• A Digital Commerce specialist unit within the Redbuzz ecosystem.

Privacy Policy — Gerai.id

Last updated: 27 July 2026 Effective date: 27 July 2026

1. Introduction

Gerai.id (“we”, “us”, “our”, or “the Company”) operates the website located at https://gerai.id (the “Website”). Gerai.id is a digital commerce agency and a specialist unit within the Redbuzz ecosystem. We help brands build, connect, activate, and optimize digital commerce channels. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our Website, contact us, or engage our services. By accessing the Website or providing information to us, you agree to the terms of this Privacy Policy.

2. Scope of This Policy

This Policy applies to:
  • Visitors of https://gerai.id
  • Individuals who submit enquiries through our “Request For Proposal” or “Free Consultation” forms
  • Individuals who contact us via email, WhatsApp, phone, or social media
  • Representatives of brands or organizations that we serve, or that we have business discussions with
  • Job applicants (where applicable)
This Policy does not govern data collected by third-party platforms we link to (such as LinkedIn or Instagram). Please review those platforms’ policies separately.

3. Information We Collect

3.1 Information you provide directly

  • Contact form submissions: name, email, phone number, company name, project details, and any other information you choose to include when filling in our “Request For Proposal” or “Free Consultation” forms.
  • Direct communications: when you email us at sales@gerai.id, message us via WhatsApp at +62 817-690-6789, or contact us via LinkedIn or Instagram, we collect the contents of those communications and any identifying information associated with them.
  • Engagement information: if you become a client, we collect additional information reasonably necessary to deliver our services, including business contacts, billing information, and project-related materials.

3.2 Information collected automatically

When you visit our Website, certain information is collected automatically through cookies and similar technologies, including:
  • IP address
  • Browser type and version
  • Device type and operating system
  • Referring URL
  • Pages visited and time spent on pages
  • Approximate geographic location (city/country level)
  • Event data (clicks, scrolls, form interactions)
The legal basis for this collection is our legitimate interest in understanding how our Website is used and improving it.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our Website. Cookies are small text files placed on your device when you visit a website.

4.1 Categories of cookies we use

Category Purpose Examples
Strictly necessary Enable basic site functionality (e.g. page navigation, form submission). Session cookies
Analytics Help us understand how visitors use our Website so we can improve it. Google Analytics 4 (GA4)
Advertising Measure the effectiveness of our marketing campaigns and enable remarketing. Meta Pixel (Facebook/Instagram), Google Ads conversion tracking

4.2 Third-party cookies

The following third parties set cookies or read identifiers through our Website:

4.3 Managing cookies

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling cookies may affect Website functionality.

5. How We Use Your Information

We use the information we collect for the following purposes:
  1. To respond to enquiries submitted through our forms or direct communication channels (WhatsApp, email, phone).
  2. To provide and improve our services when we enter into an engagement with you or your organization.
  3. To operate, maintain, and improve our Website, including analysing visitor behaviour and trends.
  4. To measure the effectiveness of our marketing campaigns (online and offline) and allocate marketing budget appropriately.
  5. To send you updates, marketing communications, or service information that you have opted in to receive. You may opt out at any time.
  6. To comply with legal obligations and respond to lawful requests from public authorities.
  7. To protect our rights, privacy, safety, or property, and that of our users or third parties.
We do not sell your personal information to third parties.

6. Legal Basis for Processing (UU PDP)

Under Indonesian Law No. 27 of 2022 concerning Personal Data Protection (“UU PDP”), we process your personal data based on one or more of the following legal bases:
  • Your explicit consent — for example, when you submit a form or opt in to marketing communications.
  • Performance of a contract — when processing is necessary to perform a service you or your organization has engaged us to deliver.
  • Compliance with legal obligations — when we are required to retain or disclose data by law.
  • Legitimate interests — for analytics, Website improvement, and certain marketing activities, where our interests are not overridden by your fundamental rights.

7. How We Share Your Information

We do not sell, trade, or otherwise transfer your personal information to third parties except as described below.

7.1 Service providers (sub-processors)

We share information with trusted third-party service providers who assist us in operating our Website, conducting our business, or serving you, provided those parties agree to keep your information confidential. These may include:
  • WhatsApp (Meta Platforms, Inc.) — for storing and managing inbound enquiries and ongoing conversations.
  • Hosting provider — for hosting our Website and storing form submissions.
  • Google LLC — for analytics (GA4) and advertising measurement (Google Ads).
  • Meta Platforms, Inc. — for advertising measurement and remarketing.
  • Professional advisors — including legal, accounting, and audit firms when reasonably necessary.

7.2 Business transfers

If Gerai.id or substantially all of its assets are acquired by a third party, your personal information may be transferred as part of that transaction. You will be notified in advance.

7.3 Legal disclosure

We may disclose your information where required by law, court order, or valid request from a public authority, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

8. International Data Transfers

Some of our service providers are located outside Indonesia. In particular:
  • WhatsApp and Meta services involve data transfer to and storage in Meta’s infrastructure, which may be located in the United States, Singapore, or other jurisdictions.
  • Google services involve data transfer to Google infrastructure globally.
Where we transfer your personal data outside Indonesia, we take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable law, including UU PDP requirements on cross-border data transfers.

9. Data Retention

We retain personal information for as long as reasonably necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Specific retention periods:
  • Enquiry and lead data: retained for up to 24 months from the last interaction, unless a business relationship is established.
  • Client engagement data: retained for the duration of the engagement and for a minimum of 5 years thereafter, in line with Indonesian commercial record-keeping requirements.
  • Analytics data: retained according to the retention settings of the analytics platform (e.g. GA4 default is 14 months; Google Ads data follows Google’s retention policies).
  • Backups: may persist for up to 90 days after deletion from primary systems.

10. Your Rights as a Data Subject

Under UU PDP (and, where applicable, other regulations), you have the right to:
  1. Access the personal data we hold about you.
  2. Correct inaccurate or incomplete personal data.
  3. Request deletion of your personal data, subject to legal retention obligations.
  4. Restrict or object to certain processing activities.
  5. Withdraw consent at any time, where processing is based on consent.
  6. Request portability of your personal data in a structured, commonly used electronic format.
  7. Lodge a complaint with the relevant supervisory authority.
To exercise any of these rights, please contact us using the details in Section 12 below. We may need to verify your identity before responding.

11. Security

We take reasonable measures to protect your personal information from unauthorized access, use, alteration, or destruction. These measures include:
  • HTTPS encryption on our Website
  • Restricted access to personal data within our team on a need-to-know basis
  • Use of reputable third-party service providers with their own security commitments
However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

12. Contact Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise your data subject rights, please contact us: Gerai.id Email: sales@gerai.id Phone / WhatsApp: +62 817-690-6789 Website: https://gerai.id

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the “Last updated” and “Effective date” at the top of this page. Your continued use of the Website after a change constitutes your acceptance of the updated Policy.
Last reviewed: 27 July 2026. This document should be reviewed periodically and updated whenever our data practices change.