1. Who we are
This website, sfindonesia.com, is operated by Samara Farm Indonesia ([registered legal entity name and registration number, confirm with Samara]), based at[registered address, West Java, Indonesia, confirm with Samara]. We are responsible for the personal data described in this policy.
For any privacy question or request, email marketing@sfindonesia.com.
We handle personal data in line with Indonesia’s Personal Data Protection Law (Law No. 27 of 2022) and, for visitors in the European Economic Area and the United Kingdom, the GDPR and UK GDPR.
2. What we collect
When you send an inquiry
Our contact and inquiry forms ask for your name, company, work email address, the product you are interested in, your expected order volume, a subject and your message. You decide what to include in the message. If you email us directly, we receive your email address and whatever your message contains.
When you browse the site
Our hosting provider automatically records technical data needed to deliver and secure the website, such as your IP address, browser type, the page requested and the time of the request.
Only if you allow analytics cookies, Google Analytics records how the site is used: pages viewed, approximate location (country/city level), device and browser type, the site that referred you, clicks on our “Request a sample” and “Request specifications” buttons, and the fact that an inquiry form was submitted. Google Analytics does not receive the contents of your inquiry.
We do not collect special categories of data, and we do not use advertising or retargeting cookies.
3. How and why we use it
| Purpose | Data | Legal basis |
|---|---|---|
| Replying to your inquiry and preparing quotes, samples and specifications | Inquiry form and email data | Steps taken at your request before entering into a contract |
| Following up on business inquiries and managing our customer relationships | Inquiry form and email data | Our legitimate interest in developing business with companies that contact us |
| Running, securing and troubleshooting the website | Hosting logs | Our legitimate interest in a secure, working website |
| Understanding which pages and products buyers are interested in | Google Analytics data | Your consent, which you can withdraw at any time |
[If inquiries are scored, enriched or stored in a CRM (for example by checking whether the email domain is a company domain), describe that here: confirm with Samara]
We do not sell personal data, and we do not use it for automated decisions that have legal effects on you.
5. International transfers
Some of our service providers process data outside Indonesia and outside your country, including in the United States. Where the law requires it, these transfers are covered by appropriate safeguards such as the European Commission’s standard contractual clauses or the provider’s certification under the EU–US Data Privacy Framework. [Confirm the safeguard used for each provider, confirm with Samara]
6. How long we keep it
- Inquiries and related correspondence: [X years after our last contact, confirm with Samara], or longer if we enter into a contract and need the records for accounting, customs or legal purposes.
- Google Analytics data: [2 or 14 months, matching the GA4 data-retention setting, confirm with Samara].
- Hosting logs: kept by Vercel for a limited period under its own retention policy.
- Your cookie choice: 12 months in your browser, after which we ask again.
7. Your rights
Depending on where you are, you may have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected or incomplete data completed;
- have your data deleted, or its use restricted;
- object to our use of your data based on legitimate interests, including follow-up contact;
- withdraw your consent to analytics at any time, without affecting earlier processing;
- complain to a data protection authority: in Indonesia, the authority responsible under the Personal Data Protection Law; in the EEA or UK, your local supervisory authority.
To exercise any of these rights, email marketing@sfindonesia.com. We may need to confirm your identity before acting on a request.
9. Changes and contact
We will update this policy when our practices change and show the new date at the top of this page. Questions about this policy or your data can be sent to marketing@sfindonesia.com.