PRIVACY POLICY – ASSEMBLE K
Last Updated: [25 April 2026]

This Privacy Policy (“Privacy Policy”) represents the commitment of Assemble K  to protect and respect your personal data when you access and use our website (“Website”).

This Privacy Policy explains how we collect, process, store, use, disclose, and protect your Personal Data in compliance with applicable laws and regulations of the Republic of Indonesia, including but not limited to:

Law No. 27 of 2022 on Personal Data Protection

Law No. 11 of 2008 on Electronic Information and Transactions as amended by Law No. 19 of 2016

Minister of Communication and Informatics Regulation No. 20 of 2016

(collectively referred to as “Applicable Laws”).

By accessing and using our Website, whether as a registered or unregistered user, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

1. Collection of Personal Data
We collect Personal Data necessary to provide and improve our services, including but not limited to:

a. Identity Information

•Full name

•Email address

•Phone number

•Billing and shipping address

b. Transaction Information

Payment details (including bank account or card details via secure payment gateways)

Purchase history and delivery details

c. Technical Data

IP address

Device and browser information

Log data, access time, and activity

d. Additional Information

Skincare preferences or concerns (if voluntarily provided)

Feedback, reviews, or communication

We may collect Personal Data through:

Account registration

Transactions and payment processes

Customer service interactions

Website usage and system logs

Third-party integrations (e.g., social media, business partners)

Data Retention Period:

Up to 10 years for financial-related data

Up to 5 years for non-financial data
or as required by Applicable Laws or until deletion is requested.

2. Use of Personal Data
Your Personal Data is used for the following purposes:

Verifying user identity

Processing transactions and delivering products

Improving website performance and user experience

Customer service and communication

Marketing, promotions, and personalized offers (with consent)

Market research and product development

Fraud prevention and legal compliance

We may also use aggregated data (non-identifiable) for analytics and business development.

3. Disclosure of Personal Data
We do not sell your Personal Data. However, we may disclose your data to:

Payment service providers

Logistics and delivery partners

IT service providers and system operators

Business partners under confidentiality agreements

Government authorities when required by law

In the event of corporate actions (e.g., merger, acquisition), Personal Data may be transferred in accordance with Applicable Laws.

4. Data Subject Rights
In accordance with Law No. 27 of 2022 on Personal Data Protection, you have the right to:

Access your Personal Data

Correct or update inaccurate data

Withdraw consent

Request deletion or restriction of processing

Object to data processing

Request data portability

Requests can be submitted via email: [Insert Email]

We reserve the right to verify your identity before processing such requests.

5. Withdrawal of Consent and Data Deletion
You may withdraw your consent or request deletion of your Personal Data by contacting us in writing.

Please note:

We may no longer be able to provide services

Some data may be retained for legal or operational purposes

Historical transaction data may not be fully deleted

6. Cookies
We use cookies and similar technologies to:

Enhance user experience

Store preferences

Analyze website traffic

You may disable cookies through your browser settings.

7. Communications
We may send notifications via email or electronic systems registered to your account.

Notices are deemed received within 2 (two) hours after delivery.

Users may contact us through the official contact details listed on the Website.

8. Advertising
Advertisements displayed on the Website may be provided by third-party advertisers.

These parties may use cookies or similar technologies to deliver relevant ads.

This Privacy Policy applies only to cookies used by Assemble K, not third parties.

9. Data Security
We implement appropriate technical and organizational measures to protect your Personal Data, including:

Secure Socket Layer (SSL) encryption

Restricted access to authorized personnel

Regular system monitoring and security review

While we strive to protect your data, no system is completely secure. Users are responsible for maintaining the confidentiality of their account credentials.

10. Updates to This Privacy Policy
We may update this Privacy Policy from time to time.

Changes will be notified via email or Website notification. Continued use of the Website constitutes acceptance of the updated Privacy Policy.