Privacy Policy

1. Who manages your data

Urfi Group is the data controller for shoppers' data on this store. Kelolify is the platform provider and processes that data on the store's behalf, following the store's instructions and this policy.

2. Data we collect

The data we receive depends on how you use this store:

• Account data: name, phone number or email, and password (stored in encrypted form).
• Shipping data: recipient name, address, and recipient phone number.
• Transaction data: cart contents, orders, invoices, payment history, balance, points, and any transfer proof you upload.
• Technical data: IP address, device and browser type, pages visited, and cookies or local storage in your browser.
• Messages you send to the store admin.

3. How we use your data

Your data is used to:

• create and manage your account;
• process orders, payments, and shipping;
• send notifications about orders, invoices, and shipments by app, WhatsApp, or email;
• provide support and answer your questions;
• keep your account secure and prevent fraud;
• prepare the store's sales and inventory reports;
• comply with legal obligations, including tax and bookkeeping.

4. Cookies and advertising pixels

This store uses cookies and local storage to keep you signed in and your cart intact. If the store enables advertising pixels (such as Meta, TikTok, or Google), they record your activity on the store, for example products viewed or purchased, to measure and target the store's ads. You can delete or block cookies in your browser settings; some features may not work without them.

5. Who we share data with

We do not sell your personal data. We share it only as needed with:

• couriers and shipping providers, to deliver your orders;
• banks or payment providers, to verify payments;
• infrastructure and data storage providers (hosting and database) that run the service;
• messaging providers such as WhatsApp or email, to send notifications;
• advertising and analytics providers, when pixels are enabled;
• authorities, when required by law.

6. Retention and security

Data is kept while your account is active or as long as needed for the purposes above, including bookkeeping and tax obligations. We use encrypted connections (HTTPS), per-store access separation, and role-based access control. No system is completely risk-free, so please keep your password confidential.

7. Your rights

Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022), you have the right to:

• access and request a copy of your personal data;
• correct inaccurate or incomplete data;
• request deletion or restriction of the use of your data;
• withdraw consent you have given;
• raise an objection or complaint with the store if your data is used contrary to this policy.

8. Children

This store is intended for adult shoppers. We do not knowingly collect data from anyone under 18. If you believe a child's data has been submitted, contact the store admin so it can be deleted.

9. Changes to this policy

We may update this policy from time to time. The date of the latest update is shown at the top of this page. By continuing to use the service after a change takes effect, you accept the updated policy.

10. Contact us

For questions or requests about your personal data, contact the Urfi Group admin through the contact details shown in this store (for example the Contact Admin button on the My Account page). For platform matters, contact Kelolify through the Contact page on kelolify.com.