Privacy Policy

Last updated: 31 August 2026

Adura, operated by PT ALAM DEWATA UTAMA (NPWP 020471660903000), respects your privacy and is committed to protecting the Personal Data you share with us when you use the Adura website and services. This Privacy Policy explains how and why we collect, process, store, and protect your Personal Data, and how you can exercise your rights as a data subject.

This Privacy Policy applies to all pages and services operated by Adura. Adura processes Personal Data in accordance with the laws of the Republic of Indonesia, in particular:

  • Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi — The “PDP Law”), which came into full effect on 17 October 2024;
  • Government Regulation No. 33 of 2026 on the Implementation of Personal Data Protection (Peraturan Pemerintah Nomor 33 Tahun 2026 tentang Peraturan Pelaksanaan UU Pelindungan Data Pribadi), and any other applicable laws and regulations;
  • any other applicable Indonesian data and electronic transaction regulations.

1. Personal data we collect

“Personal Data” means any data about an individual who can be identified, either directly or indirectly, through the data and/or other information. The Personal Data we process depends on how you use our website and services and includes:

  • Data you provide to us: full name, email address, professional role or job title, company/organisation details, and any other information you submit when you create an account, contact us, or use our services.
  • Account and usage data: information generated when you use the website, including the IP (Internet Protocol) address of the device that accesses the website, browser type and operating system, the date and time of your visit, the pages accessed and documents downloaded, and the referring website.
  • Communication data: records of your correspondence with us, including enquiries, complaints, and support requests.

We generally do not collect specific (sensitive) categories of Personal Data such as health data, biometric data, genetic data, criminal records, or financial data. If it ever becomes necessary to process such data, we will do so only where permitted and in accordance with the PDP Law and applicable regulations.

2. Legal bases for processing

Consistent with Article 16 of the PDP Law, we process your Personal Data on one or more of the following bases:

  • your explicit consent, which you may withdraw at any time;
  • the performance of a contract to which you are a party, or to take steps at your request before entering into a contract;
  • our compliance with a legal obligation;
  • the protection of your vital interests;
  • the performance of a task carried out in the public interest; or
  • our legitimate interests, provided they do not override your rights and freedoms.

3. How we use your personal data

We process your Personal Data for the following purposes:

  • to provide, operate, and maintain the Adura website and services, including creating and managing your account and responding to your requests or enquiries;
  • to communicate with you about our products, materials, and services, including direct marketing emails (only if you have subscribed and consented to receive them);
  • to improve and protect our website, including system administration, troubleshooting, security, and prevention of abuse or cyber attacks;
  • to comply with our legal obligations, and to establish, exercise, or defend legal claims.

4. How we collect data automatically

When you visit the Adura website we may automatically collect information about your device and how you interact with our website, including the IP address, the date and time of your visit, the pages accessed, the browser and operating system used, and the previous site visited. We use this information to understand how our website is used and navigated, including the number of visits and the frequency and duration of visits, and to improve your user experience.

We record some of this information using cookies — small data files stored on your device. Cookies help us collect anonymous statistical information about the use of the Adura website and improve your experience; they are not used for any other purpose. You can disable cookies at any time by adjusting your browser settings.

5. Disclosure of personal data

We will only use and disclose your Personal Data for the purpose for which it was collected, or for a purpose directly related to it, and only with your consent or where permitted or required by Indonesian law. We may share your Personal Data with:

  • service providers that process data on our behalf (such as hosting, email, and analytics providers), subject to contractual obligations to protect your Personal Data;
  • relevant authorities where the use of the website raises a suspicion that an offence is being, or has been, committed, or where we are required to do so by law or in response to a valid request or warrant from a competent authority; and
  • third parties in the event of a corporate transaction (merger, acquisition, or restructuring), subject to notification as required by law.

We will not sell your Personal Data. We do not take responsibility for the privacy policies or practices of third-party websites linked from the Adura website.

6. International transfer of personal data

As required by Article 56 of the PDP Law, transfers of Personal Data outside the Republic of Indonesia are only carried out where the destination country has a data protection standard that is equivalent to, or higher than, the protection provided under Indonesian law, or as otherwise permitted by applicable law.

7. Data security

We implement appropriate technical and organisational measures to protect your Personal Data against unauthorised access, alteration, disclosure, misuse, or destruction, including encryption of data in transit, access controls, and routine review of our security practices. While we strive to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data retention

We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve disputes or enforce our agreements. When the data is no longer needed, we delete or destroy it in a manner that prevents its recovery or misuse, as required by applicable law.

9. Your rights as a data subject

In accordance with Articles 5 to 15 of the PDP Law, you have the following rights in respect of your Personal Data:

  • Right to information: to obtain information and clarification about how your Personal Data is collected and processed;
  • Right to access and copies: to access your Personal Data and receive copies of it;
  • Right to correction: to request that incomplete, inaccurate, or outdated Personal Data be completed, updated, or corrected;
  • Right to deletion: to request the deletion or destruction of your Personal Data;
  • Right to withdraw consent: to withdraw your consent to the processing of your Personal Data at any time;
  • Right to restrict processing: to request that the processing of your Personal Data be suspended or restricted;
  • Right to data portability: to receive or transmit your Personal Data in a structured, commonly used, and machine-readable format, where technically feasible; and
  • Right to object: to object to processing of your Personal Data based on legitimate interests, including for direct marketing purposes; and
  • Right to damages: to claim compensation for any violation of the processing of your Personal Data, in accordance with applicable law.

To exercise any of these rights, please contact us using the details in Section 12. We will respond to your request within the timeframe required by applicable law (which, under the implementing regulation, is generally no later than 3 × 24 hours). We may ask you to verify your identity before acting on your request. In certain circumstances permitted by law, we may be unable to fulfil a request (for example, where doing so would endanger someone else, conflict with national security or defence interests, or breach a legal obligation); in that case we will explain our reasons in writing.

10. Data breach notification

In the event of a failure to protect Personal Data, we will notify the affected data subjects and the competent authority in writing within no more than 3 × 24 hours of becoming aware of the failure, as required by Article 46 of the PDP Law. The notification will describe the Personal Data affected, when and how the failure occurred, and the measures we are taking to handle and recover from it. If the failure is likely to cause harm to a wide group of people, we will also inform the public as required by law.

11. Changes and updates

This Privacy Policy may be updated from time to time to reflect changes in our practices or to comply with changes in Indonesian law. Any updated version will be published on the Adura website and will be effective from the date of publication. We encourage you to review this page periodically.

12. Contact us

If you have any questions, concerns, or requests about this Privacy Policy, or about how your Personal Data is handled, please contact our privacy officer at:

Attn: Privacy Officer — PT ALAM DEWATA UTAMA
Jl. Deplu Raya No.15, Bintaro, Pesanggrahan
Jakarta Selatan, Jakarta 12330
info@adura.my.id

We aim to respond to privacy enquiries and complaints within 3 × 24 hours. If you are not satisfied with our response, you may lodge a complaint with the competent personal data protection authority in accordance with applicable Indonesian law.