns, and surveys that are relevant to you;
11. To analyze and improve service performance, including evaluation of usage, user preferences, and product development;
12. To conduct internal activities such as audit, compliance, risk evaluation, internal investigation, and cybersecurity purposes;
13. To offer or provide services from our affiliates or partners including services from Financing Institutions that have been licensed and are under the supervision of the Financial Services Authority (OJK);
14. To enable the storage and processing of your data by us and/or authorized third parties in a secure electronic system;
15. To process aggregated statistical data that does not identify individual users, in the course of market research;
16. To provide support to us and/or our business partners in delivering the services you require;
17. To ensure compliance with laws, regulations and reporting obligations that apply to Olsera and our business partners;
18. To prevent, detect, and handle acts of fraud, violations of law, or other suspicious activities on the Olsera Platform; and
19. To share your Personal Data on a limited basis with Olsera's technology partners for the purposes of processing based on artificial intelligence (AI) including performance analytics, marketing campaign optimization, predictive model development, and the enhancement of Olsera’s services.

Olsera processes your Personal Data to fulfill the Purposes as described in this Privacy Notice. In carrying out such processing, Olsera relies on the relevant legal basis in accordance with the provisions of applicable laws and regulations in Indonesia. The legal basis for the processing of Personal Data by Olsera includes one or more of the following:

1. Performance of a Contract
   Personal Data is processed to the extent necessary for the conclusion, performance, and fulfillment of the agreement between you and Olsera.
2. Legitimate Interests
   Olsera may process Personal Data to fulfill legitimate interests provided that such processing does not override the rights and interests of the Data Subject.
3. Compliance with Legal Obligations
   The processing of Personal Data is carried out to comply with legal obligations and/or orders from competent authorities in accordance with applicable laws and regulations.
4. Protection of Vital Interests
   In certain circumstances, the processing of Personal Data may be carried out to protect the vital interests of the Data Subject or another party.
5. Consent of the Data Subject
   In certain cases, Olsera will process Personal Data based on consent provided by the Data Subject in accordance with applicable regulations.

Unless otherwise specified in this Privacy Notice, your Personal Data will only be retained for as long as necessary to fulfill the Purpose of its collection and/or for as long as such retention is required or permitted under applicable laws and regulations.
We will delete, destroy, and/or anonymize your Personal Data as soon as its retention is no longer necessary or no longer required under these provisions.
In determining the retention period, we consider:

1. The duration of your consent to the processing of Personal Data;
2. Legal or regulatory obligations applicable to Olsera;
3. Legitimate operational needs, including dispute resolution, audits, and enforcement of agreements.

Please note that under certain circumstances, your Personal Data may be stored or controlled by other parties, including government agencies or third parties that collaborate with Olsera. In such cases, the storage of Personal Data will be subject to each party’s retention policies in accordance with applicable regulations.

Olsera is committed to maintaining transparency and compliance with applicable Personal Data protection regulations. Therefore, we may review and update this Privacy Notice from time to time to adjust to service developments, regulatory changes, and operational needs. In the event of changes to the Privacy Notice, then:

1. Olsera may review and change this Privacy Notice at Olsera's own discretion to ensure that the provisions in this Privacy Notice are consistent with Olsera's future developments, and / or if there are changes in laws and regulations and / or orders from the Competent Authority for Olsera to change the provisions in this Privacy Notice.
2. Olsera will notify you of changes to the Privacy Notice through public notices on the Olsera website and / or Platform, through special notifications to your email address or your contacts registered on the Olsera Platform. Olsera encourages you to periodically review the Olsera Platform to find out the latest information about how the provisions of this Privacy Notice are applied.
3. Olsera encourages you to periodically review this Privacy Notice to understand how Olsera manages and protects your Personal Information. Your continued use of the Platform after an update will be deemed as your acceptance of the substance and terms of the updated Privacy Notice.

Cookies are small amounts of data that may include an anonymous unique identifier. Cookies are sent to your browser from our website and stored on the device you are using. This information is only valid and stored on the browser used when accessing our site, and will not be shared between browsers or other devices. We use Functional Cookies, which are necessary for our site to function properly. These cookies support core functions such as security, network management and accessibility. Without these Cookies, some features on our site may not work properly.

Olsera uses a service provided by Google called Google Analytics (GA). GA allows us to reach people who have previously visited our site, and show them relevant ads when they visit other sites on the Internet within the Google Display Network. Cookies may be used to track your sessions on our website, to serve customized ads from Google and other third-party vendors. When you visit this site, you may see advertisements posted on the site by Google or other third parties. Through first-party and third-party Cookies, these third parties may collect information about you when you visit this and other sites. They may use this data to display advertisements on this site and across the Internet based on your prior visits to this website and elsewhere on the Internet. We do not collect this information or control the content of the ads you will see. You may be able to opt out of customized Google Display Network ads by visiting Ads Preferences (http://www.google.com/ads/preferences/), and Google Analytics Opt-out Browser Add-on (http: //www.google.ca/ads/preferences/plugin/). By using our services, you acknowledge and agree that you understand and consent to the collection of data to be provided to remarketing advertisements using GA and Cookies from other third parties based on your prior visits to this website and elsewhere on the Internet.

The security of your personal information is important to us. We value every piece of personal information collected and stored on our Site. We make every effort to protect your personal information from loss, misuse, and disclosure by unauthorized parties using the best methods and technology.
We encrypt the transmission of sensitive information, such as credit card numbers on our registration form, using Secure Socket Layer (SSL) technology. We understand that no method of electronic transmission or storage is 100% secure. So we cannot guarantee the absolute security of your personal information, especially if there are activities beyond our control (such as hacking) or the way you use your information will be significantly affected. However, we strive to keep your information as secure as possible. You agree to hold us harmless from liability for any losses, claims or penalties of any kind caused by unauthorized access, hacking, misuse or alteration of information by others submitted to our Site.
We will take necessary and reasonable steps to investigate certain situations, notify you if at any time your data has been misused, and take other steps in accordance with applicable law. We take this seriously in maintaining the privacy and security of your personal information. If you have any questions about our security measures, you can contact us by email at support@olsera.com.

In connection with the processing of your Personal Data through the Olsera Platform, you have the right to:

1. Update and/or correct errors and/or inaccuracies in your Personal Data recorded on the Olsera Platform;
2. Withdraw your consent to process Personal Data on the Olsera Platform;
3. Request access and obtain copies of Personal Data stored on the Olsera Platform which will be provided in accordance with Applicable Laws;
4. Refuse the use of Personal Data; and
5. Request access and obtain a copy of the Personal Data stored on the Olsera Platform, which will be provided in accordance with Applicable Law; delete and / or destroy your Personal Data.

In order to achieve the Purposes described above, Olsera may disclose and/or share your Personal Data with the following parties to the extent necessary and in accordance with the provisions of applicable laws and regulations in Indonesia:

1. Affiliates and entities within the Olsera business group, including employees, contractors, or representatives who require access to Personal Data to perform operational, administrative, and service-provisioning functions;
2. Third-party service providers, including providers of information technology, artificial intelligence services provider, cloud computing, data analytics, payment processing, customer service, communications, and other infrastructure providers that support the operation of the Olsera Platform;
3. Business partners and strategic partners, including financing institutions, financial institutions, payment service providers, and other partners collaborating with Olsera to provide services to you, to the extent necessary for the provision of such services;
4. Technology partners, including parties that provide artificial intelligence (AI)-based solutions, analytics, or other data processing services, which are used to improve service quality, perform performance analysis, offer products to you, and develop features and products;
5. Professional advisors, such as legal consultants, auditors, accountants, or other advisors, to the extent necessary for compliance, audit, risk management, or other professional needs;
6. Parties involved in corporate transactions, including in the event of a merger, acquisition, restructuring, or asset transfer, where Personal Data may form part of the transferred assets in accordance with applicable laws;
7. Government authorities, regulators, or law enforcement agencies, if required by law or upon a valid request in accordance with applicable laws and regulations;
8. Other relevant parties for the purpose of preventing, detecting, and addressing unlawful acts, including fraud, system abuse, or other suspicious activities;
9. Other parties assisting Olsera in conducting operational activities, developing services, and fulfilling legal obligations, provided that such disclosure is limited and solely for legitimate purposes.

Olsera ensures that any disclosure of Personal Data is carried out by implementing adequate safeguards, including confidentiality and data security obligations, in accordance with applicable laws.
Except as required or permitted by applicable laws and regulations, court orders, or as set forth in this Privacy Notice, Olsera will not disclose, share, rent, sell, or trade your Personal Data to any third party without a valid legal basis or without notifying you.
In the event that the disclosure of Personal Data to a third party is necessary to fulfill the Purposes, Olsera will ensure that such party is bound by an obligation to maintain confidentiality and protect your Personal Data in accordance with protection standards equivalent to those applied by Olsera. Such third parties are only permitted to access and process Personal Data to the extent necessary for the purposes specified by Olsera and not for any other purposes beyond that.
In the event of a failure in the protection of Personal Data, including but not limited to a security breach that results in the compromise of the confidentiality, integrity, and/or availability of Personal Data—whether intentional or unintentional—leading to the destruction, loss, alteration, disclosure, or unauthorized access to Personal Data managed by Olsera, then Olsera will notify you and the relevant authorities in accordance with applicable laws.
Such notification shall be provided in writing no later than 3 x 24 (three times twenty-four) hours from the time the incident is discovered, or within another timeframe as prescribed by applicable laws and regulations, and shall include at least the following information:

1. The type and/or category of Personal Data affected;
2. The time and chronology of the data breach or violation;
3. The steps that have been and/or will be taken by Olsera to address and mitigate the impact of the incident.

In order to provide our services, we may transfer and/or disclose your Personal Data to entities within our corporate group as well as to third-party service providers located outside the territory of Indonesia.
In addition, under certain circumstances, your Personal Data may also be accessed or processed by our service providers or affiliated entities in other jurisdictions in accordance with legitimate and limited operational needs.
We ensure that any transfer of Personal Data is carried out in compliance with applicable laws and regulations, in particular the Personal Data Protection Law and other relevant data protection regulations.
In the event that the destination country does not have an equivalent level of Personal Data protection, we will take the necessary additional measures to ensure that your Personal Data remains adequately protected.

Under certain circumstances, Olsera may process Personal Data through automated decision-making mechanisms. However, the Data Subject retains the right to object if the resulting decision is derived entirely from such an automated process.

We may review and amend this Privacy Notice at any time. If there are changes to this Privacy Notice, we will provide notice to you through a notice published on the Platform and / or website, or to your electronic mail address recorded on our Platform. You acknowledge and agree that you are required to check this Privacy Notice from time to time to find out the latest conditions or information regarding the processing of your Personal Data through the Olsera Platform.

By agreeing to this Privacy Notice, you:

1. Guarantee and are responsible that the Personal Data that you provide in written form or other forms to use the Olsera Platform is truly yours and not obtained from other parties without legal permission.
2. Agree that you are responsible for reviewing this Privacy Notice periodically to find out the latest information about changes or developments in this Privacy Notice through the Olsera Platform and / or on your email and / or contact registered on the Olsera Platform.
3. Deemed to have read, understood, and agreed to the applicable provisions in the Privacy Notice, including any changes that we make from time to time.
4. By agreeing to this Privacy Notice, you are deemed to have understood and agreed to all the provisions listed. In particular, you also give permission for the use of Personal Data at each stage of processing Personal Data.

If you would like to make any enquiries regarding the processing of your data, wish to file an objection, or any other queries in relation to this Privacy Notice, please contact us via email: support@olsera.com.