Find Your Session

Privacy Policy

Last Updated: November 24, 2025

1. Introduction

PT THE ORANGE SKY ("Company", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Company Information

  • Legal Entity: PT THE ORANGE SKY (PMA)
  • Registered Address: Jl. By Pass Ngurah Rai No. 888XX, Pemogan, Denpasar Selatan, Kota Denpasar, Bali 80221, Indonesia
  • NIB: 2211220003221
  • NPWP: 61.829.563.8-903.000
  • Data Protection Contact: theorangeskybali@gmail.com
  • Phone: +62 859-3354-4860

3. Information We Collect

3.1. Personal Information

We collect name, email address, phone number, and order information (order number, date and location of shooting, selected package/service type, order status).

3.2. Payment Information

We do not store full credit/debit card numbers. Through Xendit, we may receive transaction ID, amount, payment status, payment method type, masked card number (last 4 digits), and cardholder name if provided.

3.3. Technical Information

We collect IP address, device information, browser information, cookies and similar tracking technologies, and usage data.

3.4. Location and Language Data

We may collect country/language preferences and location data related to shooting services as part of order information.

4. How We Use Your Information

We use collected information for: service delivery (processing orders, providing access to files), payment processing through Xendit, communication (order confirmations, delivery notifications, support), account management, customer support, legal compliance, service improvement, and marketing communications only with your explicit consent.

5. Information Sharing and Disclosure

5.1. Service Providers

We share information with third-party service providers: Xendit (payment processing), hosting and cloud storage providers, file storage services, analytics tools (e.g., Google Analytics), marketing platforms (only anonymized data, with consent), and communication service providers.

5.2. Legal Requirements

We may disclose information if required by law or in response to valid legal requests.

5.3. Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5.4. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

6. Data Storage and Security

6.1. Storage Locations

Website and order data are stored on secure servers of our hosting provider. Media files are stored in cloud storage services. Payment data is processed and stored by Xendit on their secure servers. Data centers may be located in Indonesia, Singapore, EU, or other regions depending on the provider.

6.2. Security Measures

We implement appropriate technical and organizational measures to protect your information, including SSL/TLS encryption, secure servers, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

6.3. Data Retention

  • Order and transaction data: retained for 7 years (as required by Indonesian tax and business law)
  • Media files: retained for the period specified in your order
  • Marketing consent: retained until you withdraw consent
  • Support communications: retained for 2 years after last contact

7. Your Rights

7.1. Access and Rectification

You have the right to request access to your personal data and correction of inaccurate or incomplete data.

7.2. Erasure

You have the right to request deletion of your personal data, subject to legal retention requirements.

7.3. Data Portability

You have the right to receive your personal data in a structured, commonly used format.

7.4. Objection and Withdrawal of Consent

You have the right to object to processing for marketing purposes and withdraw consent for marketing communications at any time by clicking "unsubscribe" in emails or contacting us.

8. Cookies and Tracking Technologies

8.1. Types of Cookies

Essential Cookies

Required for website functionality (login sessions, shopping cart, language preferences). Cannot be disabled as website may not function properly without them.

Analytics Cookies

Used to analyze website traffic and usage (e.g., Google Analytics). Can be disabled through browser settings.

Marketing Cookies

Used for advertising and retargeting (e.g., Meta Pixel, Google Ads). Only used with your explicit consent. Can be disabled.

8.2. Third-Party Cookies

We use third-party services that may set cookies: Google Analytics (analytics), Xendit (payment processing), Meta/Facebook Pixel (advertising, with consent), Google Ads (advertising, with consent).

8.3. Managing Cookies

You can control cookies through browser settings (most browsers allow blocking or deleting cookies), opt-out tools (Google Analytics opt-out, advertising platform opt-outs), or our consent banner when you first visit. Note: Disabling essential cookies may affect website functionality.

9. Marketing Communications

We send transactional emails (order confirmations, delivery notifications, support messages) which you cannot opt-out of. Marketing emails are sent only with your explicit consent. You can unsubscribe from marketing emails at any time using the link in emails or by contacting us.

10. Children's Privacy

Our services are intended for users 18 years and older. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including Indonesia, Singapore, EU, and other regions where our service providers operate. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be notified via email when possible. Your continued use of our services after changes constitutes acceptance of the updated Privacy Policy.

13. Indonesian Data Protection Law

We comply with applicable Indonesian data protection laws, including the Personal Data Protection Law (Undang-Undang Perlindungan Data Pribadi).

14. Contact Us

For questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact us:

Response Time: We will respond to your requests within 30 days (or as required by applicable law).