Privacy Policy

Last updated: September 20, 2026 This Privacy Policy explains how Hopbit Indonesia ("we") collects, uses, and protects your personal data when you use hopbitindonesia.com, create an account, and shop with us. 1. DATA WE COLLECT - Account data: name, email address, and password (stored encrypted). If you sign in with Google, we receive the name, email address, and profile picture of your Google account. - Order and shipping data: recipient name, phone number, delivery address, and the contents and history of your orders. - Payment data: payments are processed by our payment provider (Doku). We do not store your card numbers, account credentials, or PINs. We only receive the payment status and a reference number. - Communication data: your email address for the newsletter, and the name, email, WhatsApp number, design brief, and logo file name you submit through the custom order form. - Technical data: IP address, device and browser type, and browser local storage for your cart and language preference. If enabled, we use Google Analytics for visit statistics. 2. HOW WE USE DATA - To create and manage your account and verify your identity when you sign in. - To process orders, payments, shipping, cancellations, and refunds. - To send order-related emails (confirmation, shipping, cancellation). - To send newsletters about new products and campaigns, only to those who subscribe. You can unsubscribe at any time through the link in every email. - To keep the site secure, prevent abuse and spam, and meet legal obligations. 3. GOOGLE USER DATA If you choose to sign in with Google, we only access your name, email address, and profile picture. This data is used solely to create your account and authenticate you. We do not sell it, share it for advertising, or use it for any other purpose outside this service. Our use of information received from Google complies with the Google API Services User Data Policy, including the Limited Use requirements. 4. THIRD PARTIES THAT PROCESS DATA We use the following service providers only as needed to run the store: Supabase (database and authentication), Vercel (site hosting), Doku (payments), Biteship and courier companies (shipping), Resend (email delivery), Cloudflare Turnstile (bot prevention), and Google (sign-in and analytics). We do not sell your personal data to anyone. 5. RETENTION AND SECURITY Data is kept while your account is active and as long as needed for transaction records and legal obligations. We apply technical safeguards such as encrypted connections, role-based access restrictions, and encrypted password storage. No system is completely risk-free, but we work to protect your data as well as we can. 6. YOUR RIGHTS Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022), you have the right to access, correct, and request deletion or anonymization of your personal data, withdraw consent, and unsubscribe from the newsletter. To exercise these rights, contact us at hello@hopbitindonesia.com. Certain transaction records may be kept where required by law. 7. CHILDREN Our services are not directed to children under 13, and we do not knowingly collect their data. If you learn that this has happened, contact us so the data can be deleted. 8. CHANGES TO THIS POLICY We may update this policy from time to time. The latest update date is shown at the top of this page. 9. CONTACT Questions about this policy can be sent to hello@hopbitindonesia.com.