Privacy Policy

Depending on how you use the website, we may collect:

• contact information such as name, email address, and telephone number;
• delivery and billing information, including address, postal code, city, province, country, saved addresses, and a delivery pin or coordinates when provided;
• order information such as products, variants, quantities, prices, discounts, shipping service, payment status, tracking, return, exchange, and refund records;
• customer-account information, order history, address book information, and authentication records;
• communications, support requests, newsletter subscriptions, and information you voluntarily provide;
• device and browsing information, such as IP address, browser or device information, pages visited, referring page, consent choices, campaign parameters, and advertising identifiers when permitted.

Payment card or wallet details are entered in the payment provider's interface. We receive transaction references and payment status needed to confirm and support the order, rather than your full payment credential.

We use information to operate the store and provide the service you request. This includes calculating prices and delivery options, creating and fulfilling orders, verifying payment, booking or supporting shipment, managing stock, providing customer support, processing returns or refunds, securing accounts, preventing abuse, and maintaining business records.

With your choices and where permitted, we may also use information to understand storefront performance, measure marketing, attribute orders to campaigns, improve product discovery, and send newsletter updates. Marketing communication and marketing-cookie choices remain separate from essential checkout and support.

Essential storage keeps the storefront, customer session, cart, checkout, security, and privacy choices working. Optional Analytics and Marketing categories are off until you choose to allow them.

When Analytics is allowed, our first-party storefront measurement records an anonymous browser ID, a browsing session that expires after 30 minutes of inactivity, server event times, limited storefront routes, product and variant IDs, cart quantity, campaign tags, and the referring hostname. Visible-page activity signals help measure visitors active in the last five minutes. Paid conversions are linked only after payment is verified. This analytics dataset does not store typed form values, contact information, account passwords, payment credentials, raw IP addresses, or full referring URLs. Staff dashboards display aggregates rather than visitor identities. Optional Analytics consent is independent of Marketing consent.

When Marketing is allowed, Meta Pixel may load in your browser and consented commerce events may also be sent through Meta Conversions API. Events may include PageView, ViewContent, Search, AddToWishlist, AddToCart, InitiateCheckout, AddPaymentInfo, Lead, Contact, CompleteRegistration, Purchase, and Refund.

Information used for Meta measurement can include event name and time, page URL, product and order values, campaign parameters, browser identifiers such as _fbp or _fbc, IP address, user-agent, and normalized identifiers. Email, telephone number, name, location fields, and internal external identifiers are hashed before the server sends them to Meta. Hashing reduces direct readability but does not make the processing anonymous.

You can reject optional categories when first asked or reopen Cookie Preferences from the footer at any time. Withdrawal stops future optional tracking; it does not undo processing that lawfully occurred before withdrawal.

The small cookie banner does not block browsing. Dismissing it keeps optional categories off; scrolling and shopping do not automatically accept them.

We share only the information reasonably needed for a service or legal purpose. Recipients may include:

• Midtrans and payment partners for payment creation, verification, fraud prevention, refunds, and dispute support;
• Biteship, selected couriers, and logistics partners for rates, pickup, delivery, tracking, and shipment support;
• Desty and inventory or marketplace systems for product, stock, and order operations;
• Google Maps services when an address is searched or a delivery pin is used;
• Meta when Marketing consent is active, for advertising measurement, attribution, audience services, and optimization;
• analytics, hosting, database, storage, security, communication, and professional service providers used to operate and protect the business;
• authorities or other parties when disclosure is required by law, necessary to protect rights and safety, or connected with a legitimate business reorganization.

We do not sell payment credentials. We do not activate optional Meta tracking when Marketing consent is off.

Some technology and service providers may process information outside Indonesia. Where required, we use available contractual, organizational, and technical safeguards and assess the information needed for the relevant service.

We keep information only for as long as reasonably necessary for the purposes described above, including order fulfillment, customer support, fraud prevention, accounting, tax, legal claims, and regulatory obligations. Different records may have different retention periods. Consent and advertising-attribution records may be retained long enough to demonstrate choices, operate deduplication, investigate delivery errors, and measure permitted campaigns.

We use access controls, server-side secrets, hashing for selected advertising identifiers, encrypted network transport, logging controls, and operational safeguards. No online system can guarantee absolute security, so please protect your account and contact us if you suspect unauthorized use.

Subject to applicable law and appropriate identity verification, you may ask to access, correct, update, or delete eligible personal information; withdraw optional consent; object to or restrict certain processing; and request information about processing or available complaint channels.

Some information may need to be retained where an order, refund, fraud review, accounting requirement, legal obligation, or dispute remains active. Cookie Preferences controls optional browser tracking. Newsletter requests can also be sent to our contact email until an automated unsubscribe link is available in every message.

The website is intended for customers who can lawfully enter into a purchase or who use it with the involvement of a parent or legal guardian. Please do not submit another person's information without authority.

We may update this policy when the storefront, vendors, legal requirements, or data practices change. The effective date at the top identifies the current version. Material changes may be highlighted on the website or through another appropriate notice.