1. Introduction
PT ALEXA INTL ("the Company", "we", "our", "us") respects the privacy of every visitor, client and counterparty and is committed to protecting Personal Data we process. This Privacy Policy is issued in compliance with Law No. 27 of 2022 on Personal Data Protection ("UU PDP"), Law No. 11 of 2008 on Electronic Information and Transactions as amended by Law No. 19 of 2016 ("UU ITE"), and Government Regulation No. 71 of 2019 on the Implementation of Electronic Systems and Transactions ("PP PSTE"). It explains what we collect, why, how we use it, with whom we share it, how long we keep it and how you may exercise your data-subject rights.
2. Data controller
The data controller is PT ALEXA INTL, a limited liability company (Perseroan Terbatas) incorporated under Indonesian law, having its registered office at Jl. Jabon Raya No.1, RT.5/RW.2, Bedahan, Kec. Sawangan, Kota Depok, Jawa Barat 16519, Indonesia.
3. Personal Data we collect
We collect Personal Data that you voluntarily provide via our website forms, quotation requests, partnership enquiries, careers applications and email correspondence - including full name, work email, telephone number, country, company name, role, shipment or product details, and any free-text message content. We also process technical data automatically, including IP address, browser user-agent, device type, referring URL, pages visited, session timestamps and language preference, collected via essential cookies and standard web server logs.
4. Legal basis for processing
In accordance with Article 20 of UU PDP, we process Personal Data on one or more of the following bases: (a) your explicit consent for a specific purpose; (b) performance of a contract to which you are a party, or pre-contractual steps taken at your request; (c) compliance with a legal obligation to which the Company is subject (including tax, customs, AML/CFT and trade-compliance laws); (d) protection of vital interests of the data subject or another person; (e) performance of duties in the public interest; and (f) the legitimate interests of the Company, balanced against your fundamental rights.
5. Purposes of use
We use Personal Data to: respond to enquiries and quotation requests; deliver trading, logistics, customs, warehousing and digital services you have engaged us to provide; issue invoices and process payments; verify counterparties under Know-Your-Customer (KYC) and sanctions-screening procedures; comply with statutory reporting obligations; secure our systems against fraud, abuse and unauthorised access; and - only with your separate opt-in - send periodic market and trade-flow updates.
6. Disclosure to third parties
We do not sell or rent Personal Data. We may disclose Personal Data, on a strict need-to-know basis, to: (i) carriers, freight forwarders, customs brokers, port operators and warehouse partners required to fulfil your shipment or transaction; (ii) financial institutions and payment service providers for invoicing and settlement; (iii) professional advisors (legal, audit, tax) under written confidentiality undertakings; (iv) Indonesian and foreign government authorities where disclosure is required by applicable law, court order, or regulatory request; and (v) our subsidiary FreightConnects for integrated logistics service delivery.
7. Cross-border transfers
International trade by its nature involves transfers of Personal Data outside Indonesia - for example to consignees, suppliers or carriers in India, Thailand, the United Arab Emirates, Canada and the European Union. In accordance with Articles 56 and 57 of UU PDP, the Company will transfer Personal Data abroad only where the destination country provides a level of protection equal to or higher than UU PDP, or where adequate safeguards (such as binding contractual clauses or your explicit consent) are in place.
8. Retention
Personal Data is retained only for as long as necessary to fulfil the purpose for which it was collected, plus any further period required by Indonesian tax law (currently ten years under UU Ketentuan Umum Perpajakan), customs and shipping law, accounting standards or other applicable retention obligations. After that period, Personal Data is either anonymised or securely deleted.
9. Security measures
We implement technical and organisational measures appropriate to the risk, including TLS encryption in transit, restricted role-based access, multi-factor authentication on administrative accounts, hardened web servers, monitored access logs, segregated production environments, and contractual confidentiality with every staff member and processor. No transmission over the internet is completely secure; we cannot guarantee absolute security but undertake to notify affected data subjects and the Personal Data Protection Authority within 3×24 hours of any confirmed material breach, as required by UU PDP.
10. Your rights as a data subject
Under Articles 5 through 15 of UU PDP, you have the right to: (a) obtain information about, and access to, your Personal Data; (b) request rectification of inaccurate data; (c) request erasure or destruction of data no longer necessary; (d) restrict or object to certain processing; (e) withdraw consent at any time, without affecting prior lawful processing; (f) receive a copy of your data in a portable format; and (g) file a complaint with the Personal Data Protection Authority (Lembaga Pelindungan Data Pribadi).
11. Exercising your rights
To exercise any right above, send a written request to info@ptalexa.com with proof of identity. We will respond within fourteen (14) working days of receipt of a verifiable request, in line with UU PDP.
12. Cookies and similar technologies
We use a minimal set of essential cookies - language preference, session continuity and cookie-consent state. We do not deploy advertising cookies, cross-site tracking pixels, or third-party behavioural profilers. You may refuse non-essential cookies via the consent banner at any time without losing access to the core website.
13. Children
Our services are directed at corporate counterparties. We do not knowingly collect Personal Data from any individual under 17 years of age. Parents or guardians who believe a child has provided data may contact us for prompt deletion.
14. Changes to this Policy
This Policy may be updated to reflect changes in our practices or applicable law. The "Last updated" date at the top will reflect the latest revision. Material changes will be highlighted on the website and, where required, notified individually.
Governing law & jurisdiction
This document is governed by and construed in accordance with the laws of the Republic of Indonesia. Any dispute arising out of or in connection with this document shall first be resolved through good-faith consultation. Failing amicable settlement within thirty (30) calendar days, the dispute shall be referred to the Indonesian National Board of Arbitration (Badan Arbitrase Nasional Indonesia / BANI) in Jakarta under its prevailing rules, or - at the Company's election - to the competent District Court (Pengadilan Negeri) in the jurisdiction of the Company's registered office.
Contact the Legal Office
For questions, requests or notices relating to this document, contact PT ALEXA INTL - Jl. Jabon Raya No.1, RT.5/RW.2, Bedahan, Kec. Sawangan, Kota Depok, Jawa Barat 16519, Indonesia. Email info@ptalexa.com · Phone +62 852-1205-0008 · Office line 021-8908-2007 (Mon – Fri, 09:00 – 17:00 WIB).