Skip to main content

Privacy Policy

Last updated: 3 July 2026 · PT Nusanua Marketplace Indonesia

Template for review. This document is a working draft and must be reviewed by Indonesian counsel before commercial launch.

1. Data we collect

We collect three kinds of data:

  • Account data: name, email address, phone number, password (stored as a salted hash, never in plain text), and your role on the platform.
  • Company data: business name, address, registration details, and for suppliers the verification documents you submit (for example NIB, NPWP, company deed, certificates).
  • Usage data: RFQs, quotes, orders, messages, documents, and technical logs such as IP address and browser type used for security and rate limiting.

2. How we use it

We use this data to operate the platform: matching RFQs to suppliers, displaying supplier profiles and verification status, coordinating samples, inspections, payments, and shipments, sending service notifications, preventing fraud and abuse, and meeting legal obligations. We do not use your data for purposes unrelated to sourcing coordination without asking you first.

3. Storage and security

Data is stored in access-controlled databases hosted with reputable cloud providers. Sessions use secure, httpOnly cookies, and administrative actions are recorded in an audit log. We retain personal data while your account is active and for as long as needed to meet legal, accounting, or dispute-resolution requirements, after which it is deleted or anonymised.

4. Sharing, and what we never do

We do not sell personal data. Data is shared only where the service requires it: supplier company profiles are public by design, buyer contact details on an RFQ are shared with the suppliers who quote it, and partner providers (inspection, logistics, payments) receive the minimum data needed to perform the service you requested. We may disclose data where required by law.

5. Your rights and UU PDP

We align our handling of personal data with Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP). You may request access to, correction of, or deletion of your personal data, and you may withdraw consent for non-essential processing. We will respond to verified requests within the timeframes UU PDP requires. Where you are located outside Indonesia, we also honour applicable local rights requests where reasonably practicable.

6. Contact

Privacy questions and data requests: support@nusanua.com. We will update this policy as the platform evolves and announce material changes on the platform before they take effect.