PT Matahari Department Store Tbk. (“ Matahari ” or “ we ”) is a retail company established and domiciled in Indonesia. Matahari is the Data Controller of all personal information collected, unless otherwise stated. Contact details for Matahari are listed in the “ Contact Us ” section below.

In carrying out operational activities, Matahari understands and respects your privacy. With this, Matahari is always committed to protecting the personal data of parties related to Matahari, including the personal data of Matahari's customers, business partners and employees.

Our position on the protection of your personal data can be stated briefly in accordance with the principles of personal data protection, below:

Transparent	:	Matahari is always open about what, why and how we collect and protect your personal data so that you can make informed decisions and express your consent to us.
Right	:	Matahari respects your rights as an individual, so your Personal Data is completely under your control.
Use	:	Matahari uses your Personal Data only for the specific purposes we state in this notice, and we will retain it for as long as necessary for those purposes and in accordance with applicable laws and regulations.
Security	:	Matahari has established strong cybersecurity practices in line with leading industry standards to protect your Personal Data that you have shared with Matahari.
Transfer	:	Matahari takes great care when transferring your Personal Data to third parties such as vendors, contractors and business partners and government authorities.

A. Applicability of Privacy Policy

This privacy policy notice explains and applies to information about you (“Personal Data”) that we collect, obtain, or process when you:

1. conducting business with Matahari, either as a contractor, vendor, or Matahari business partner; and/or
2. becoming a Matahari customer, using Matahari products or services, using applications, visiting Matahari facilities and/or websites.

In the event of a more specific privacy policy, the privacy provisions also apply to that policy. We recommend that you read this Privacy Notice in conjunction with the terms and conditions of our products/services as they may contain more specific information regarding those products/services.

In short, this Privacy Policy applies to:

1. All services offered by Matahari.com
2. Existing and potential customers of Matahari.com
3. Customers who are registered as Matahari Rewards members for both Matahari Offline/Online services

B. Basis for Acquisition and Processing of Personal Data by Matahari

In carrying out operational activities, Matahari is your Personal Data Controller who collects Personal Data based on a legitimate basis based on laws and regulations, and will depend on the type and purpose of collecting Personal Data. In general, we collect and process Personal Data on several bases, including:
 

1. Your consent to this Privacy Notice;
2. To carry out operational activities as a form of fulfilling our promise to you, for example to provide the availability of services and/or products for your needs and requirements, process service bills to your credit card and/or payment system, provide attractive offers as promotional programs and so on.
3. Carrying out our obligations as controller of Personal Data in accordance with laws and regulations.
4. Carrying out our obligations on the basis of legitimate interests while still taking into account our objectives, needs and the balance of our interests and your rights.

If you have any questions about this, please contact us at the contact details provided in the " Contact Us " section below.

C. How Matahari collects your Personal Data

Matahari collects your Personal Data when you:

1. Cooperating with Matahari, for example in operating as Matahari's business partner in the procurement system and/or accounting and billing system, correspondence, registering your company to become Matahari's business partner.
2. Visiting the facilities we provide, such as shops and/or bazaars.
3. Ask questions as a customer, register, to obtain information, or other services.
4. Respond to communications from us (such as SMS, electronic mail ( email ), questionnaires or surveys).
5. Interact with Matahari sites and applications, such as to view and/or shop for Matahari products and services, fill out and submit registration forms, use online services. (If  your browser enables  internet cookies  , this can facilitate Matahari to track personal preferences, pages visited, and so on).
6. Participate in Matahari's social media pages.
7. Participate in Matahari's promotional events or loyalty programs.
8. Contact Matahari customer call center  either physically, by telephone, or electronically to submit complaints or other services. 

D. Personal Data that Matahari Collects from You

Personal Data that we may collect from you, including but not limited to:

1. Contact information (such as full name, address, e-mail address and telephone number).
2. Demographic information (such as age range, gender, and citizenship).
3. Photos and video recordings, such as photos and/or video recordings for documentation purposes at shops and/or bazaars, photos that you submit for contests, reporting requirements for the implementation of agreements, and recordings from CCTV cameras.
4. Banking information (such as account numbers, credit card information, bill payment history).
5. Matahari service information (such as loyalty points).
6. Operating system type and version, hardware version, device settings, software type, battery and signal strength, screen resolution, device identity ( International Mobile Equipment Identity ), make and model, language,  internet browser type and version , application usage and versions.
7. Geographic location information, such as location derived from your IP address or GPS,  Base Station ,  Bluetooth or Wi-Fi signals, satellites, and the locations of connected telecommunications towers.
8. Some of our services use biometric information for identification or authentication. Biometric data may include fingerprints, photographs and/or videos.
9. Information from and about the various technologies that our services use ( the internet of things “IoT”), such as computers, phones and tablets, as well as other interactive devices, connected technology in the home or vehicle.

E. How Matahari uses your Personal Data

We may obtain and process your Personal Data for the following purposes:

1. To provide our services and products:
   1. To provide products, services and offers that may be of interest to you.
   2. To inform you about newly opened Matahari store products or services.
   3. To provide you with our latest offers, advertisements and promotions.
   4. To respond to and resolve your complaint.
   5. To understand how you use our services.
   6. To provide you with security updates , versions, features, options, and controls related to your system or device.

2. To communicate with you:
   1. To send you service messages.
   2. When you participate in a survey.
   3. To provide notices regarding your Personal Data, including in the event of a failure to protect your Personal Data.
   4. To send you information about our product and service offerings or those offered by third parties that we think may be of interest to you.

3. In daily business operations:
   1. To process payments and respond to customer service requests.
   2. For research and studies related to our business operational activities.
   3. To perform accounting, auditing, reconciliation and billing activities, including law enforcement and crime prevention, protect our and your legal rights, and carry out our contractual obligations to you and to our business partners.

4. For functionality, development and improvement of the service:
   1. To measure usage of our services, diagnose problems, and provide you with up-to-date security features.
   2. To test, modify, improve or develop new products and services and to identify existing trends.
   3. Contact you and check and resolve the problems and complaints you are facing.

5. For advertising and marketing, as long as your data is relevant for these purposes:
   1. We may use your Personal Data to determine personalized product and service offerings specifically for you.
   2. We may use your device's physical location, combined with information about what ads you view and other information we obtain, to provide personalized content to you.
   3. You can choose to allow or decline these advertising offers. You can also decline permissions requested through your device. However, if you choose to decline such offers and/or  permissions , we may not be able to provide you with personalized services and content that may be beneficial to you.

F. Automated Decision Making

In some services and features, we use your Personal Data to generate automated decision-making (including  profiling ) that may affect you. Automated decisions are decisions related to the provision and offering of services that are made automatically based on the results of algorithmic calculations, without human intervention.

We use automated analytics to make predictions such as what kind of products or services you are interested in, or for  profiling purposes  to prevent criminal activity. If our automated decision-making initiatives or plans have significant consequences for you, we will implement measures to protect your rights, freedoms and interests, by conducting a Data Privacy Impact Assessment to identify appropriate measures to protect those rights, or obtain your consent as required by law and regulations.

G. Information Regarding Children and Persons with Disabilities

Before using Matahari services, we will only collect and process Personal Data belonging to children under the age of 18 who have obtained consent from the parent or guardian of the owner of the Personal Data.

In the case of processing Personal Data belonging to persons with disabilities, consent may be given by the person with disabilities concerned and/or his/her guardian.

H. Personal Data Storage (Retention)

Personal Data that has been collected and will be retained for the period necessary to fulfill the purposes mentioned above. We may retain your Personal Data to provide the services you have requested, or for other legitimate interests, such as complying with our legal obligations under laws and regulations and obligations from government authorities, resolving legal issues, and carrying out our business operations. The retention period for Personal Data is based on applicable legal requirements. However, if there are no relevant laws and regulations, then your Personal Data will be retained as long as you are registered as a Matahari Rewards member/your account is registered at Matahari.com Furthermore, we can retain this Personal Data in printed or electronic form. You can submit a request for deletion of customer data/deactivation of Matahari Rewards members to Matahari. In this case, your data will be retained for a period of 1 (one) year from the request for deletion of personal data from the customer before deletion is carried out.

We may store your data in data centers or archive storage spaces managed by us or by data storage service providers, for and on our behalf. All of our storage locations, systems and products are equipped with the necessary security controls to ensure the protection of Personal Data.

Retention periods may vary based on the type of information and the legally required retention period, the course of judicial proceedings, business needs, enforcement of intellectual property rights, agreements, operational needs, and archiving. In the event that your Personal Data is removed from our systems, it will be deleted or destroyed using appropriate security protocols so that it cannot be reconstructed or read back by unauthorized parties.

I. Third Party Sites and Services

This Privacy Notice does not address, and we are not responsible for, the policies and practices of any third party or other organization not operating for and on behalf of Matahari, including policies and practices relating to privacy and security, collection, processing, use, storage and disclosure of Personal Data. This includes any third party operating any platform, website or service to which Matahari's services link. The inclusion of a link on Matahari's Services does not imply any association or affiliation between us and the provider of  such platform  or service.

J. Security

We strive to process your information in a secure environment by preventing unauthorized or unlawful access. We also safeguard your Personal Data from loss or destruction. We have implemented a variety of physical, technical, and administrative safeguards to protect your Personal Data and our networks from unauthorized access. These measures include: 

1. Encryption in transit or at rest.
2. Strict adherence to privacy and security practices.
3. Periodic data audits and reviews to improve our operational standards.
4. Restriction of access to Personal Data to personnel who have a need to know such data.

We require our suppliers and vendors to implement similar safeguards when they access or use the Personal Data we share with them. We also encourage you and all Matahari customers to protect the data, systems, networks and services they use. However, no technology, data transmission or system can be guaranteed to be 100% secure. Therefore, if you become aware of a Personal Data breach, please notify us immediately using the methods listed in the “  Contact Us ” section below.

K. How the Sun shares information

We work with our other partners to provide services as part of fulfilling our obligations to you. When we share your Personal Data with our partners, we implement necessary measures to limit the use of your Personal Data to legitimate reasons in accordance with this Privacy Notice, as well as adequate confidentiality and security measures. In addition to these purposes, we also share information with third parties to fulfill our legal obligations such as when requested by government authorities and to handle legal processes, to protect your vital interests, to carry out tasks in the public interest when requested by government authorities, public services, or the exercise of our authority under laws and regulations, and to fulfill other legitimate interests by taking into account the objectives, needs, and balance of our interests and your rights.

L. Corporate Actions

We may disclose your Personal Data as part of our corporate action where necessary, such as in the event of a reorganization, merger, sale of company assets, formation of a joint venture, transfer of all or a portion of our business, assets or stock (including in connection with bankruptcy). In the event of a corporate action that results in a transfer of Personal Data, we will notify you as required by law.

M. Communication Preferences and Choices

Matahari always takes reasonable steps to keep your Personal Data accurate, complete and up to date. You may opt out of receiving promotional e-mails or other Matahari communications by contacting us at the contact details listed below. This option does not apply to receiving product or service communications that are considered part of Matahari's products or services (such as billing information), unless you choose to no longer use such products or services.

In addition, we do not require you to provide us with your Personal Data. The decision to provide Personal Data is voluntary. However, if you do not wish to provide the required Personal Data, you may not be able to continue with the activities or receive benefits from our services for which such Personal Data is required.

N. Cross-Border Transfer of Personal Data

With your consent, we may transfer your Personal Data across geographical boundaries to other parties as long as they can be assured that their Personal Data protection is at a level similar to ours. Transfers of Personal Data are carried out under our standard contracts with data protection clauses or data transfer agreements with similar rights and obligations for the receiving party to protect the security and confidentiality of your Personal Data.

Matahari does not share your Personal Data, except in the following circumstances:

1. To Matahari group companies if necessary, and within the limits of applicable legal regulations.
2. As required by law, such as in connection with judicial proceedings, dispute resolution, and/or similar legal processes.
3. To protect our rights and protect your security.
4. With our business partners in the provision of products and/or services, such as field technician providers, contractors working for and on our behalf.
5. With our business partners in marketing activities of Matahari products and services, in which case no raw Personal Data is provided, as the information provided has generally been combined into aggregate data.
6. With third parties for educational, research and scientific development purposes.
7. With  our sister companies , subsidiaries and affiliates.

In all cases, the third party must agree to strict obligations to keep the Personal Data confidential and to use it only for the purposes for which it was obtained.

O. Exercise Your Rights

We respect your rights and privacy and we always take the necessary steps to ensure that your Personal Data is always accurate and up to date. We assure you that: 

1. You have the right to obtain information about clarity of identity, basis of legal interest, purpose of request, and use of Personal Data, and Matahari's accountability.
2. You have the right to complete, update and/or correct errors and/or inaccuracies in Personal Data about you.
3. You have the right to access and request copies of your Personal Data, in accordance with our policy on requesting copies of such Personal Data.
4. Subject to our obligations regarding customer data retention under the law, you have the right to ask us to suspend processing, restrict processing, stop processing, and/or delete your Personal Data in our systems. Please note that this may prevent us from continuing to provide some services to you.
5. You have the right to object to our automated decision-making.
6. You have the right to withdraw your consent from our processing of your Personal Data.

In order to exercise your rights, you are required to continue to follow all policies, procedures, and stages that we have set. In the event of a request for withdrawal of services by you, it remains subject to our approval to the extent permitted by law. You can contact us in the manner listed in the “ Contact Us ” section below.

P. Consequences arising from your failure to provide Personal Data

You can use our products or services and access our platforms or websites without providing your Personal Data. However, some activities or services available on our products, services, platforms or websites require us to collect certain Personal Data about you. If you are unable to provide such Personal Data, it may: 

1. Causing you to be unable to continue that activity;
2. Causing us to be unable to respond to your request;
3. Restrict or prevent access to certain features;
4. Causing us to be unable to provide you with the latest information regarding our promotions or service/product launches; and
5. Resulting in you not receiving promotions we send.

Q. Access or Correction to Customer Information

If you wish to correct or update your Personal Data, or to request access to your Personal Data held by us, you may contact us to make a request in writing by the method set out in the " Contact Us " section below. If you wish to change your Personal Data, please note that we may still need to retain certain information for recordkeeping purposes, and/or to complete any transactions you initiated prior to requesting such change (for example, when you make a purchase or enter a promotion, you may not be able to change the Personal Data provided until after the completion of such purchase or promotion). Some of your information may also remain in our systems and other records as necessary to comply with applicable law. Upon your request and if the law requires us to do so, we will share with you what Personal Data we have about you.

R. By providing your Personal Data to us, you agree that:

1. You have read and understood this Privacy Notice and consent to the use of your Personal Data as set out in this Privacy Notice.
2. In the event that you provide us with Personal Data relating to another individual (such as your spouse, family member, friend or other party), you represent and warrant that you have obtained and obtained the consent of that individual for, and hereby consent on behalf of that individual to, the use of such Personal Data as set out in this Privacy Notice.
3. All your statements are true and correct to the best of your knowledge, and you have not intentionally omitted any relevant information that is detrimental.
4. The consent you give to us is made without any coercion from any party.

S. Contact Us

If you have any questions about this Privacy Policy, you can contact us at:

Live Chat

Operational Schedule:

Monday-Sunday: 08:00-22:00 WIB

Phone: 021-50813024

Operational Schedule:

Monday-Sunday: 08.00-17.00 WIB

Email:  hello@matahari.com

Operational Schedule:

Monday-Sunday: 08.00-22.00 WIB

WhatApp Matahari: 0811-811-88888

Operational Schedule:

Monday-Sunday: 08:00-22:00 WIB

T. Dispute Resolution

In case of any alleged/violation of your privacy in connection with the processing of your Personal Data, you may lodge an objection with the relevant regulatory authority under the provisions of the laws and regulations.

U. Updates to the Privacy Notice

Matahari reserves the right to update this Privacy Notice without prior notice to you, whenever necessary. This Privacy Notice is the most current and will supersede any previous version. We strongly recommend that you check this Privacy Notice from time to time to be informed of any changes to the Privacy Notice.

V. Statement

Matahari will not sell or provide your personal information to others, except as described in this Privacy Policy. Matahari will share information with Matahari affiliates or other parties who perform services on Matahari's behalf based on Matahari's instructions. These third parties are not permitted to use or disclose the information except as necessary to perform services on Matahari's behalf or to comply with legal requirements. Matahari may also share information with other parties who are Matahari's partners to offer products or services that may be of interest to you.

Matahari may use third party services to maintain and operate Matahari websites/apps for business development.

W. Version information

This Privacy Notice was last updated on June 7, 2024.