Privacy PolicyPT Klimov Advertising Agency (brand “Alex-Digital”)
Contact email: adv.agensy.bali@gmail.com
Effective date: October 6, 2025
1. Who We AreThis Privacy Policy explains how PT Klimov Advertising Agency (“Company,” “we,” “us,” or “our”) collects, uses, shares, and protects personal data when you use our websites, landing pages, advertising forms, chatbots, and other digital services (collectively, the “Services”).

• 2. Contact for Data InquiriesGeneral questions and data subject requests: adv.agensy.bali@gmail.com
• Legal entity: PT Klimov Advertising Agency
• Primary jurisdiction of operation: Republic of Indonesia (PDP Law No. 27/2022)

If you are located in the EEA/UK, we also process data in line with GDPR/UK GDPR principles.
3. Data We CollectWe collect data directly from you, automatically when you use our Services, and from third-party partners.
3.1. Data you provide:

• Name, surname, company name, job title.
• Contact details: email, phone, messenger/social accounts.
• Message content, briefs, inquiries, attachments.
• Payment details (if you purchase services).
• Marketing and communication preferences.

3.2. Data collected automatically:

• IP address, device/browser identifiers, language, time zone.
• Cookies and similar technologies (pixels, localStorage).
• Visit logs: pages viewed, traffic sources, clicks, conversion events.
• For bots/forms: session metadata.

3.3. Data from third parties (with your consent):

• Advertising and analytics platforms (Google, Meta, TikTok, etc.).
• CRMs/spreadsheets/forms integrated by your request.
• Public sources and verification providers (e.g., KYC/business profile checks).

We do not intentionally request special categories of data (health, religion, etc.). If you voluntarily provide such information, we will process it only as required and delete it when no longer necessary.
4. Purposes and Legal BasisWe process personal data for the following purposes:

1. Contract performance: starting work, communication, billing, support.
2. Marketing & analytics: personalization, measuring ad effectiveness, retargeting (based on consent or legitimate interest, depending on jurisdiction).
3. Service improvement: diagnostics, A/B testing, fraud prevention (legitimate interest).
4. Legal obligations: accounting, tax, regulatory compliance.
5. Protection of rights: cybersecurity, fraud prevention, legal claims.

Where required by law, we request explicit consent (e.g., for marketing emails, analytics cookies in the EEA).
5. Cookies & TrackingWe use:

• Essential cookies — required for the website to function.
• Analytics cookies (e.g., Google Analytics) — for statistical purposes.
• Marketing cookies (e.g., Meta/TikTok pixels) — for ad personalization.

EEA users will see a consent banner for non-essential cookies. You may withdraw consent anytime via browser settings or cookie banner.
6. Data SharingWe share data only when necessary:

• Hosting, cloud, security, and analytics providers.
• Advertising platforms (with consent/legitimate interest).
• Payment and accounting processors.
• Contractors bound by data processing agreements.

We do not sell your personal data. Third-party access is contractually regulated.
7. International TransfersYour data may be processed on servers outside your country. In such cases, we ensure appropriate safeguards (e.g., Standard Contractual Clauses, risk assessments, PDP Law/GDPR-compliant mechanisms).
8. Data RetentionWe store data for as long as necessary to:

• fulfill contractual obligations and support services;
• comply with legal requirements (typically 5–10 years for financial records);
• protect rights within the statute of limitations.

After these periods, we delete or anonymize the data.
9. Your RightsDepending on your jurisdiction (including PDP Law and GDPR), you may have the right to:

• access your data;
• request corrections;
• request deletion (“right to be forgotten”);
• restrict processing;
• request data portability;
• object to processing based on legitimate interest or marketing;
• withdraw consent at any time.

To exercise your rights, email adv.agensy.bali@gmail.com. We may request identity verification for your protection.
10. Children’s DataOur Services are not intended for individuals under 18. We do not knowingly collect children’s data. If you believe a child has shared data with us, contact us to request deletion.
11. SecurityWe apply organizational and technical safeguards, including: access controls, encryption in transit, audit logs, backups, and monitoring. While no method is 100% secure, we strive to maintain strong protections.
12. Automated Decision-MakingWe may use automated analytics for segmentation and retargeting. These processes do not create legal effects without human involvement. You may object to marketing profiling (see Section 9).
13. Third-Party LinksOur Services may contain links to third-party sites. We are not responsible for their privacy practices. Review their policies separately.
14. UpdatesWe may update this Policy occasionally. The latest version will always be available on our Services. Significant changes will be communicated (e.g., via website notice or email).
15. ContactFor privacy-related questions or rights requests:
adv.agensy.bali@gmail.com
Appendix A: Example of Data Processors(Adapt as needed with your actual vendors)

• Hosting/Infrastructure: [Provider] — website/DB hosting.
• Analytics: Google Analytics.
• Advertising: Google Ads / Meta Ads / TikTok Ads.
• Payments/Accounting: [Bank or payment provider].
• Communication: Gmail/Telegram/WhatsApp/CRM.
• File storage: Google Drive/Notion/Canva.