Privacy Policy
Last updated: May 2026
This Privacy Policy explains how Komodoplex (“Komodoplex”, “we”, “us”, or “our”) collects, uses, stores, and protects your information when you visit komodoplex.com and use our official communication channels.
1. Principles of Data Processing & Legal Standing
Komodoplex acts as the Data Controller under the Personal Data Protection Law of the Republic of Indonesia (UU PDP No. 27/2022) and recognized global privacy principles. We strictly adhere to data minimization: we only collect and process data that is relevant, reasonable, and necessary for professional communication and secure site operations.
2. Information We Collect
2.1 Information You Voluntarily Provide
When you contact us by email or submit inquiries through our online forms, we receive and store the details you knowingly provide:
- General Contact Form: Full name, email address, message subject, and message content.
- Studio Project Form (Start a Project): Full name, email address, estimated budget range, and project brief summary.
2.2 Technical Information & Cookies
To keep the website running reliably and securely, our systems automatically receive standard technical information from your browser:
- General Browsing Data: IP address, browser type, operating system, and visit timestamp used for maintenance and platform security.
- Language Preference Cookie: We use a single functional cookie to remember your selected display language (
enorid). This cookie does not contain personal information and does not track you across other websites.
2.3 Form Protection (Cloudflare Turnstile)
To prevent spam and automated bot submissions without disrupting your user experience, our contact and studio project forms are protected by Cloudflare Turnstile background verification in invisible mode. Turnstile verifies automatically that submissions originate from human visitors rather than automated scripts. It operates without advertising cookies, does not build browsing profiles across other sites, and respects user privacy. For more information, please review the Cloudflare Turnstile Privacy Addendum.
Komodoplex DOES NOT sell your personal data and DOES NOT conduct cross-site behavioral tracking.
3. Infrastructure Service Provider (Cloudflare)
The Komodoplex website is hosted and secured using infrastructure provided by Cloudflare, Inc.:
- Cloudflare delivers web traffic quickly and defends our site against security threats on behalf of Komodoplex.
- Web traffic data is processed solely to serve website content and maintain stability according to Komodoplex operational requirements.
- Cloudflare does not own your personal data, does not sell your information, and does not use it for advertising purposes.
4. Legal Bases for Processing
In accordance with Article 20 of UU PDP No. 27/2022, Komodoplex processes personal data under the following legal bases:
- User Consent: The explicit consent you provide when checking the confirmation box on our forms before submitting messages.
- Pre-Contractual Measures: Reviewing project briefs and commercial inquiries to evaluate prospective collaboration before entering into a formal agreement.
- Legitimate Interests: Maintaining site reliability, preventing automated bot abuse, and protecting web operational security.
5. Cross-Border Data Transfers
To ensure the website loads fast and remains available across global locations, Komodoplex uses Cloudflare global server network. In accordance with Article 56 of UU PDP No. 27/2022, data transmissions and storage may involve servers located outside Indonesia (such as Singapore or the United States).
All transfers are safeguarded by industry-standard encryption (HTTPS) and strict data protection agreements.
6. Security Standards & Retention Periods
6.1 Security Safeguards
We implement reasonable technical and organizational safeguards to protect your information against unauthorized access, alteration, or disclosure. This includes encrypted communications (HTTPS) and restricted access limited only to authorized team members.
6.2 Data Retention Schedule
We keep communication records only for as long as necessary for their intended purpose:
- General Contact Inquiries: Retained for up to 12 (twelve) months from the last communication date unless the conversation leads to an active working relationship.
- Studio Project Briefs: Retained for up to 24 (twenty-four) months for evaluation and communication history, after which the data is permanently deleted or anonymized.
- Earlier Deletion Requests: You may request the deletion of your communication records at any time through our official contact channels.
7. Your Data Subject Rights
Under Articles 5 through 13 of UU PDP No. 27/2022, you have the following rights regarding your personal data:
- Right to Information: Know why your data is collected and how it is processed.
- Right to Access & Copy: Request confirmation and obtain a copy of your personal data stored in our systems.
- Right to Rectification: Request correction of any inaccurate or incomplete details.
- Right to Erasure: Request the deletion or destruction of your communication records.
- Right to Withdraw Consent: Revoke consent previously given for data processing.
- Right to Restriction: Request temporary limitation of processing in accordance with applicable law.
- Right to Object & Complaint: Raise concerns regarding data handling practices that do not comply with regulations.
8. Updates to This Policy
We may periodically update this Privacy Policy to reflect improvements in our services or changes in legal regulations. Updates will be published on this page with the latest revision date indicated at the top.
9. Contact Us
For privacy inquiries or to exercise your data subject rights, please reach out to us at:
- Email: hello@komodoplex.com
- Subject Line:
[Privacy] Data Rights Request: <Your Name>
We will respond to your request within the statutory timeframes established by applicable regulations.