1. Who we are
This website, samkonsulting.com, is operated by Sam Consulting, a consultancy based at Jl. Cikini IV No.10, RT.15/RW.5, Cikini, Menteng, Central Jakarta 10330, Indonesia. For this policy, Sam Consulting is the data controller of the personal data described below.
This policy applies to our website, our WhatsApp and email channels, our client app and the services we provide.
2. The data we collect
Data you give us
- Identity and contact details: full name, email address, phone or WhatsApp number, nationality.
- Information needed for your service: passport and visa details, company and shareholder information, financial or tax information, family details for dependent permits, and the documents you send us.
- Payment details when you pay for a service (processed by our payment providers).
- Messages and questions you send through forms, WhatsApp or email.
Data collected automatically
- IP address, browser and device type.
- Pages visited and how you use the website, through cookies and similar technologies (see section 7).
3. How and why we use your data
We use personal data only for clear purposes and on a lawful basis under Law No. 27 of 2022:
| Purpose | Legal basis |
|---|
| Answering your enquiries and giving a quote | Your consent / steps before a contract |
| Delivering the services you order (company setup, visas, permits, tax, reports) | Performance of our contract with you |
| Submitting applications to government authorities | Contract and legal obligations |
| Invoicing, accounting and tax records | Legal obligations |
| Service updates and deadline reminders | Contract / legitimate interest |
| Improving our website and services | Legitimate interest |
| Newsletters or marketing messages | Your consent — you can withdraw it at any time |
4. Who we share data with
We do not sell or rent your personal data. We share it only when needed to deliver your service or meet the law:
- Indonesian government authorities and systems — for example immigration, the Ministry of Law (AHU), the investment authority (OSS/BKPM), the tax office and BPJS.
- Notaries, public accountants and other professionals involved in your application.
- Payment providers and banks that process your payments.
- IT providers that host our website, email and client app, under confidentiality obligations.
- Authorities when the law requires it.
5. International transfers
Some of our IT providers may store data outside Indonesia. When this happens, we take steps so that your data receives a level of protection consistent with Indonesian law.
6. How we protect your data
- Access limited to team members who need it for your file.
- Secure storage of documents in our systems and client app.
- Confidentiality obligations for our staff and providers.
If a personal data breach affects you, we will notify you and the relevant authority as required by Law No. 27 of 2022.
7. Cookies
We use cookies and similar technologies to keep the website working, remember preferences and understand how visitors use our pages (analytics). You can block or delete cookies in your browser settings; some parts of the website may then not work as intended.
8. How long we keep your data
- Enquiries that do not become a service: as long as needed to answer you and follow up.
- Client files: for the duration of our service and afterwards for as long as required by law — accounting and tax records are generally kept for 10 years.
- Marketing consent: until you withdraw it.
When data is no longer needed, we delete or anonymise it.
9. Your rights
Under Law No. 27 of 2022 you have the right to:
- Get information about how your data is used and access a copy of it.
- Correct inaccurate or incomplete data.
- Ask us to delete your data or stop processing it, unless the law requires us to keep it.
- Withdraw your consent at any time.
- Object to processing based only on automated decisions.
- Receive your data in a commonly used format where applicable.
To use these rights, contact us using the details below. We may ask you to confirm your identity first.
10. Children
Our services are intended for adults. We process children's data only when a parent or guardian provides it for a family application (for example a dependent permit), and only for that purpose.
11. Changes to this policy
We may update this policy from time to time. The date at the top of this page shows the latest version. Significant changes will be highlighted on this page.
