Privacy Policy

Information you provide to us. We only collect personal information that you voluntarily send through the consultation form on our Contact page or by emailing us. This may include:

• Full name
• Company or property name
• Email address
• WhatsApp or phone number
• Business type and business location
• Estimated organic waste volume per day
• Service needs and preferred collection frequency
• The message or operational notes you write
• The website language you use (Indonesian or English)

Information collected automatically. When you visit the website, our hosting server records standard technical data such as IP address, browser and device type, pages visited, and access time. This is used for security and to keep the website running properly, not to identify you personally. IP addresses are also processed temporarily in server memory to limit excessive form submissions (anti-spam).

We do not ask for sensitive information (such as health data, biometric data, or identity numbers) through this website. Please do not include it in the message field.

We use your personal information to:

• Respond to inquiries and consultation requests, and contact you by email, WhatsApp, or phone.
• Understand your organic waste flow and needs so we can recommend the right service approach, such as organic waste pickup, SOMYA Bins, transportation, Rapid Digester processing, and compost return.
• Coordinate service delivery if you become our client.
• Keep the website secure and prevent spam and abuse.
• Comply with applicable legal obligations.

We process your information based on your consent (when you submit the form), the need to follow up on your request, our legitimate interest in operating and securing the website, and legal obligations.

We do not sell, rent, or trade your personal information to third parties for their promotional purposes. Your information may only be accessed or processed by:

• Hosting and email providers that run our website and mailbox, only to the extent needed to provide those services.
• Competent authorities, where required by law or to protect our rights.
• Professional advisers (for example legal or accounting) bound by confidentiality.
• A party that takes over all or part of our business in a merger or acquisition, with an equivalent level of protection.

Form submissions are not stored in a website database. The form is sent directly as an email to our company inbox over an encrypted SMTP connection (SSL/TLS), so the information is kept in our company email mailbox.

Our technical service providers may process data outside Indonesia. Where that happens, we aim to ensure equivalent protection in accordance with applicable law.

• Google Maps. The Contact page shows an embedded Google Map. When you open that page, Google may receive data such as your IP address and may set cookies in line with Google’s privacy policy.
• External links. This website links to Instagram (@somya.facility) and the SOMYA Technology website (somya.id). Their own privacy policies apply there, and we are not responsible for their practices.
• Fonts and visual assets are loaded from our own server, not from third-party font services.

This website does not set advertising cookies or cross-site tracking cookies, and we currently do not use third-party analytics tools. We only use browser session storage (sessionStorage) to remember that the opening animation has already been shown in the same tab. It contains no personal information and is cleared when the tab is closed.

You can manage or delete cookies through your browser settings. If we add analytics or tracking tools in the future, we will update this policy first.

We keep your personal information for as long as needed to follow up on your request, run the service relationship, and meet legal, tax, or accounting requirements. Once it is no longer needed, it will be deleted or reasonably anonymized.

We apply reasonable technical and organizational measures, including encrypted (HTTPS) connections to the website, email delivery over encrypted SMTP, input validation, rate limiting and anti-spam filtering, and mailbox access restricted to authorized personnel. However, no method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Under Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP) and its implementing regulations, as well as other laws such as the GDPR where they apply to you, you have the right to:

• Request access to, and a copy of, the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion or destruction of your personal information.
• Withdraw consent you have previously given.
• Request restriction of processing or object to certain processing.

To exercise these rights, contact us using the details at the end of this policy. We may ask you to verify your identity and will respond within a reasonable period in accordance with the law. Withdrawing consent does not affect lawful processing carried out before.

Our website and services are intended for businesses and organizations. We do not knowingly collect personal information from children under 18. If you believe a child has sent us personal information, please contact us so we can delete it promptly.

We may update this policy from time to time. The “Last updated” date at the top of the page shows the latest version. Changes take effect once published on this page.