Privacy Policy

1. Introduction

This Privacy Policy explains how PT Inget Gue Creative Indonesia (“Inget Gue”, “we”, “us”) collects, uses, stores, discloses, and protects your personal data when you visit our website at https://ingetgue.com and related pages (the “Site”), or interact with us via the contact form, WhatsApp, email, or other channels we provide.

This Policy is prepared with regard to Law No. 27 of 2022 on Personal Data Protection (“PDP Law”) and its implementing regulations, as applicable. By using the Site, you confirm that you have read and understood this Privacy Policy. If you do not agree, please stop using the Site.

This Policy supplements our Terms of Service. Terms not defined here have the meaning given in the Terms of Service, unless the context requires otherwise.

2. Our role as data controller

For purposes of the PDP Law, Inget Gue acts as the personal data controller for personal data we process through the Site and related information, marketing, and sales communications.

Controller identity:

For personal data requests, see Data subject rights below and the information box on this page.

3. Scope

This Policy applies to:

• Visitors and users of the Site (including home, services, portfolio/showreel, clients, team, blog or other static content, contact, privacy policy, and terms pages);
• Individuals who complete the contact form or reach us via email, WhatsApp, or social media linked from the Site;
• Technical data collected automatically when you access the Site.

This Policy does not cover:

• Third-party websites, apps, or services linked from the Site (e.g. social platforms, Google Maps, or video providers). Their policies apply separately;
• Contractual relationships for creative/production services governed by a separate written agreement between you and us;

4. Definitions

In this Policy:

• Personal data means data about an identified or identifiable individual, alone or combined with other information.
• Processing includes collection, recording, storage, use, disclosure, deletion, and other operations on personal data.
• Consent means your valid agreement to processing of specific personal data, where required by law.
• Cookies are small files placed on your device when you visit the Site.

5. Categories of data we collect

5.1 Data you provide directly

When you contact us, we may process:

You are not required to provide all data; however, without minimum required data we may be unable to respond or process your request.

5.2 Automatically collected data

When you access the Site, our systems and infrastructure providers may record:

• IP address, date and time of access;
• Browser type, operating system, device, and language;
• Pages visited, referrer URL, visit duration;
• Session identifiers, security logs, and diagnostic data to prevent abuse.

5.3 Data from cookies and similar technologies

We use cookies and similar technologies as described in Section 8.

5.4 Data from third-party integrations (after consent)

If you accept cookies/analytics via the consent banner on the Site, enabled third-party providers may collect interaction data (e.g. pages viewed, click events, device or pseudonymous cookie identifiers) under their own policies. Providers we may use include, without limitation:

• Google Analytics 4 / Google Tag Manager (Google);
• Meta Pixel (Meta);
• Microsoft Clarity (Microsoft);
• Hotjar (Hotjar Ltd.).

The actual list may change and is configured in our integration settings. Analytics scripts are not loaded until you give consent, except cookies strictly necessary for basic Site operation.

6. Purposes and legal bases for processing

We process personal data for the following purposes:

We do not sell your personal data. We do not use automated profiling that produces significant legal effects on you without a lawful basis.

7. Contact form and communications

7.1 On-site form

The public contact form requests data such as name, email, phone, country (optional), subject, and message. Submissions may be protected by anti-bot measures (e.g. Cloudflare Turnstile). We may also store IP address and user-agent for security and to limit repeat submissions.

7.2 Email notifications

After a successful submission, we may send a confirmation email to the address you provided and notify our internal team via an email service (e.g. Resend or equivalent). Your message is stored in our internal lead management system, accessible only to authorized personnel.

7.3 Form data retention

Contact form and lead data are kept as long as needed to follow up, meet legal obligations, or resolve disputes, then deleted or anonymized per our internal retention policy.

8. Cookies and tracking technologies

8.1 What cookies are

Cookies help the Site function, remember preferences, and — if you agree — help us understand how visitors use the Site.

8.2 Types of cookies

If you reject analytics, we may still use essential cookies; third-party analytics scripts will not load.

8.3 Managing preferences

You can:

• Change your choice by deleting Site cookies in your browser and reloading the page (the banner will appear again);
• Configure your browser to block cookies (some Site features may not work optimally);
• Use provider opt-out tools where available (e.g. Google Analytics Opt-out, Meta/Google ad settings).

8.4 Google Consent Mode

Where enabled, we initialize Google Consent Mode so Google tags respect your choices before analytics data is processed.

9. Disclosure to third parties

We may share personal data with:

We require third parties processing data on our behalf to maintain confidentiality and security under reasonable processing agreements, where applicable.

10. Cross-border transfers

Some providers (e.g. Google, Meta, Microsoft, Hotjar, Cloudinary, or hosting providers) may process data on servers outside Indonesia, including in the United States or the European Union. In such cases, we apply reasonable measures under the PDP Law, such as ensuring adequate protection, standard contractual clauses, or other transfer bases recognized by regulation.

11. Data security

We implement reasonable technical and organizational measures, including:

• Encryption in transit (HTTPS/TLS) for Site communications;
• Role-based access control for internal systems (backoffice);
• Strong authentication for admin accounts (including optional two-factor authentication);
• Restricting lead data access to personnel who need it;
• Log monitoring and secure development practices.

No electronic transmission or storage method is 100% secure. If a data breach occurs that must be reported under the PDP Law, we will act in accordance with applicable legal requirements.

12. Data subject rights

Under the PDP Law, you may have the right to:

1. Be informed — know whether your personal data is being processed;
2. Access — obtain a copy of personal data we hold about you;
3. Rectify — correct inaccurate or incomplete data;
4. Erase — request deletion when no longer necessary or when the legal basis ends;
5. Withdraw consent — for consent-based processing (e.g. analytics cookies), without affecting lawfulness of processing before withdrawal;
6. Restrict or postpone — processing in circumstances provided by law;
7. Object — to processing based on legitimate interests, as provided under the PDP Law;
8. Data portability — where processed automatically based on consent or contract, in a commonly used format.

To exercise these rights, contact us via:

• Email: creative@ingetgue.com
• Form: Contact page with a data-request subject
• WhatsApp: number shown on the Site

We may request reasonable identity verification before processing your request. We will respond within the timeframe set by PDP implementing regulations (or within a reasonable period if not yet specified). You may also lodge a complaint with the competent personal data protection authority in Indonesia.

13. Children’s data

The Site is intended for a general and business audience. We do not knowingly collect personal data from children under 18 without valid parental/guardian consent. If you believe we have received a child’s data without proper basis, contact us so we can delete it.

14. Links to other sites

The Site may link to third-party sites (social media, maps, video platforms, etc.). Their privacy practices apply separately. We are not responsible for external sites’ privacy practices.

15. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will be published on this page with effective and last updated dates. Material changes may be announced on the Site. Continued use after changes take effect constitutes your acceptance, to the extent permitted by law.

16. Contact

For questions about this Privacy Policy or personal data processing:

PT Inget Gue Creative Indonesia
JL. Pembangunan No. 46, Jombang, Ciputat, South Tangerang City, Banten 15414, Indonesia
Email: creative@ingetgue.com
Website: https://ingetgue.com