Privacy Policy

1

Who This Covers

This policy applies to PT Theta Jaya Sejahtera, a company established in Indonesia and trading as Logiframe Indonesia, and to the pages at logiframe.com/id.

PT Theta Jaya Sejahtera decides how and why the personal data described here is processed. Under the UU PDP, we are the personal data controller (Pengendali Data Pribadi) for that data.

Logiframe also has pages for the United States at logiframe.com/us. Those pages are covered by their own privacy policy.

2

Two Kinds of Personal Data

We handle personal data in two different roles, and the rules differ between them.

Data about you as a visitor or prospective client. What you send us when you book a call or contact us, and what is collected automatically when you browse the site. We decide how this is used, and this policy governs it.
Data inside the accounting records we maintain for clients. When we keep the books, prepare tax or run payroll for a business, those records contain personal data about that business’s staff, customers and suppliers. We process it on the client’s instructions, under our engagement with them, and for no purpose of our own. For that data the client is the controller and we act as their personal data processor (Prosesor Data Pribadi). Section 8 sets out how we handle it.

3

What We Collect

Data you give us

When you book a call, complete a form, or write to us, we collect what you provide. Depending on how you contact us, that may include:

Your name and job title
Your contact details, such as an email address or phone number
Your company name
Your message, and what you are looking for from a service
Which accounting software you use, and which systems are connected to it

We also keep the correspondence that follows, including messages and notes from calls.

Data collected automatically

When you visit the site, we and the providers that run it may collect:

IP address and the approximate location derived from it
Browser and device type, operating system and screen size
Pages viewed, time on page and links clicked
The site or search that referred you
Identifiers stored in cookies and similar technologies

Data we receive as part of an engagement

Once a business engages us, we receive the records needed to do the work: bank statements, invoices, bills, contracts, and, for tax and payroll work, employee and tax data. This data is covered by section 8.

4

Purposes and Legal Bases

The UU PDP requires a legal basis for each use of personal data. These are the purposes we use it for and the basis we rely on.

Why we process personal data, and on what basis
Purpose	Legal basis
Answering your enquiry and preparing a proposal	Your consent, and steps taken at your request before entering into an agreement
Providing the services you engage us for, and invoicing for them	Performance of our agreement with you or your company
Keeping records we are required to keep, including for tax purposes	Compliance with our legal obligations
Understanding how the site is used, and improving it	Your consent, where cookies or similar technologies are involved
Sending you information you asked for	Your consent, which you can withdraw at any time
Protecting our systems, and establishing or defending legal claims	Our legitimate interests, balanced against your rights

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on you.

5

Cookies

The site uses cookies and similar technologies. Some are needed for the site to work, such as those set by Webflow, which hosts the site. Others help us understand how the site is used and which pages lead to enquiries, such as those set by HubSpot.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site from working. Where we use cookies that are not strictly necessary, we rely on your consent, and you can withdraw it at any time.

6

Who We Share It With

We do not sell personal data.

We use the following providers, who process personal data on our behalf under contract and only for the services they provide to us:

Processors we use
Provider	What they hold
Xero	Accounting records we maintain for clients, held in each client’s own Xero subscription
HubSpot	Our contact database, call bookings, correspondence and site analytics
Webflow	The website itself, and the technical data generated when you visit it

We also disclose personal data where the law requires it, for example to tax authorities or other government bodies acting within their powers, and to our professional advisers where necessary.

7

Transfers Outside Indonesia

Some of the providers listed above store and process data on servers outside Indonesia. Logiframe’s contact database is also shared with Logiframe’s United States operation, so an enquiry made through these pages may be visible to staff there.

Where personal data is transferred outside Indonesia, we do so in line with the requirements of the UU PDP for cross-border transfers. That means checking the level of protection in the receiving country, putting adequate and binding safeguards in place with the recipient where that level is not equivalent, and otherwise relying on your consent.

8

Client Accounting Records

Where we maintain accounting records, prepare tax filings or run payroll for a client, we act on that client’s instructions and for their purposes only.

No use of our own. We do not use personal data inside client records for our own marketing, we do not sell it, and we do not combine it with data from other clients.
No control of client funds. We never hold client funds or move money. We prepare payment and salary files, and releasing them is done by a person at the client’s business from the client’s own bank.
Named access. Access is granted to named individuals at the level the work requires, and removed when someone stops working on that engagement.
Requests about these records. If you want to exercise your rights over data held in a business’s accounting records, such as payroll data as an employee, contact that business. They decide how their records are used, and we will help them respond.

9

How Long We Keep It

We keep personal data only for as long as it is needed for the purpose it was collected for, or for longer where Indonesian law requires us to keep it, for example for financial and tax records.

Enquiries that do not become engagements. Kept for a limited period after our last contact with you, then deleted or anonymised.
Engagement records and correspondence. Kept for the period required by law for financial and tax records, and as long as needed to establish or defend legal claims.
Website analytics data. Kept according to each provider’s retention settings.

Once the relevant period has passed, we delete or anonymise the data.

10

Security

We hold written cybersecurity and data handling policies that classify client information by sensitivity and set how each kind is stored, transmitted and accessed. Access is limited to named individuals, and it is reviewed and removed as people move between engagements.

No system is completely secure. If a failure of personal data protection affects your data, we will notify you and the relevant authority as the UU PDP requires.

11

Your Rights

Under the UU PDP, you have the right to:

Be told who is processing your personal data, why, and on what legal basis
Access your personal data and obtain a copy of it
Correct or update data that is inaccurate or incomplete
End the processing of your data and have it deleted or destroyed, unless we are required to keep it
Withdraw consent you have given for processing
Object to decisions based solely on automated processing, including profiling, that have legal or significant effects on you
Delay or restrict processing of your data
Receive your data in a commonly used, machine-readable format, and have it transferred to another controller
Claim compensation for a breach of the law in the processing of your data

To use any of these rights, write to us at the address in section 13. We may ask you to confirm your identity before we act, so that we do not disclose your data to someone else. Some rights have exceptions set by law, and if one applies we will tell you which.

This site is for businesses. We do not knowingly collect personal data from children. If you believe a child has given us personal data, write to us and we will delete it.

12

Changes

We will update this policy when our practices or the law change. The date at the top shows when it was last revised. Material changes will be signposted on this page.

13

Contact

Privacy questions and requests to exercise your rights can be sent in writing to:

PT Theta Jaya Sejahtera (Logiframe Indonesia)
Attn: Personal Data Protection
Ciputra International Tokopedia Care, Lt. 16 Unit 38
Jl. Lingkar Luar Barat No. 101
Jakarta Barat 11740
Indonesia

Our other contact options are on the contact page.

Services

Xero

NetSuite

HubSpot

Guides and comparisons

Bahasa Indonesia

Company