Privacy Policy

1. Introduction

Skills For Life Foundation ("we," "our," or "us") is a Yayasan (foundation) established under the laws of the Republic of Indonesia, committed to protecting and respecting your privacy in accordance with Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Pelindungan Data Pribadi / UU PDP).

This Privacy Policy explains how we collect, use, store, and safeguard your personal data when you visit our website, make a donation, purchase event tickets, or interact with us in any way. As a Personal Data Controller under the UU PDP, we are responsible for the lawful and proper handling of your personal data.

By using our website and services, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

Under the UU PDP, personal data is classified into two categories:

General Personal Data (Data Pribadi Umum)

• Full name
• Email address and phone number
• Postal address
• Nationality
• Communication preferences

Specific Personal Data (Data Pribadi Spesifik)

• Payment and financial information when making donations or purchasing event tickets
• Any health or dietary information provided for events

Automatically Collected Data

• IP address and browser type
• Device information
• Pages visited and time spent on our website
• Referring website addresses

3. How We Use Your Data

We use the information we collect for the following purposes:

• To process donations and event ticket purchases
• To send you updates about our foundation and events
• To respond to your inquiries and requests
• To improve our website and services
• To comply with legal obligations under Indonesian law
• To prevent fraud and ensure the security of our services

4. Data Sharing and Third-Party Processors

We do not sell, trade, or rent your personal data to third parties. We use the following third-party services to process transactions:

• Xendit (xendit.co) — PCI DSS Level 1 compliant payment gateway for processing donations. When you make a donation via Xendit, they collect your name, email address, phone number, payment card details, billing address, and transaction information directly.
• Megatix Indonesia (megatix.co.id) — event ticketing platform for gala ticket purchases. When you purchase tickets via Megatix, they collect your personal and payment data directly.

Skills For Life Foundation does not directly collect, store, or process your payment card information. This data is collected and processed by our third-party payment processors in accordance with their own privacy policies:

• Xendit Privacy Policy
• Megatix Privacy Policy

We may also share your information with:

• Legal authorities: When required by Indonesian law or to protect our rights
• Business partners: With your consent, for joint events or initiatives

All third parties are required to respect the security of your personal data and treat it in accordance with applicable laws, including the UU PDP.

5. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us:

• Remember your preferences
• Understand how you use our website
• Improve our services based on this information

Third-party services such as Xendit and Megatix may also set cookies when you interact with their platforms through our website.

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of our website.

6. Your Rights Under the UU PDP

Under Law No. 27 of 2022 on Personal Data Protection, you have the following rights:

• Access: Request information about your personal data that we process
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion or termination of processing of your personal data
• Withdrawal of Consent: Withdraw your consent for data processing at any time
• Restriction: Request limitation of processing of your data
• Portability: Request transfer of your data in a commonly used, machine-readable format
• Objection: Object to automated decision-making that produces legal effects

We will respond to your requests within 3 x 24 hours (three calendar days) as required by the UU PDP. To exercise any of these rights, please contact us at support@skillsforlifebeautyschool.foundation.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Secure servers and firewalls
• Regular security assessments
• Staff training on data protection

Our payment processor Xendit is PCI DSS Level 1 compliant and employs AES-256 encryption (bank-grade) to protect your financial information.

8. Data Breach Notification

In the event of a personal data breach, we will notify affected individuals and the relevant authority in writing within 3 x 24 hours (three calendar days), in accordance with Article 46 of the UU PDP. Such notification will include:

• What personal data was affected
• When and how the breach occurred
• Efforts taken to handle and recover the data

9. Cross-Border Data Transfer

Your personal data may be transferred to and processed on servers located outside Indonesia. In accordance with Article 56 of the UU PDP, we ensure that any cross-border transfer of personal data is conducted with adequate data protection safeguards. Our payment processors may store data in Indonesia, the United States, and the Philippines, subject to appropriate security measures.

10. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: