Privacy Privacy Policy
“`html Privacy Policy Effective Date: October 26, 2023 Welcome to baliproofoffunds.com (“we,” “our,” or “us”). We are an Indonesia-based visa […]
“`html
Privacy Policy
Effective Date: October 26, 2023
Welcome to baliproofoffunds.com (“we,” “our,” or “us”). We are an Indonesia-based visa agency specializing in proof of funds services for visa applications. Your privacy is critically important to us. This Privacy Policy outlines how we collect, use, process, and protect your personal data in compliance with Indonesia’s Personal Data Protection Law (UU 27/2022 PDP) and the General Data Protection Regulation (GDPR) for our clients residing in the European Union.
1. Data We Collect
To provide our services, we collect various types of personal data. The specific data collected depends on the nature of the service you require.
- Personal Identification Data: Full name, date of birth, nationality, gender, passport details (number, issue/expiry dates, place of issue), visa history, and photographs.
- Contact Information: Email address, phone number, residential address, and emergency contact details.
- Financial Information: Bank statements, proof of funds documents, income details, and other financial records necessary to meet visa requirements.
- Technical Data: IP address, browser type and version, device information, operating system, and unique device identifiers collected when you visit our website.
- Usage Data: Information about how you use our website, including pages visited, time spent on pages, and referring websites.
- Sensitive Data: In specific circumstances where required by immigration authorities for certain visa types, we may collect health information or biometric data (e.g., fingerprints, facial recognition data), but only with your explicit consent and strict necessity.
2. Purpose of Data Collection
We collect and process your personal data for the following purposes:
- Visa Application Processing: To prepare, submit, and manage your visa applications, including verifying proof of funds and ensuring compliance with destination country immigration laws.
- Communication: To respond to your inquiries, provide updates on your application status, send necessary documents, and offer customer support.
- Service Improvement: To analyze website usage, improve our services, and enhance user experience.
- Legal and Regulatory Compliance: To comply with Indonesian immigration laws, anti-money laundering regulations, and other applicable legal obligations.
- Fraud Prevention: To detect and prevent fraudulent activities and ensure the security of our services.
- Marketing (with Consent): To send you promotional materials or information about our services, only if you have provided explicit consent.
3. Legal Basis for Processing (for EU Clients under GDPR)
For clients protected by GDPR, our legal bases for processing your personal data are:
- Contractual Necessity: Processing is necessary for the performance of a contract with you (e.g., processing your visa application).
- Legal Obligation: Processing is necessary for compliance with a legal obligation (e.g., Indonesian immigration laws).
- Legitimate Interests: Processing is necessary for our legitimate interests (e.g., improving services, fraud prevention), provided your rights and freedoms are not overridden.
- Consent: For specific processing activities, such as marketing or collecting sensitive data, we will obtain your explicit consent.
4. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, this means we will keep your data for the duration of your visa application process and for a period thereafter (e.g., 5-7 years) to comply with legal obligations, such as immigration record-keeping and financial audit requirements. After this period, your data will be securely deleted or anonymized.
5. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with:
- Government Authorities: Indonesian Immigration, embassies, consulates, and other relevant government bodies essential for processing your visa application.
- Service Providers: Third-party vendors who provide services on our behalf, such as IT support, hosting, payment processing, and analytics. These providers are contractually bound to protect your data and only process it according to our instructions.
- Legal Requirements: When required by law, court order, or governmental regulation, we may disclose your data to law enforcement or other authorities.
- International Transfers: As an Indonesia-based service, your data will be processed in Indonesia. For EU clients, we ensure that any international transfers of personal data outside the EU are protected by appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
6. Your Rights
You have significant rights regarding your personal data under both UU 27/2022 PDP and GDPR:
- Right to Information/Access: You can request information about the processing of your data and obtain a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”): You can request the deletion of your personal data, subject to certain legal exceptions (e.g., ongoing legal obligations).
- Right to Restriction of Processing: You can request that we limit the way we use your personal data.
- Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You can object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time.
- Right to Compensation: Under UU 27/2022 PDP, you may have the right to compensation for damages suffered due to personal data breaches.
To exercise any of these rights, please contact us using the details provided below.
7. Data Security
We implement robust technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include data encryption (e.g., SSL/TLS), firewalls, secure servers, access controls, regular security audits, and employee training on data protection best practices. While we strive to protect your data, no method of transmission over the