Privacy Policy

1. Scope

This Policy applies to personal data processed through the Website and related business communications. It does not replace a separate privacy notice provided for employees, job applicants, contractors, CCTV, gym members, or another service where a more specific notice applies.

2. Personal Data We Collect

Depending on how you interact with us, we may collect:

• identity and contact data, such as name, job title, company, email address, telephone or WhatsApp number, and business address;
• inquiry and project data, such as equipment interests, quantities, gym type, location, floor plan, budget range, target opening date, and messages or attachments you send;
• transaction and service data, such as quotations, orders, invoices, payment confirmation, tax information, delivery details, warranty records, maintenance history, and customer-support communications;
• technical and usage data, such as IP address, device and browser information, approximate location derived from IP, referring page, visited pages, clicks, form events, timestamps, and cookie or similar identifiers; and
• marketing-preference data, including your consent, opt-in source, campaign interaction, and unsubscribe choices.

3. How We Collect Personal Data

Please do not send health, biometric, government-identity, financial-account, or other sensitive data unless we specifically request it for a lawful and necessary purpose through an appropriate channel.

We collect data directly from you when you complete a form, contact us, request a quotation, communicate by phone, email, WhatsApp, or social media, place an order, receive installation or service, or attend an event. We may also receive data from your employer or representative, referrals, distributors, logistics or service partners, publicly available business sources, and analytics or advertising providers, where permitted by law.

4. Purposes of Processing

We may process personal data to:

• respond to inquiries and provide catalogs, consultations, layouts, quotations, demonstrations, or project proposals;
• verify customer and project information, process orders and payments, deliver and install equipment, and provide training, warranty, maintenance, and after-sales support;
• manage customer relationships, sales leads, service records, internal reporting, accounting, taxation, audit, fraud prevention, and legal compliance;
• operate, secure, troubleshoot, analyze, and improve the Website, forms, campaigns, content, products, and customer experience;
• measure advertising and Website performance and, where required, use non-essential cookies or similar technologies with your consent;
• send product news, project updates, invitations, or offers where you have consented or where otherwise permitted, with an option to opt out; and
• establish, exercise, or defend legal claims and protect the rights, property, safety, and security of users, customers, personnel, and the Company.

5. Lawful Basis

We process personal data only when we have an appropriate legal basis under applicable law. Depending on the context, this may include your consent; steps requested before entering into a contract; performance of a contract; compliance with a legal obligation; protection of vital interests; performance of a task in the public interest where applicable; or another basis recognized by Indonesian law. Where processing relies on consent, you may withdraw it, although withdrawal does not affect earlier lawful processing.

6. Cookies Analytics and Advertising

The Website may use necessary cookies for security and core functionality, and may use analytics, preference, and advertising technologies such as Google Analytics, Google Tag Manager, Meta Pixel, or comparable services. These technologies may collect device, usage, event, and campaign data and may connect activity across websites or services according to the provider's own practices.

Where consent is required, non-essential technologies remain disabled until you make a choice through the cookie banner. You may change your choice through the Website's cookie settings and may also use browser controls. Disabling some technologies may reduce certain functionality.

7. Sharing of Personal Data

We may share personal data on a need-to-know basis with:

• our authorized personnel and affiliated operations involved in sales, finance, delivery, installation, service, marketing, legal, and management;
• manufacturers, distributors, logistics providers, customs or import agents, installers, technicians, warehouses, payment and banking providers, professional advisers, auditors, insurers, and IT or hosting vendors;
• analytics, advertising, communication, customer-relationship, email, messaging, cloud, and cybersecurity providers;
• government authorities, regulators, courts, or law-enforcement bodies when required or lawfully requested; and
• a buyer, investor, lender, or adviser in connection with a genuine corporate transaction, subject to appropriate confidentiality and legal safeguards.

8. International Data Transfers

We do not sell personal data as a standalone product. We require service providers to process data only for authorized purposes and to apply appropriate safeguards, subject to their role and applicable law.

Some manufacturers, cloud, analytics, advertising, messaging, or technology providers may process data outside Indonesia. When personal data is transferred internationally, we apply the safeguards and transfer requirements required by Indonesian law, taking into account the destination, recipient, contractual protections, and other appropriate measures.

9. Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including the duration of a customer relationship, project, warranty or service obligation, and any accounting, tax, audit, limitation, dispute, or regulatory period. We then delete, anonymize, or securely isolate the data, unless continued retention is required or permitted by law. Retention periods vary by record type and legal need.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal data from unauthorized access, collection, use, disclosure, alteration, loss, or destruction. These may include role-based access, authentication, backups, vendor controls, secure transmission, monitoring, and staff procedures. No internet or storage system can be guaranteed completely secure, so users should also protect their devices and avoid sending confidential information through unsuitable channels.

11. Your Rights

Subject to applicable law, verification, and lawful exceptions, you may have the right to:

• obtain information about the identity and accountability of the party requesting or processing your data and the purpose of processing;
• access and obtain a copy of your personal data;
• correct or complete inaccurate personal data;
• end processing, delete, or destroy personal data in applicable circumstances;
• withdraw consent and object to or restrict certain processing where applicable;
• request data portability or transfer in a commonly used format where legally available;
• object to decisions based solely on automated processing that produce legal or similarly significant effects; and
• seek compensation or use available complaint and dispute-resolution mechanisms where your rights are violated.

12. Marketing Communications

To exercise a right, contact us using the details in the final section. We may request reasonable information to verify identity, authority, and the scope of the request, and we will respond within the period required by applicable law.

You may opt out of marketing emails or messages at any time by using the unsubscribe method provided or contacting us. We may still send non-marketing communications that are necessary for an inquiry, order, delivery, installation, warranty, service case, security notice, or legal obligation.

13. Children

The Website is intended for business and adult users and is not directed to children. We do not knowingly seek to collect children's personal data through general inquiry forms. If children's data must be processed for a specific lawful purpose, we will apply the consent and protection requirements required by applicable law. Please contact us if you believe a child has provided data without proper authorization.

14. Changes to This Policy

We may update this Policy when our processing activities, technology, vendors, services, or legal obligations change. The current version will be posted on the Website with its effective date. Where a change materially affects your rights or our use of data, we will provide additional notice or seek consent where required.

15. Privacy Contact and Complaints

Privacy questions, requests, and complaints may be submitted through the contact form at realleader.id, sent to info@realleader.id, or addressed to Jl. Letjen Suprapto No.62, Cempaka Putih, Central Jakarta 10520. You can also reach us on +62 21 4280 5577 or by WhatsApp on +62 822 3305 5257.

If you are not satisfied with our response, you may use the complaint or dispute mechanisms available under applicable Indonesian law.