Privacy Policy

Effective date and last updated: 15 July 2026

1. Who we are

This Privacy Policy applies to PT LEGAL INDONESIA SERVICE (“Legal Indonesia”, “we”, “us” or “our”) in connection with legalindonesia.com, our advertising lead forms, enquiries through our communication channels, consultations, and services that refer to this Policy.

Our office is at Jl. Sunset Road No. 900A, Kuta, Bali, Indonesia. For privacy questions or requests, use the contact details in Section 15.

2. Personal data we collect

Information you provide when making an enquiry

• your name, email address, telephone number, preferred language, and messaging account details;
• the service you are interested in and the content of your enquiry or correspondence;
• information you submit through WhatsApp, Telegram, email, telephone, or a lead form hosted by Google, Meta, or another advertising platform; and
• any other information you choose to provide.

Information needed to provide services

If you ask us to provide immigration, visa, company, or related services, we may need additional information such as your date and place of birth, nationality, address, passport or identification details, photograph, immigration and travel history, employment or business information, family or sponsor information, supporting documents, and payment or invoicing records.

Some cases may involve information that requires additional protection, including data about children, health, finances, biometrics, or criminal records. We process such information only when it is relevant and lawful for the requested service and apply safeguards appropriate to its sensitivity.

Please do not send passports, financial records, medical records, or other sensitive documents through an advertising lead form or a public website field. If such documents are needed, we will explain an appropriate channel and the purpose for which they are required.

Information collected automatically

When you use the website, we and our technology providers may collect IP address, browser and device information, operating system, language, approximate location derived from IP, referring page or campaign, pages viewed, dates and times, interactions such as clicks and scrolling, cookie or similar identifiers, and diagnostic or security information.

Information from other sources

Where lawful and relevant, we may receive information from your authorised representative, family member, employer, sponsor, service partner, advertising or messaging platform, and Indonesian or foreign public authority.

3. How we use personal data

We may use personal data to:

• respond to enquiries, assess your needs, prepare proposals, and arrange consultations;
• enter into, administer, and perform an agreement with you;
• prepare, submit, and manage applications or supporting documents at your request;
• communicate with you about your enquiry, case, appointment, payment, or service updates;
• operate, maintain, secure, troubleshoot, and improve the website and our services;
• understand website use and measure the performance of Google, Meta, and other advertising campaigns;
• send marketing communications where you have requested them or where otherwise permitted, with a way to opt out;
• prevent fraud, misuse, security incidents, and unlawful activity;
• meet legal, regulatory, accounting, immigration, and record-keeping obligations; and
• establish, exercise, or defend legal claims.

4. Grounds for processing

Depending on the circumstances and applicable law, we rely on one or more of the following grounds:

• your consent, including where required for optional marketing or advertising technologies;
• steps requested by you before entering into an agreement and performance of an agreement with you;
• compliance with a legal obligation that applies to us;
• our legitimate interests or those of another party, where permitted and not overridden by your rights, such as service improvement, security, fraud prevention, and protecting legal rights; and
• other grounds recognised by applicable law, including protection of vital interests in an emergency.

Where processing depends on consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before withdrawal or processing supported by another lawful ground.

5. Cookies, analytics, and advertising technologies

We use cookies and similar technologies, including tags, pixels, local storage, and software development tools. Some support necessary website functions or remember language preferences. Others help us understand website use or measure advertising.

The website currently uses services that may include:

• Google Tag Manager and Google Analytics 4 to deploy tags and understand website traffic, visits, and campaign performance;
• Yandex Metrica and Webvisor to produce usage statistics and understand interactions such as clicks, scrolling, navigation, and session behaviour;
• Google Maps and Google Fonts to display location and typography; and
• language and interface technologies used by WordPress, Polylang, Elementor, and our contact buttons.

Examples of cookies currently used on the website include pll_language for language preference, _ga and related Google Analytics cookies, and _ym_* cookies used by Yandex Metrica. Cookie names, functions, and retention periods may change when providers update their services or our configuration changes.

Our advertising campaigns may also use Google Ads and Meta services, including platform-hosted lead forms and, when enabled, conversion tags, remarketing tags, or Meta Pixel. These technologies may allow the relevant platform to receive cookie or device identifiers, IP address, page and campaign information, and conversion events for measurement, audience creation, ad delivery, and fraud prevention.

We do not intentionally send passport details, financial records, health information, the content of your private enquiry, or other sensitive case information through analytics or advertising tags.

You can block or delete cookies through your browser or device settings. Blocking some technologies may affect website features. Depending on your location, applicable law may require your consent before non-essential analytics or advertising technologies are used.

Provider information: Google Privacy Policy, How Google uses information from sites or apps that use its services, Yandex Privacy Policy, and Meta Privacy Policy.

6. Messaging and advertising lead forms

If you contact us through WhatsApp or Telegram, the relevant provider processes your account and message data under its own terms and privacy policy. If you submit a Google or Meta lead form, the platform collects the information shown in that form and makes it available to us so that we can respond to your request. We use lead data for the purpose described in the form and related follow-up. We do not sell advertising leads.

Read the WhatsApp Privacy Policy and Telegram Privacy Policy before using those services.

7. Who may receive personal data

We may disclose personal data only as reasonably necessary to:

• our personnel and authorised contractors who need it to handle your enquiry or provide the requested service;
• Indonesian or foreign immigration authorities, ministries, embassies, consulates, courts, regulators, and other public bodies where required for your matter or by law;
• your sponsor, employer, family member, authorised representative, or service partner where relevant to your instructions;
• professional advisers, translators, couriers, accountants, payment providers, and other operational suppliers;
• hosting, security, content delivery, customer relationship management, email, analytics, advertising, and communications providers, including Google, Yandex, Meta/WhatsApp, and Telegram;
• law enforcement or another party where disclosure is lawfully required or needed to protect rights, safety, or security; or
• a buyer, investor, or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality and legal safeguards.

We do not sell or rent personal data.

8. International transfers

Some recipients and technology providers may process or store personal data outside Indonesia. Where Indonesian or other applicable law regulates an international transfer, we use an available lawful mechanism and appropriate safeguards, or obtain consent where that is the required mechanism. The privacy and security rules in the receiving country may differ from those in Indonesia.

9. Data retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and as required by applicable law. The period depends on the type of data and relationship:

• enquiry and lead information is retained while we respond and for a reasonable follow-up and accountability period;
• client and case records are retained for the service relationship and any applicable legal, immigration, accounting, tax, limitation, dispute, or audit period;
• marketing contact data is retained until consent is withdrawn, you opt out, or it is no longer reasonably needed;
• security logs, analytics identifiers, advertising data, and backups are retained according to operational need and the configured retention periods of the relevant systems.

When data is no longer required, we delete, destroy, anonymise, or securely isolate it, subject to technical backup cycles and legal requirements.

10. Security

We use reasonable technical and organisational measures appropriate to the nature and risk of the data, including encrypted website connections, access controls, restrictions on personnel access, security monitoring, backups, and supplier review where appropriate. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If a personal data breach occurs, we will investigate and notify affected individuals and the competent authority where and within the period required by applicable law.

11. Your rights

Subject to applicable law and any lawful exceptions, you may have the right to:

• receive information about how and why we process your personal data;
• request access to and a copy of your personal data;
• correct or update inaccurate or incomplete data;
• withdraw consent where processing is based on consent;
• object to or request restriction, suspension, deletion, or destruction of data;
• request data portability where applicable;
• object to a decision based solely on automated processing where it has legal or similarly significant effects; and
• raise a complaint with the competent authority or seek another remedy available under law.

We do not currently make decisions with legal or similarly significant effects based solely on automated processing. To exercise a right, contact us using Section 15. We may need to verify your identity and authority before acting on a request. We will respond within the period required by applicable law.

12. Children

Our website and advertising lead forms are intended for adults and are not directed to children. We do not knowingly use advertising lead forms to collect personal data directly from children. If a service concerns a child, information must be provided by, or with verifiable authorisation from, a parent or legal guardian. Contact us if you believe a child submitted data without appropriate authorisation.

13. Third-party websites and services

The website links to services that we do not control, including maps, messaging platforms, and social networks. Their own privacy policies govern their processing. Review those policies before providing information to a third party.

14. Changes to this Policy

We may update this Policy to reflect changes in our services, technology, providers, advertising, or legal obligations. We will publish the revised version on this page and change the date above. Where required, we will provide additional notice or obtain renewed consent before a material change applies.

15. Contact us

For the fastest handling of a privacy request, use the subject line Privacy Request and describe the right you wish to exercise.