Last updated: 14 November 2026
This policy explains what personal data Loomora collects on heyloomora.com, why, and the rights you have over it. We follow Indonesia’s Personal Data Protection Law (Law No. 27 of 2022, UU PDP).
01Who we are
Loomora is a digital solutions partner based in Indonesia. For this website, Loomora is the data controller. You can contact us about your data at hello@heyloomora.com.
02What we collect
When you send the contact form: your name, email address, company (optional), the topic you choose, your message and the page you sent it from.
When you browse: privacy-friendly visit statistics without cookies or personal profiles, and your IP address for a short time to limit spam on the contact form.
We do not ask for sensitive personal data. Please do not include it in your message.
03Why we use it
To reply to your inquiry and discuss a possible project, based on your consent when you submit the form.
To keep the site secure and stop spam and abuse, based on our legitimate interest.
To understand which pages are useful, using aggregated statistics only.
We do not sell your data and we do not use it for advertising.
04Who processes it for us
Kanesh (our own content system, hosted on our server) stores inquiries.
Resend sends the notification email to us and the confirmation email to you.
Cloudflare provides DNS and Turnstile, a privacy-friendly check that stops bots on the form.
Simple Analytics provides cookieless visit statistics.
Some of these providers may process data outside Indonesia. We only use providers that protect data with appropriate safeguards, as UU PDP requires.
05How long we keep it
Inquiries are kept for up to 24 months after our last contact, unless they lead to a contract, in which case we keep what the contract and tax rules require. Spam-protection data is kept only for minutes to hours.
06Your rights
Under UU PDP you can ask to access your data, correct it, delete it, withdraw your consent, object to processing, or get a copy of it. Email hello@heyloomora.com and we will reply within 3 x 24 hours on working days, as the law requires, and complete the request as soon as we can.
You can also complain to the authority that oversees personal data protection in Indonesia.
07Security
We use encrypted connections (HTTPS), limited access to stored inquiries, and spam protection. If a data breach affects you, we will notify you and the authority within 3 x 24 hours, as UU PDP requires.
08Cookies
The site does not use advertising or tracking cookies. It stores your theme and language choice in your browser so the site remembers them.
09Changes to this policy
We will update this page when our practices change and show the new date at the top.