Privacy notice

FLOWISTIC GROUP is the business identity used on this website. We operate this site and are responsible for the personal data described in this notice. The legal entity responsible for a specific enquiry or engagement will be identified in our response, proposal or contract.

This notice covers the public website and initial business communications. Personal data handled during a signed client, creator or campaign engagement may be governed by a separate agreement, campaign notice or data-processing terms. Those specific terms take priority for that engagement.

The public pages do not currently offer account registration, a contact form or newsletter sign-up. We may still handle the following categories when you visit the site or contact us through an external business channel:

• Technical and security data, such as IP address, browser and device type, requested URL, referring page, access time and security events recorded by our hosting and protection systems.
• Business enquiry data, such as your name, company, role, business contact details, target market, project requirements and the content of your message.
• Correspondence and relationship records created when we assess an enquiry, prepare a proposal or maintain an existing business relationship.

We collect technical data automatically from the website infrastructure. We receive business information directly from you, your organisation or an authorised colleague when you contact us.

We use this data to operate and secure the site, diagnose faults, prevent abuse, respond to enquiries, assess potential projects, prepare proposals, manage business relationships, comply with law and establish or defend legal claims.

Depending on the context and applicable law, we process personal data because it is necessary to respond before entering a contract, perform a contract, comply with a legal obligation, protect legitimate business and security interests, or because you have given valid consent.

Where consent is required, we will request it before the relevant processing. You may withdraw consent at any time, without affecting processing that was lawful before withdrawal.

The public-facing pages do not currently use analytics or advertising cookies. The WordPress administration and security layer may use strictly necessary cookies for sign-in, session integrity and abuse prevention.

If we add non-essential analytics, advertising pixels or similar tracking, we will update this notice and implement any consent controls required by applicable law before activating them.

We do not sell or rent personal data. We disclose it only when reasonably necessary for the purposes described in this notice.

• Authorised FLOWISTIC personnel and group entities that need the information to handle your enquiry or engagement.
• Service providers supporting hosting, cybersecurity, backup, communications, professional advice and business operations, subject to appropriate confidentiality and data-protection obligations.
• Regulators, courts, law-enforcement bodies or other parties when disclosure is required by law, necessary to protect rights and safety, or connected with a legitimate corporate transaction.

Because FLOWISTIC coordinates work across China, Indonesia and Southeast Asia, personal data may be accessed or processed outside the country where it was collected. Our infrastructure and service providers may also operate in more than one country.

Where a cross-border transfer is regulated, we apply the safeguards required by applicable law and take reasonable steps to ensure that recipients protect the data consistently with this notice.

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including security, enquiry follow-up, contractual, accounting and legal requirements. Retention periods vary by data type and context. We delete, anonymise or securely restrict data when it is no longer required, unless law requires a longer period.

Subject to applicable law, including Indonesia Law No. 27 of 2022 on Personal Data Protection, you may have the following rights:

• Ask whether we process your personal data and request access to it.
• Correct or complete inaccurate or incomplete data.
• Request deletion, restriction or an end to processing where the legal conditions are met.
• Withdraw consent or object to certain processing where applicable.
• Request a usable copy or transfer of your data where portability rights apply.
• Raise a concern with us or lodge a complaint with the competent authority.

We use proportionate technical and organisational measures designed to protect personal data against unauthorised access, alteration, loss, misuse or disclosure. No internet service is completely secure, so please use an appropriate channel before sending confidential material.

If a personal-data incident occurs, we will investigate it and notify affected individuals or authorities when required by applicable law.

This is a business-to-business website and is not directed to children. Do not send identity documents, account credentials, payment-card details, health or biometric information, or other sensitive data in an initial enquiry unless we have specifically requested it through an agreed secure process.

Links to third-party websites or platforms are governed by their own privacy notices. We are not responsible for their independent practices.

We may update this notice when our website, processing activities or legal obligations change. The date above shows the latest revision. To ask a privacy question or exercise a right, use the most recent business channel on our Contact page or the channel through which you are already communicating with us, and mark the request Privacy.