Privacy Policy

1. Definitions

• "Personal Data" means data about an individual who is identified or identifiable, directly or indirectly, as defined in Law No. 27 of 2022 on Personal Data Protection (the "PDP Law").
• "Usage Data" means data collected automatically when you use the Website, such as your IP address, browser type, device type, pages visited and the time of your visit.
• "Cookies" means small files stored on your device that remember information about your visit.
• "You" means any individual who visits the Website or contacts ICBA through it.

2. Personal data we collect

We only collect the personal data you choose to give us and the minimum Usage Data needed to run the Website:

• Contact and membership enquiries: your name, role, organisation, email address, the type of enquiry and your message.
• Newsletter sign-ups: your email address.
• Usage Data: collected by our hosting and content delivery providers to keep the Website secure and measure aggregate traffic.
• We do not ask for sensitive personal data, and we ask you not to include it in your message.

3. Cookies

The Website sets one functional cookie, NEXT_LOCALE, which remembers whether you prefer English or Bahasa Indonesia. Our content delivery provider may set strictly necessary security cookies to protect the Website from abuse.

We do not use advertising cookies. You can set your browser to refuse cookies; the Website will still work, but it may not remember your language.

4. How we use personal data

• To respond to your enquiry and follow up on membership, partnership, press or event requests.
• To send you our newsletter and updates on ICBA's work, events and publications, where you have subscribed.
• To maintain, secure and improve the Website.
• To comply with our legal obligations.
• For any other purpose with your consent.

5. Sharing and transfer

We do not sell or rent your personal data. We may share it only:

• With service providers that host the Website, deliver email and store enquiries on our behalf, under obligations to keep it confidential and secure.
• With ICBA's secretariat and the members of its governing bodies, where needed to handle your enquiry.
• With authorities, where required by law or a valid legal request.

Some of our service providers may process data outside Indonesia. Where this happens, we take reasonable steps to ensure your data receives protection equivalent to that required by the PDP Law.

6. Retention and security

We keep enquiries for as long as needed to respond and maintain our relationship with you, and newsletter addresses until you unsubscribe. We then delete or anonymise them unless the law requires us to keep them longer.

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. No method of transmission over the internet is completely secure.

7. Your rights

Under the PDP Law, you have the right to:

• Obtain information about why and how we process your personal data.
• Access and obtain a copy of your personal data.
• Correct personal data that is inaccurate or incomplete.
• Ask us to stop processing, delete or destroy your personal data.
• Withdraw your consent at any time, including by unsubscribing from the newsletter through the link in every email.
• Object to or restrict certain processing.

We may ask you to verify your identity before acting on a request.

8. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date.

9. Contact us

For questions about this Privacy Policy or to exercise your rights, email us at [email protected].