PROTECTION OF YOUR PERSONAL DATA

PT.DAPUR COKELAT, the property it manages and its affiliates (referred to as "DAPUR COKELAT", "us", or "our"), values you as our customer and is committed to safeguarding the privacy of our customers and users and the personal information you have entrusted to us ("Personal data"). It is important for you to understand what Personal Data we will collect - how we will use it - and who can access it.

• This privacy policy describes PT.DAPUR COKELAT's privacy practices for the Personal Data we collect ("Policy")
• PT.DAPUR COKELAT makes every effort to ensure that all of our business practices involving the use of your information comply with the privacy regulations in the countries in which we operate.
• When you use certain online services on our Application, including but not limited to Online Reservations, Online Orders, through computers and social media pages that we control, offline applications or channels (collectively the "Services"), PT.DAPUR COKELAT may ask questions. You are required to provide certain information relating to you by filling out and submitting online forms.
• Therefore, PT.DAPUR COKELAT does not only wish to inform you of your privacy rights in connection with your use of our Application, but also explain how we intend to respect it.

By accessing or using our Application and any pages thereof, you agree to the following terms of the Policy which acceptance is a term of the terms and conditions by and from the PT.DAPUR COKELAT.

HOW DO WE COLLECT PERSONAL DATA?

Our Offline Services

We may collect Personal Data from you offline, such as when you visit one of the outlets we manage, place an order or reservation by telephone, contact customer service, or engage with us during face-to-face events.

Our Online Services

When making an order or reservation or using the DAPUR COKELAT APPLICATION service, information is required to identify you, contact you, and process your purchases and requests. This information typically includes your name, address, telephone number, email address, credit card number, and expiration date.

You may want your purchase transaction with the PT.DAPUR COKELAT to be recognized in the loyalty program of a third party that has a relationship with the PT.DAPUR COKELAT. To do this, you must provide us with certain verification information such as a membership number in third-party programs.

We also offer special discounts from time to time which may have qualification criteria. From time to time, we offer other packages or services that involve third parties. If you take part in such a package or service, your Personal Data will be shared with the third party to the extent necessary to provide that service and process the purchase or request.

PT.DAPUR COKELAT may use the information you provide to send offers and information about the DAPUR COKELAT APPLICATION Membership service and the PT.DAPUR COKELAT and certain third parties. Your information will not be provided to these third parties but third-party offers will be given to PT.DAPUR COKELAT who will manage the distribution.

Registration in the DAPUR COKELAT Loyalty Program

As a customer of the PT. DAPUR COKELAT, you have the opportunity to take part in its loyalty program, namely the DAPUR COKELAT Loyalty Program. Loyalty programs are designed to provide a higher level of personalization and service, additional personal information will be required. Membership is voluntary.

By choosing to register, you have agreed to the provision and use of your Personal Data as more specifically described in the Terms and Conditions.

Participate in Marketing Initiatives

To register for this service, we ask you to provide us with your email address, first name, last name & telephone number. You can unsubscribe at any time using the link provided in each email message and you will no longer receive email offers and promotions for the specified subscription, as the case may be. You can choose to receive email offers at any time.

HOW CAN YOUR PERSONAL DATA BE USED?

We use Personal Data to provide you with various services, to develop new offerings, and to protect PT. DAPUR COKELAT and our customers as described below. In some cases, we will ask you to provide data to us directly. If you do not provide the data we request or prevent us from collecting such data, we may not be able to provide the requested service.

We use Personal Data for our legitimate business interests, including the following:

• To provide the requested Service to you
• To provide you with useful content
• To ensure the proper functioning of our Service
• To offer and improve our Services
• To provide you with requested information or technical support
• To facilitate your movement through our Application or your use of our Services
• To improve the advertising and marketing of our Services
• To diagnose problems with our servers or our Services
• To administer our Application and communicate with you
• In connection with our security and maintenance program
• To target potential customers with our products or services (such targeting is only done with your consent if your consent is required by applicable law)
• To assist us in offering you a personalized experience or in customizing our Services for you
• As stated otherwise in this Policy

We also use the information we receive in an aggregated and anonymous format to generate reports on trends and statistics, such as mobile search trends, email open rates by industry, campaign best practices, or the number of users who have been known, or clicked on, on our App or evaluate or purchase our products and services.

The payment information that you provide to us, including credit card data, will only be used to facilitate payment for our products and services.

WHO AND WHERE IS YOUR PERSONAL DATA DISCLOSED?

Your Personal Data may, for the purposes described above, be transferred or disclosed to any company within the PT. DAPUR COKELAT and it is affiliated/related companies wherever located in Indonesia.

The Personal Data that you provide in connection with Online Registration with PT. Dapur Cokelat is protected in several ways. Access by you to Personal Data stored in DAPUR COKELAT Apps is available through your User Identity and Password. We strongly recommend that you don't divulge your password to anyone.

Within the PT. DAPUR COKELAT, only selected staff and contractors affiliated with the PT. DAPUR COKELAT have access to the server.

If PT. DAPUR COKELAT no longer needs your Personal Data for each Service, then PT. DAPUR COKELAT has the right and can permanently delete your Personal Data without prior notice.

STORAGE OF YOUR PERSONAL DATA

We store the personal data we collect from you where we have a legitimate business need in progress (for example, to provide you with the services you have requested or to comply with applicable legal, tax, or accounting requirements) or for as long as is necessary for the purposes described in this privacy policy.

PT. DAPUR COKELAT will make the best efforts to protect your personal data from loss or unlawful use by providing technical measures and appropriate organizational policies.

RETENTION OF YOUR PERSONAL DATA

You have the right to access, update, and change, correct or delete your Personal Data and preferences at any time. You can change certain Personal Data yourself. This can be done by logging into your profile with your User Identity and Password, changing the appropriate information, and submitting the modified form (following the instructions on the Application). Your access to this Personal Data must be granted at any time unless there is a disruption on our servers.

If you wish to review, correct, update, suppress, restrict, or delete the Personal Data that you have previously provided to us, or if you wish to receive an electronic copy of your Personal Data, you can contact us at info@dapurcokelat.com

In your request, please explain what Personal Data you wish to change, whether you want your Personal Data to be hidden from our database or other restrictions that you wish to use in the use of your Personal Data. For your protection, we only fulfill requests for Personal Data associated with the specific email address you used to submit your request, and we may need to verify your identity before fulfilling your request.

We will try to fulfill your request as quickly as possible. Please note that we may need to retain certain information for record-keeping purposes and/or to complete any transactions that you initiated before requesting change or deletion (for example, when you make a purchase or reservation or enter a promotion, you may not be able to change or delete your Personal Data awarded until after completion of the purchase, reservation, or promotion).

There may also be residual information that will remain in our database and other records, which will not be deleted. In addition, there may be certain information that we may not allow you to review, for legal, security, or other reasons.

APPROVAL

By providing your Personal Data, you freely agree, subject to the conflicting notification as given below, to PT. DAPUR COKELAT using and processing your Personal Data for the Services set out on this page and, if necessary, transferring your Personal Data to serve you to companies in the PT. DAPUR COKELAT wherever they are and from time to time.

If you do not want Personal Data to be Processed for any or all of the Services mentioned above, you must indicate your preferences in the email text. If you wish to delete your Personal Data from the PT. DAPUR COKELAT promotional email and/or our other emails providing you with information about new products and services or offers that we believe may be of interest to you, please unsubscribe by clicking the "Unsubscribe" button in any email that you receive.

PRIVACY POLICY UPDATES

We may update or change this Privacy Policy from time to time, to comply with the law or to comply with our business requirements that may change. When we update our Privacy Notice, we will take appropriate steps to notify you, consistently, of the significance of the changes we make. Any updates or amendments will be posted on our website or application. By continuing to access the website/application, your access and your use of us will be subject to these updates and changes.

GENERAL INFORMATION

For the purposes of this notification, PT. DAPUR COKELAT includes all direct and indirect subsidiaries and related companies, from time to time and anywhere in Indonesia, further information about the PT. DAPUR COKELAT can be obtained from: