Privacy Policy &
Personal Data Protection

1. Legal Basis & Data Processing Principles

As an officially licensed telecommunications and network interconnection provider in Indonesia, we strictly comply with all relevant statutory laws, including but not limited to Law of the Republic of Indonesia No. 27 of 2022 on Personal Data Protection (UU PDP) and technical regulations issued by the Ministry of Communications and Informatics (Kemenkominfo).

We process personal data lawfully, transparently, and strictly within the scope of agreed service agreements, applying data minimization principles at every layer of our network infrastructure.

2. Data We Collect

The categories of information we collect include:

• Administrative Contact Data: Person-in-charge (PIC) name, corporate title, company/institution name, registered office address, official email address, and telephone/WhatsApp numbers voluntarily submitted through consultation or service contracts.
• Network Technical Data: Public IP allocations, throughput telemetry metrics (MRTG), router connectivity session logs, and latency monitoring data strictly utilized for Service Level Agreement (SLA) fulfillment.
• Web Navigation Telemetry: Visitor IP addresses, browser user-agents, language preferences (ID/EN), and accessed pages to enhance portal navigation security and performance.

3. Purposes of Data Processing

All collected data is processed strictly for:

• Delivering dedicated internet connectivity, Metro Ethernet, colocation data center, and managed ICT services pursuant to corporate contracts.
• Conducting proactive 24/7 network monitoring by our Network Operations Center (NOC) and dispatching maintenance notifications.
• Facilitating invoicing administration, official handover records (BAST), and service contract renewals.
• Complying with periodic mandatory reporting obligations to telecommunication regulatory authorities.

4. Security & Encryption Standards

We implement robust multi-layered technical and organizational security controls:

• All web communication is encrypted using current Transport Layer Security protocols (TLS 1.3).
• Internal storage systems are fortified with multi-tiered enterprise firewalls and Multi-Factor Authentication (MFA) restricted to authorized engineering personnel.
• Regular internal security vulnerability audits and complete customer data isolation across virtualized and private routing boundaries.

5. Non-Disclosure & Third-Party Restrictions

Arthaloka Networks never sells, leases, trades, or commercializes customer personal data to any third parties for marketing or commercial objectives. Data disclosure will only take place if strictly mandated by a valid judicial court order or legally authorized law enforcement authorities under the laws of the Republic of Indonesia.

6. Your Data Subject Rights

Under the Indonesian Personal Data Protection Act, you are entitled to:

• Request access to and verified copies of your personal data stored within our systems.
• Request rectification or updating of inaccurate, incomplete, or obsolete data records.
• Request cessation of processing or secure deletion of administrative records upon termination of service contracts, subject to statutory legal retention mandates.

7. Data Protection Officer (DPO) Contact

For inquiries, statutory requests, or to exercise your data subject rights, please direct your communication to our dedicated Data Protection Team: