Privacy policy
PT MAHAKARYA PERKASA INDONESIA (hereinafter referred to as “Company”, “we”, “us”, or “our”) is committed to protect the privacy and security of your personal data. This Privacy Policy describes the methods by which the Company collects, uses, stores, discloses, or transfers your personal data, as well as its reasons.
For purposes of this Privacy Policy, “you” or “your” refers to any individual accessing our website https://id.sylvanianfamilies.com and/or using any of our services or products. By accessing our website and/or using any of our services or products, you accept and agree to be bound by the terms of this Privacy Policy. If you are acting on behalf of a corporation or entity, you represent that you have the authority to bind such corporation or entity (and its relevant affiliates, as applicable) to this Privacy Policy, including to notify this Privacy Policy to each relevant data subject.
We do not knowingly or intentionally collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected personal data from a data subject under 18 years of age, we will take immediate steps to delete such data from our records, unless we are required otherwise under the laws and regulations. If you believe that any child under your guardianship has provided us with their personal data, please contact us in accordance with this Privacy Policy so we can address the issue.
For clarity, the term “personal data” refers to any data related to an individual, whether identified or capable of being identified independently or in combination with other information, whether directly or indirectly, through the use of an electronic system and/or non-electronic means.
A. Personal Data Collected by the Company
The Company will collect, use, store, disclose or transfer your following personal data:
- Name;
- Email;
- Address;
- Phone Number; and
- Online Behavior Data
B. Channels by which Personal Data are obtained
The Company may collect your personal data from your following interactions:
- purchasing the products on our website;
- creating user accounts through registration;
- your communication with the Company, whether by email, phone, or other communication channels.
C. Collection and Use of Personal Data under Lawful Bases
(1) The Company may collect, use, store, disclose or transfer your personal data to fulfill its contractual obligations for purposes of:
- user identification;
- contacting you to provide services or sales transactions; and
- billing.
(2) The Company may obtain your consent to collect, use, store, disclose or transfer your personal data in order to:
- Inform you about news, advertisements related to the Company’s products or services (including those of its business operators or business partners);
- Send to you promotional letters about the Company for direct marketing purposes (including about its operators or business partners);
- Analyze customer behavior (including for its business operators);
- Provide you with information relevant to your interests based on your website visit; and
- Track your overall online activity to enable website operators to improve the Company’s website or to improve its online marketing strategies.
(3) The Company may obtain consent if it complies with the following requirements:
1) The Company provides the following information:
the legality of personal data processing;
the purpose of personal data processing;
the types and relevance of personal data that will be processed;
the retention period of documents containing personal data;
the details of information collected;
the period of personal data processing;
data subject’s rights.
2) Consent is expressly given through written or recorded, electronically or non-electronically. If it contains several different purposes, the request for consent:
is clearly distinguishable from the other matters;
is made in an understandable and accessible form; and
uses clear and plain Indonesian language.
3) Consent is express opt-in consent and is not made implicitly/hidden or based on errancy (oversight), duress, or deception.
(3) The Company may collect, use, store, disclose or transfer your personal data if the Company has an obligation under the applicable laws and regulations to do so, for example to comply with statutory reporting obligations and court orders.
(4) The Company may collect, use, store, disclose or transfer your personal data if the Company has a legitimate interest to do so, for example to improve the safety, security, and quality of the Company’s products and services.
Please note that if your personal data is required to be processed by us for fulfilling our contractual obligations, failing to provide such personal data to us may result in us being unable to enter into or fulfill our contractual obligations with you. In such cases, we may have to decline providing you with our products and services, or cancel any related sales, purchases, or services, either partially or entirely.
If you have provided consent for processing certain personal data, you may withdraw that consent at any time by contacting us in accordance with this Privacy Policy, unless the withdrawal is restricted by law.
D. Disclosure of Personal Data
The Company will not share your personal data with third-parties or disclose the same without your consent, unless we are legally permitted or obligated to do so. Furthermore, the Company will not use your personal data for any purpose other than that for which it was originally collected.
Notwithstanding the above, it may be necessary for the Company to share or disclose your personal data with affiliated companies or business partners, such as:
- AnyMind Japan Inc.
- Vendors, partners, service providers, and data processors that the Company may engage in the future to support the Company’s business and operations.
If we share your personal data with the above parties, we require them to handle your personal data in compliance with this Privacy Policy, our confidentiality and security requirements, and the applicable laws and regulations.
Furthermore, it may be necessary for the Company to disclose your personal data during investigations, or in compliance with regulations, or as required by law, or as requested by government agencies or authorities, including the National Credit Bureau of Japan, for purposes of preventing fraud or corruption.
E. Transfer of Personal Data
The Company may provide your personal data to companies located in Japan or to third parties overseas for the purposes outlined under this Privacy Policy. By agreeing to the Privacy Policy, you also consent to the transfer of your personal data to those companies. In such cases, we will ensure that those companies handle your personal data with a level of protection equivalent to that required under Indonesian law.
Transferees:
- AnyMind Japan Inc. (service provider of the Company) in Japan; and
- Epoch Co., Ltd. in Japan.
When entrusting the handling of personal data to a third party, the Company investigates the contractor and selects an appropriate contractor. We ensure that appropriate safeguards are in place to protect your data in compliance with legal requirements, including by concluding a contract with the contractor based on standard contractual clauses approved by relevant authorities and confirm that the contents of the contract are being observed.
We may transfer personal data to a third party overseas if it complies with the following requirements:
(1) the country of domicile of the receiving data processor and/or data controller has a personal data protection level that is equal to or higher than the provisions in the Indonesian personal data protection laws (Please note, however, that there is no indication at this stage whether an officially approved list of countries will be published) (“Adequacy of Protection”);
(2) there is adequate and binding personal data protection in place (“Appropriate Safeguard”) (the Indonesian personal data protection laws do not cite the specific measures that would constitute Appropriate Safeguard (including whether certain standard contractual clauses or binding corporate rules are recognized as a valid transfer mechanism)); or
(3) the data subject has provided their consent.
F. Personal Data Retention and Duration
It is necessary for the Company to retain your personal data throughout the period in order to fulfill the purpose for which it was collected, including:
- Contacting you as our customers; and
- Obtaining your consent
The Company will retain your personal data in the form of soft copy and backup files in storage at [-] as long as you have an account on the website and in the maximum period of 5 years from your last purchase or contact, unless otherwise required by the applicable laws and regulations. For example, the Indonesian e-commerce law requires data relating to financial transactions to be retained for a minimum of 10 years as of the date the data and information was obtained, and 5 years for data and information not related to financial transactions. Only access authority assignment shall be able to access your personal data.
When the retention period has expired or when Company is no longer entitled to retain your personal data, it will destroy your personal data in accordance with its data retention policy and applicable laws and regulations.
G. Your Rights
As a data subject, you have the right to withdraw consent given to the Company at any time during the period your personal data are retained by the Company. Furthermore, you have the right of access to your personal data and to request: copies thereof in a structured, commonly used and/or electronic system-readable format; disclosure of your personal data obtained by the Company; correction of personal data that the Company has retained; object to an automated decision-making; and lodge a complaint if you have a reason to believe that we have violated the applicable laws and regulations on personal data protection. To the extent permitted under the applicable laws and regulations, the Company reserves the right to collect fees for copying or reproduction of data.
Further, you have the right to have your personal data deleted or destroyed, including restriction of, or objection to, its processing. You also have the right to request that your personal data be transferred to another party.
The exercise of your rights must comply with applicable laws and regulations. The Company reserves the statutory right to refuse any demand and will explain why we refuse to respond to your request in our reply.
The Company may restrict the following data subject rights: right to terminate processing (including to delete/destroy data), right to withdraw consent, right to object to an automated decision making, right to suspend and restrict processing, and right to data portability, for the following purposes:
national security;
the enforcement of law;
public interest;
financial interest;
statistical interests and scientific research (applied limited to several rights).
You can contact us via our contact information below to submit your request.
To ensure security of your personal data, we will ask you to verify your identity before processing your request.The Company will inform you of its processing of your request within 3 days from the date of successful verification of your identity.
H. Data Breach
We protect your personal data from the moment we collect it and until its deletion or destruction. We will notify you in the event of a data breach incident (e.g., loss, disclosure, unauthorized access, etc.) involving your personal data. If you believe that you have experienced or been affected by a data breach incident, please contact us in accordance with this Privacy Policy.
I. Contact Information
PT MAHAKARYA PERKASA INDONESIA
Ruko Graha Boulevard Summarecon Serpong Blok GBVB 10, Jalan
Gading Serpong Boulevard , Desa/Kelurahan Curug Sangereng, Kec.
Kelapa Dua, Kab. Tangerang, Provinsi Banten,
15810
081367749455
mpindo.25@gmail.com
J. Modification of Privacy Policy
From time to time, the Company may review this Privacy Policy to comply with guidelines, applicable laws and regulations. The Company will inform you of any changes, by way of the Company’s website, for your consideration. You may be asked to give consent to the Company’s new Privacy Policy by electronic or other appropriate means. The changes to the Privacy Policy will form an integral part of this Privacy Policy upon the effective date of the changes or your consent, as applicable.
K. Language
This Privacy Policy is made in English and Bahasa Indonesia versions. In the event of any discrepancy between the English language version and the Bahasa Indonesia versions of this Privacy Policy, the English language version shall prevail.
This Privacy Policy was last update on March 12th, 2025
Note