Introduction to Privacy Policy

Welcome to the uicreativa platform, operated by uicreativa and its affiliates (individually and collectively referred to as "uicreativa" or "we"). uicreativa takes its responsibilities under applicable privacy laws and regulations (“Privacy Laws”) seriously and is committed to respecting the privacy rights and concerns of all users of our uicreativa platform ("Platform"). We refer to the Platform and the services we provide as described on our site collectively as the “Services.” We recognize the importance of the personal data you have entrusted to us, and it is our responsibility to properly manage, protect, and process your personal data. This Privacy Policy (“Privacy Policy” or “Policy”) is designed to help you understand how we collect, use, disclose, and/or process the personal data that you have provided to us and/or that we hold about you, whether now or in the future, as well as to assist you in making informed decisions before providing us with your personal data.

“Personal Data” refers to data, whether true or not, about an individual who can be identified from that data, or from that data and other information that an organization has or is likely to have access to. Common examples of personal data include names, identification numbers, and contact details.

By using the Services, registering for an account with us, visiting our Platform, or accessing our Services, you acknowledge and agree that you accept the practices, requirements, and/or policies outlined in this Privacy Policy, and you hereby consent to us collecting, using, disclosing, and/or processing your personal data as described herein. IF YOU DO NOT CONSENT TO THE PROCESSING OF YOUR PERSONAL DATA AS DESCRIBED IN THIS PRIVACY POLICY, PLEASE DO NOT USE OUR SERVICES OR ACCESS OUR PLATFORM. If we make any changes to our Privacy Policy, we will post those changes or the amended Privacy Policy on our Platform. We reserve the right to modify this Privacy Policy at any time.

This Policy applies in conjunction with any other notices, contractual clauses, consent clauses that apply concerning the collection, storage, use, disclosure, and/or processing of your personal data by us, and is not intended to override those notices or clauses unless we state otherwise.

This Policy applies to both buyers and sellers using the Services unless otherwise expressly stated.

1. Data Collection
   • We collect personal information such as name, email address, phone number, and payment details when you interact with our website.
   • We only collect data that is necessary for providing services or improving user experience.
   • Your personal data will not be collected without your explicit consent.
   • We ensure the data collected is stored securely and protected from unauthorized access.
   • We do not collect sensitive data unless necessary and with clear user consent.
2. Purpose of Data Collection
   • The data collected is used to provide services, handle transactions, and improve user experience.
   • We use your data to personalize your experience on our website.
   • Data may be used to complete transactions related to project orders or course enrollments.
   • Information collected may be used to improve website functionality or develop new services.
   • We do not use your data for purposes outside of what is outlined in this policy.
3. Data Usage
   • Your data is used only for the purposes outlined in this policy, including project management and course enrollment.
   • We will not use your data for any unauthorized purposes.
   • Data is used to ensure smooth operation of the services you request from us.
   • Your data will not be sold or leased to any third party.
   • The usage of your data is aligned with both local and international data protection laws.
4. Third-Party Sharing
   • We do not share your data with third parties unless required to provide services or as required by law.
   • We only share your data with trusted partners necessary to deliver our services.
   • Any third parties we share your data with are required to uphold strict confidentiality and data protection standards.
   • We do not engage in the selling or renting of personal information to advertisers or marketers.
   • Data sharing will only occur if legally mandated or necessary to protect the rights and security of our business or users.
5. Cookie Usage
   • Our website uses cookies to enhance user experience, track website traffic, and provide personalized content.
   • Cookies help us understand user preferences to optimize the website experience.
   • We use session cookies to manage user navigation and ensure proper functionality of the website.
   • Third-party cookies may be used for analytics but will not collect personal information.
   • You can opt-out of non-essential cookies through your browser settings.
6. User Consent
   • By using our website, you consent to the collection and use of your personal information as described in this policy.
   • We seek explicit consent from users before collecting any personal information.
   • Users can withdraw their consent at any time, but certain services may become unavailable as a result.
   • We clearly inform users about the data we collect and how it will be used before collecting it.
   • In cases of sensitive data, we ensure additional layers of consent are implemented.
7. Data Protection
   • We implement security measures to protect your data from unauthorized access, alteration, or disclosure.
   • Data encryption is used to secure personal information during storage and transmission.
   • Our servers are regularly monitored and updated to mitigate security risks.
   • Access to personal data is limited to authorized personnel only.
   • We comply with industry-standard security practices to safeguard user data.
8. User Rights
   • You have the right to access, update, or request the deletion of your personal data at any time.
   • You can request a copy of the personal information we hold about you.
   • You have the right to correct any inaccurate or incomplete data.
   • We honor requests for the deletion of personal data unless it is required for legal purposes.
   • You can object to certain data processing activities and opt out of direct marketing communications.
9. Data Retention
   • Personal data is retained for as long as necessary to fulfill the purposes outlined in this policy, unless otherwise required by law.
   • Data will only be retained for as long as necessary to provide the services you have requested.
   • We periodically review the data we hold to ensure it is still needed and relevant.
   • If we no longer require your data, it will be securely deleted or anonymized.
   • Legal obligations may require us to retain data for longer periods, such as tax or audit purposes.
10. Children’s Privacy
    • We do not knowingly collect personal data from individuals under the age of 18 without parental consent.
    • We take extra precautions to ensure compliance with regulations protecting children’s privacy.
    • If we become aware of the collection of data from a child under 18 without parental consent, we will promptly delete it.
    • Parents or guardians can contact us to review or request the deletion of their child’s data.
    • We encourage parents to monitor their children’s online activities and make informed decisions about their privacy.
11. Payment Information
    • Payment details are processed securely, and we do not store full payment information on our servers.
    • Payment information is handled by trusted third-party payment processors with high-security standards.
    • We ensure that payment transactions are encrypted to prevent unauthorized access.
    • We do not retain sensitive payment information such as credit card numbers.
    • Payment records are retained only for as long as necessary for transaction verification.
12. Data Transfer
    • Personal data may be transferred to and stored in locations outside your country, subject to appropriate data protection measures.
    • Cross-border data transfers are conducted in compliance with applicable data protection laws.
    • We ensure that adequate safeguards are in place when transferring data to countries with differing privacy regulations.
    • Your data will only be transferred to third parties that can guarantee the same level of protection as we do.
    • If required by local laws, you will be notified of any such data transfers.
13. Third-Party Services
    • We may use third-party services for hosting, payment processing, or marketing, all of which adhere to strict data protection policies.
    • Any third-party service providers we work with must comply with international data privacy standards.
    • We ensure that third-party services have robust data protection mechanisms in place before partnering with them.
    • If a third-party service provider fails to meet data protection standards, we will immediately terminate the relationship.
    • Your data will only be shared with third parties if necessary for the functioning of our services.
14. Marketing Communications
    • You may opt-in or opt-out of receiving marketing communications from us at any time.
    • We provide clear options to unsubscribe from marketing emails or messages.
    • Your personal data will never be used for marketing purposes without your explicit consent.
    • Marketing communications are designed to offer relevant information about our services or special offers.
    • We respect your preferences and ensure that marketing activities comply with privacy laws.
15. User Account Information
    • Users can create, manage, or delete their accounts, and all associated data will be handled accordingly.
    • You have full control over the information stored in your user account.
    • You can request the deletion of your account at any time, and all personal data will be securely removed.
    • We will notify you of any significant changes to your account or related privacy settings.
    • Account information is protected by strong authentication measures to prevent unauthorized access.
16. Changes to the Policy
    • We reserve the right to update this privacy policy and will notify users of any significant changes.
    • Policy updates will be communicated through email or prominent website notifications.
    • Continued use of our services after policy changes indicates your acceptance of the updated terms.
    • We review and revise our privacy policy regularly to ensure compliance with the latest data protection laws.
    • Historical versions of our privacy policy will be archived and made available upon request.
17. Legal Compliance
    • We comply with applicable data protection laws, including GDPR, CCPA, and any other relevant regulations.
    • Our privacy practices are regularly reviewed to ensure legal compliance.
    • We respect the data protection rights of users from different jurisdictions.
    • In cases where there are conflicting legal obligations, we prioritize the privacy rights of our users.
    • We maintain transparency about our legal obligations and commitments to protect user data.
18. Data Breach Procedures
    • In the event of a data breach, we will notify affected users and the appropriate authorities promptly.
    • We have incident response protocols in place to manage data breaches.
    • You will be informed of the nature of the breach and the steps we are taking to mitigate the damage.
    • Affected individuals will be given guidance on how to protect themselves from any potential harm.
    • We collaborate with legal authorities to investigate and resolve any data breach incidents.
19. User Consent Withdrawal
    • Users may withdraw consent for data collection and processing at any time, subject to service limitations.
    • Withdrawing consent may affect your ability to use certain features of our services.
    • We respect your decision to withdraw consent and will promptly halt any further data processing.
    • Any data collected prior to consent withdrawal will be handled in accordance with our data retention policies.
    • You will be informed about the consequences of withdrawing consent before proceeding.
20. Contact Information
    • Users can contact us with privacy-related inquiries via email or other provided contact methods.
    • We strive to respond to privacy-related questions and concerns within a reasonable time frame.
    • Contact details for our data protection officer are available for more specific inquiries.
    • We welcome feedback on how we can improve our privacy practices.
    • Users can request detailed information about our data protection measures.
21. Analytics and Tracking
    • We use web analytics tools to monitor website traffic and user behavior for optimization purposes.
    • Analytics tools help us understand how users interact with our site to improve functionality.
    • Personal data is not used in analytics unless anonymized.
    • Third-party analytics providers are bound by strict confidentiality agreements.
    • You can opt-out of analytics tracking by configuring your browser settings or using third-party tools.
22. Data Accuracy
    • We ensure that personal data is kept accurate and up to date and provide tools for users to update their information.
    • We encourage users to review and update their personal data regularly.
    • Inaccurate or outdated data will be corrected or deleted upon request.
    • You can update your data through your account settings or by contacting us directly.
    • Data accuracy is essential for providing a seamless experience on our website
23. International Users
    • Users accessing our services from outside of Indonesia consent to the transfer of their data to our servers in Indonesia or other regions.
    • We comply with local data protection laws when handling international user data.
    • International users are informed about the data transfer processes before providing their information.
    • We ensure that data transfers adhere to cross-border privacy frameworks like GDPR.
    • Users have the right to request more information about how their data is handled internationally.
24. Service Providers
    • We ensure that any third-party service providers we use comply with the same level of data protection.
    • We require that all service providers undergo thorough data protection assessments before entering into partnerships.
    • Any third-party provider failing to meet our data protection standards will be promptly removed.
    • Data sharing with service providers is minimized to what is strictly necessary for their services.
    • Regular audits are conducted to ensure compliance with privacy obligations.
25. Dispute Resolution
    • Any disputes regarding our privacy policy will be handled in accordance with local laws and regulations.
    • We provide clear procedures for users to raise complaints or concerns about data privacy.
    • Disputes will be resolved through transparent dialogue and mediation where necessary.
    • In unresolved cases, users have the right to seek legal remedies in accordance with local regulations.
    • We aim to resolve disputes efficiently to maintain user trust and uphold privacy standards.

You may withdraw your consent for the collection, use, disclosure, and/or request for deletion of your personal data that we hold, or that is under our control, by sending an email to our Personal Data Protection Officer at dpo.id@uicreativa.com. We will process your request in accordance with this Privacy Policy and our obligations under the Privacy Laws and other applicable regulations. However, withdrawing your consent may mean that we are no longer able to continue providing our Services to you, and we may need to terminate our relationship with you and/or any contracts you have with us.

When sharing YouTube content, in addition to withdrawing your consent by emailing us as described above, you can also revoke uicreativa's access to your personal data through Google’s security settings page at https://security.google.com/settings/security/permissions.

Requesting Access to, or Correction of Personal Data

If you have an account with us, you may access and/or correct your personal data currently in our possession or control through the Account Settings page on the Platform. If you do not have an account with us, you may request to access and/or correct your personal data that is currently in our possession or control by submitting a written request to us. We will need sufficient information from you to verify your identity and the nature of your request in order to handle your request. Please submit your request in writing by emailing our Personal Data Protection Officer at dpo.id@uicreativa.com.

We reserve the right to charge a reasonable fee for handling and processing your request to access your personal data, subject to applicable regulations, and we will notify you of the estimated cost in advance.

We will correct/update your personal data upon your request in accordance with the Privacy Laws, unless otherwise provided by applicable regulations.