Privacy Policy

1. Data we collect

Information you provide may include your name, company, WhatsApp/telephone number, email, project and installation location, product/works requirements, capacity, notes, and later communications you choose to send. The current RFQ is not intended to upload documents. Staff accounts involve name, email, protected credentials, roles, account state, and administrative/editorial activity.

Systems and infrastructure providers may record technical information such as IP address, request time, URL, device/browser data, errors, response status, and security events needed to run and protect the service.

Strictly necessary cookies may support sessions, security, CSRF, language, and consent preferences. Optional analytics or marketing storage must remain denied until an appropriate choice is made. Configured services may include Google Tag Manager/Google Analytics, Vercel Analytics, and Vercel Speed Insights. Accepting and rejecting optional use must be equally accessible, and preferences must remain changeable.

2. How we use data

We use data as needed to receive and follow up enquiries/RFQs; contact you through the details you provide; prepare requested technical or commercial discussions; operate staff accounts and editorial workflows; secure, troubleshoot, and audit the service; measure performance/use where required consent exists; comply with applicable obligations; and respond to data-rights requests.

Submitting a form does not itself create a quotation, contract, project acceptance, or guaranteed response time.

3. Grounds for processing

The applicable ground depends on context and law, and may include steps you request before an agreement, performance of a business relationship, consent for optional uses, legal obligations, and legitimate operational/security interests. Where processing relies on consent, withdrawal applies prospectively and does not invalidate earlier lawful processing.

4. Sharing and providers

Data may be accessed by Indocrane personnel who need it and by providers supporting the service, potentially including Vercel (frontend hosting/performance/configured analytics), Jagoan Hosting (Laravel, database, media, logs, provider backup), Google (configured tags/analytics subject to consent), and email or WhatsApp providers when you select those channels. Advisers, auditors, or authorities may receive data where justified and required.

We do not sell personal data. Some providers may process data outside Indonesia; where applicable, we will take steps required by law and reasonably assess provider safeguards.

5. Retention

We retain data for as long as needed for collection purposes, business relationships, security, dispute handling, and legal obligations. The period may vary by data category and provider configuration. When data is no longer needed, we reasonably delete or anonymize it unless a lawful, security, dispute, or other legitimate need requires retention. Provider backups may retain copies according to the provider's backup cycle.

6. Security

Planned safeguards include HTTPS, role-based access, session/CSRF protection, input validation, request throttling, audit trails, separation of public/private files, and environment-based secret management. No system is risk-free and we do not promise absolute security. Do not send passwords, payment data, identity documents, or confidential documents through the RFQ unless a separately approved secure channel is provided.

7. Your rights

Subject to applicable law and proportionate identity verification, you may request information, access, correction, updating, consent withdrawal, restriction/cessation of certain processing, deletion/destruction, or other available rights. Lawful obligations, active contractual needs, security, evidence, or exemptions may limit a request.

To make a personal-data request, contact us using the details above with the subject “Personal Data Request”. We will reasonably verify your identity and the scope of the request, then handle it within the period required by law for that type of request. Do not send a copy of your identity document until we explain a secure verification method.

8. Children

Our industrial site and services are not directed to children, and we do not intend to knowingly request children’s data through the RFQ. Contact us if you believe such data was submitted without an appropriate basis.

9. Third-party links and channels

The site may link to maps, social media, email, WhatsApp, or third-party sites. Their policies and security apply after you leave our site.

10. Changes

We may update this Policy as our processes, providers, features, or obligations change. The current version will show its effective date, and material changes will be communicated reasonably as required.

11. Contact

For privacy questions or personal-data requests, contact PT Indocrane Wahana Solusindo at Jl. Keputih Tegal No. 29, Surabaya, East Java 60111, Indonesia through indocrane@yahoo.com.