Privacy Policy

Last Updated: February 14, 2026

1. Introduction

Alfa Sentosa & Partners ("we," "our," or "us") is committed to protecting your privacy and personal data in accordance with Indonesian Law No. 27/2022 on Personal Data Protection (UU PDP) and other applicable regulations.

2. Data We Collect

Personal Information:

• Name, email address, phone number
• Legal consultation details and case information
• Communication records and correspondence
• Payment and billing information

Technical Information:

• IP address, browser type, device information
• Website usage data and analytics
• Cookies and similar tracking technologies

3. How We Use Your Data

• Legal Services: Providing legal consultation and representation
• Communication: Responding to inquiries and maintaining client relationships
• Legal Compliance: Meeting regulatory and professional obligations
• Website Improvement: Analyzing usage to enhance user experience

4. Legal Basis for Processing

We process your personal data based on:

• Consent: When you provide explicit consent (Article 5 UU PDP)
• Contract Performance: To fulfill our legal service obligations
• Legal Obligation: To comply with Indonesian legal and professional requirements
• Legitimate Interest: For business operations and client service improvement

5. Data Sharing and Disclosure

We may share your information with:

• Legal Authorities: When required by Indonesian law or court orders
• Professional Partners: Other lawyers or experts assisting with your case
• Service Providers: Trusted third parties supporting our operations
• Regulatory Bodies: Indonesian Bar Association (PERADI) when required

6. Your Rights Under UU PDP

You have the right to:

• Access: Request information about your personal data we hold
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Withdraw Consent: Revoke previously given consent
• Object: Object to certain types of data processing

7. Data Security

We implement appropriate technical and organizational measures including:

• Encryption of sensitive data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and updates
• Staff training on data protection practices

8. Data Retention

We retain your personal data for:

• Client Files: 7 years after case completion (Indonesian legal requirement)
• Financial Records: 10 years as required by Indonesian tax law
• Marketing Data: Until consent is withdrawn
• Website Analytics: 26 months maximum

9. Cookies and Tracking

We use cookies for:

• Essential: Website functionality and security
• Analytics: Understanding website usage (with consent)
• Marketing: Delivering relevant content (with consent)

10. International Transfers

If we transfer your data outside Indonesia, we ensure adequate protection through:

• Adequacy decisions by Indonesian authorities
• Standard contractual clauses
• Binding corporate rules
• Your explicit consent

11. Contact Information

For privacy-related inquiries or to exercise your rights:

12. Complaints

If you believe we have not handled your personal data properly, you may file a complaint with:

• Indonesian Data Protection Authority
• Ministry of Communication and Informatics (Kominfo)
• Indonesian Consumer Protection Agency (BPKN)

13. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or applicable law. We will notify you of significant changes through our website or direct communication.