Rumah Flava

Privacy Policy

Last updated: 1 May 2026

Rumah Flava ("we") respects your privacy. This policy explains what personal data we collect when you use the rumahflava.com website, how we use it, and your rights over that data.

1. Data We Collect

We collect the following data when you interact with our services:

  • Identity data: full name, email, mobile/WhatsApp number, profile photo (optional).
  • Shipping data: complete shipping address (province, city, district, postal code, address details), recipient name, recipient phone number.
  • Transaction data: order history, payment method, payment status. We do not store your credit/debit card number — payments are processed by Midtrans.
  • Device & log data: IP address, browser type, device type, pages visited, visit times.
  • Communication data: messages you send to our customer service via email, WhatsApp, or the contact form.
  • Additional data for resellers/agents: a photo of your ID card and other verification data (only if you register as a reseller).

2. How We Use Your Data

  • To process orders, payments, and shipping.
  • To send order-related notifications (confirmation, shipping, status).
  • To provide customer service.
  • To send promotional information (only if you subscribe/consent).
  • To improve website quality and user experience.
  • To prevent fraud and keep accounts secure.
  • To fulfill legal obligations (tax reporting, requests from authorities).

3. Third Parties That Process Your Data

We use the following trusted third-party services to run the store's operations. They have their own privacy policies that they must comply with:

  • Supabase — database storage & account authentication.
  • Midtrans — payment processing.
  • KiriminAja — shipping cost calculation and dispatch to couriers (JNE, J&T, SiCepat, etc.).
  • Resend — transactional email delivery.
  • Vercel — website hosting.
  • Google Analytics (if enabled) — website usage analytics.

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

4. Cookies

We use cookies to keep your login session, remember your cart contents, and analyze website usage. You can disable cookies through your browser settings, but some website features may not work optimally.

5. Data Storage and Security

  • Data is stored on encrypted Supabase servers (TLS in transit, AES-256 at rest).
  • Access to personal data is restricted only to staff who need it for operations.
  • We keep data for as long as your account is active. Transaction data is retained for at least 5 years for tax compliance.
  • Reseller ID-card data is stored separately with restricted access.

6. Your Rights Over Your Personal Data

Under Law No. 27 of 2022 on Personal Data Protection, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your account and personal data (except data required to be retained by law).
  • Restrict or object to certain processing (e.g. unsubscribe from promotional emails).
  • Port your data in a readable format.
  • File a complaint with the data protection authority.

To exercise these rights, contact us via the email listed on the Contact page. We will respond within 14 business days.

7. Minors

Our service is intended for users aged 17 and above. If you are under 17, please use this service under the guidance of a parent/guardian.

8. Changes to This Policy

We may update this policy from time to time. Significant changes will be notified via email or a notification on the website. The "Last updated" date above indicates the version in effect.

9. Contact

Questions about this privacy policy can be directed to our customer service via the Contact page.